@catladder/cli 0.0.0-refactor-image-ca767657 → 0.0.0-refactor-gcloud-auth-no-file-b43bf0d9

package/dist/bundles/cli/index.js

@@ -133,7 +133,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 exports.__esModule = true;
-var child_process_promise_1 = __nccwpck_require__(75763);
+var copyDb_1 = __nccwpck_require__(45772);
 var startProxy_1 = __nccwpck_require__(63069);
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     return __generator(this, function (_a) {
@@ -141,7 +141,7 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
                 .command("cloud-sql-restore-db", "restore a db from one source to another target")
                 .action(function restoreDb() {
                 return __awaiter(this, void 0, void 0, function () {
-                    var sourceInstance, sourceProxy, targetProxy, sourcePort, targetPort, sourceLocalPort, sourceUsername, sourcePassword, sourceDbName, targetInstance, targetLocalPort, targetUsername, targetPassword, targetDbName, shouldContinue, targetPSQL, copyDBScript;
+                    var sourceInstance, sourceProxy, targetProxy, sourcePort, targetPort, sourceLocalPort, sourceUsername, sourcePassword, sourceDbName, targetInstance, targetLocalPort, targetUsername, targetPassword, targetDbName, shouldContinue;
                     return __generator(this, function (_a) {
                         switch (_a.label) {
                             case 0: return [4 /*yield*/, this.prompt({
@@ -252,14 +252,19 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
                                 if (!shouldContinue) {
                                     return [2 /*return*/];
                                 }
-                                targetPSQL = function (command) {
-                                    return "PGPASSWORD=".concat(targetPassword, " psql -p ").concat(targetPort, " --host=localhost --user=").concat(targetUsername, " -q ").concat(command);
-                                };
-                                copyDBScript = "\n      set -e\n     \n    \n\n      dumptmp=$(mktemp /tmp/dump.XXXXXX)\n\n      echo \"Dumping file to $dumptmp\"\n      pg_dump --dbname=postgres://".concat(sourceUsername, ":").concat(sourcePassword, "@localhost:").concat(sourcePort, "/").concat(sourceDbName, " --no-owner --no-privileges > $dumptmp\n      echo \"dump done\"\n      ").concat(targetPSQL("-c 'drop database \"".concat(targetDbName, "\" WITH (FORCE)' 1> /dev/null || true")), "\n      ").concat(targetPSQL("-c 'create database \"".concat(targetDbName, "\"' 1> /dev/null")), "\n          echo \"Restoring dump...\"\n      ").concat(targetPSQL("\"".concat(targetDbName, "\" < $dumptmp 1> /dev/null")), "\n  \n\n      echo \"Clean up...\"\n      set +e\n      rm $dumptmp\n      echo \"\n\uD83D\uDC31 Done!\"\n      ");
                                 _a.label = 18;
                             case 18:
                                 _a.trys.push([18, , 20, 21]);
-                                return [4 /*yield*/, (0, child_process_promise_1.spawn)(copyDBScript, [], { shell: "bash", stdio: "inherit" })];
+                                return [4 /*yield*/, (0, copyDb_1.spawnCopyDb)({
+                                        targetPassword: targetPassword,
+                                        targetPort: targetPort,
+                                        targetUsername: targetUsername,
+                                        sourceUsername: sourceUsername,
+                                        sourcePassword: sourcePassword,
+                                        sourcePort: sourcePort,
+                                        sourceDbName: sourceDbName,
+                                        targetDbName: targetDbName
+                                    })];
                             case 19:
                                 _a.sent();
                                 return [3 /*break*/, 21];
@@ -1400,6 +1405,202 @@ exports.getProjectMongodbAllPodsSortedWithLabel = getProjectMongodbAllPodsSorted
 
 /***/ }),
 
+/***/ 38831:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+var getProjectConfig_1 = __nccwpck_require__(24146);
+var startProxy_1 = __nccwpck_require__(63069);
+var autocompletions_1 = __nccwpck_require__(41373);
+var connection_string_parser_1 = __nccwpck_require__(71004);
+var copyDb_1 = __nccwpck_require__(45772);
+exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        return [2 /*return*/, vorpal
+                .command("project-cloud-sql-restore-db", "restores a project db from one source to another target")
+                .action(function restoreDb() {
+                var _a, _b, _c, _d;
+                return __awaiter(this, void 0, void 0, function () {
+                    var envs, sourceEnvAndComponent, _e, sourceEnv, sourceComponent, sourceContext, sourceEnvVars, sourceProxy, sourceDbName, sourceUsername, sourcePassword, targetUsername, targetPassword, targetProxy, sourcePort, targetPort, targetDbName, closeAll, parser, parsersResult, targetEnvAndComponent, _f, targetEnv, targetComponent, targetContext, targetEnvVars, parser, parsersResult, shouldContinue, confirmInstance;
+                    return __generator(this, function (_g) {
+                        switch (_g.label) {
+                            case 0: return [4 /*yield*/, (0, autocompletions_1.envAndComponents)()];
+                            case 1:
+                                envs = _g.sent();
+                                return [4 /*yield*/, this.prompt({
+                                        type: "list",
+                                        name: "sourceEnvAndComponent",
+                                        choices: envs,
+                                        message: "Source instance (connection string or 'local')? 🤔 "
+                                    })];
+                            case 2:
+                                sourceEnvAndComponent = (_g.sent()).sourceEnvAndComponent;
+                                _e = sourceEnvAndComponent.split(":"), sourceEnv = _e[0], sourceComponent = _e[1];
+                                return [4 /*yield*/, (0, getProjectConfig_1.getPipelineContextByChoice)(sourceEnv, sourceComponent)];
+                            case 3:
+                                sourceContext = _g.sent();
+                                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVarsResolved)(this, sourceContext.environment.shortName, sourceContext.componentName)];
+                            case 4:
+                                sourceEnvVars = _g.sent();
+                                closeAll = function () {
+                                    sourceProxy === null || sourceProxy === void 0 ? void 0 : sourceProxy.stop();
+                                    targetProxy === null || targetProxy === void 0 ? void 0 : targetProxy.stop();
+                                };
+                                if (!(sourceEnv === "local")) return [3 /*break*/, 5];
+                                parser = new connection_string_parser_1.ConnectionStringParser({
+                                    scheme: "postgres",
+                                    hosts: []
+                                });
+                                parsersResult = parser.parse(sourceEnvVars.DATABASE_URL);
+                                sourcePort = (_b = (_a = parsersResult.hosts) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.port;
+                                sourceUsername = parsersResult.username;
+                                sourcePassword = parsersResult.password;
+                                sourceDbName = parsersResult.endpoint;
+                                return [3 /*break*/, 7];
+                            case 5:
+                                sourcePort = 54399;
+                                return [4 /*yield*/, (0, startProxy_1.startCloudSqlProxyInBackground)({
+                                        instanceName: sourceEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME,
+                                        localPort: sourcePort
+                                    })];
+                            case 6:
+                                sourceProxy = _g.sent();
+                                sourceUsername = sourceEnvVars.DB_USER;
+                                sourcePassword = sourceEnvVars.DB_PASSWORD;
+                                sourceDbName = sourceEnvVars.DB_NAME;
+                                _g.label = 7;
+                            case 7: return [4 /*yield*/, this.prompt({
+                                    type: "list",
+                                    name: "targetEnvAndComponent",
+                                    choices: envs,
+                                    message: "target env? 🤔 "
+                                })];
+                            case 8:
+                                targetEnvAndComponent = (_g.sent()).targetEnvAndComponent;
+                                _f = targetEnvAndComponent.split(":"), targetEnv = _f[0], targetComponent = _f[1];
+                                return [4 /*yield*/, (0, getProjectConfig_1.getPipelineContextByChoice)(targetEnv, targetComponent)];
+                            case 9:
+                                targetContext = _g.sent();
+                                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVarsResolved)(this, targetContext.environment.shortName, targetContext.componentName)];
+                            case 10:
+                                targetEnvVars = _g.sent();
+                                if (!(targetEnv === "local")) return [3 /*break*/, 11];
+                                parser = new connection_string_parser_1.ConnectionStringParser({
+                                    scheme: "postgres",
+                                    hosts: []
+                                });
+                                parsersResult = parser.parse(targetEnvVars.DATABASE_URL);
+                                targetPort = (_d = (_c = parsersResult.hosts) === null || _c === void 0 ? void 0 : _c[0]) === null || _d === void 0 ? void 0 : _d.port;
+                                targetUsername = parsersResult.username;
+                                targetPassword = parsersResult.password;
+                                targetDbName = parsersResult.endpoint;
+                                return [3 /*break*/, 13];
+                            case 11:
+                                targetPort = 54499;
+                                return [4 /*yield*/, (0, startProxy_1.startCloudSqlProxyInBackground)({
+                                        instanceName: targetEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME,
+                                        localPort: targetPort
+                                    })];
+                            case 12:
+                                targetProxy = _g.sent();
+                                targetUsername = targetEnvVars.DB_USER;
+                                targetPassword = targetEnvVars.DB_PASSWORD;
+                                targetDbName = targetEnvVars.DB_NAME;
+                                _g.label = 13;
+                            case 13: return [4 /*yield*/, this.prompt({
+                                    type: "confirm",
+                                    name: "shouldContinue",
+                                    message: "This will drop ".concat(targetEnv, "/").concat(targetDbName, " and replace it with ").concat(sourceEnv, "/").concat(sourceDbName, ". Continue? \uD83E\uDD14 ")
+                                })];
+                            case 14:
+                                shouldContinue = (_g.sent()).shouldContinue;
+                                if (!shouldContinue) {
+                                    this.log("abort");
+                                    closeAll();
+                                    return [2 /*return*/];
+                                }
+                                if (!(targetContext.environment.envType === "prod")) return [3 /*break*/, 16];
+                                this.log("\n\uD83D\uDEA8 You are overriding a production environment. Please type in ".concat(targetEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME, " to continue\n\n"));
+                                return [4 /*yield*/, this.prompt({
+                                        type: "input",
+                                        name: "confirmInstance",
+                                        message: "confirm: "
+                                    })];
+                            case 15:
+                                confirmInstance = (_g.sent()).confirmInstance;
+                                if (confirmInstance !== targetEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME) {
+                                    this.log("abort");
+                                    closeAll();
+                                    return [2 /*return*/];
+                                }
+                                _g.label = 16;
+                            case 16:
+                                _g.trys.push([16, , 18, 19]);
+                                return [4 /*yield*/, (0, copyDb_1.spawnCopyDb)({
+                                        targetPassword: targetPassword,
+                                        targetPort: targetPort,
+                                        targetUsername: targetUsername,
+                                        sourceUsername: sourceUsername,
+                                        sourcePassword: sourcePassword,
+                                        sourcePort: sourcePort,
+                                        sourceDbName: sourceDbName,
+                                        targetDbName: targetDbName
+                                    })];
+                            case 17:
+                                _g.sent();
+                                return [3 /*break*/, 19];
+                            case 18:
+                                closeAll();
+                                return [7 /*endfinally*/];
+                            case 19: return [2 /*return*/];
+                        }
+                    });
+                });
+            })];
+    });
+}); });
+//# sourceMappingURL=commandProjectRestoreDb.js.map
+
+/***/ }),
+
 /***/ 23526:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -1813,6 +2014,7 @@ var doItFor = function (instance, envAndComponents) { return __awaiter(void 0, v
                 return [3 /*break*/, 4];
             case 11: return [3 /*break*/, 2];
             case 12:
+                instance.log("");
                 instance.log("upserting all variables, please wait...");
                 instance.log("");
                 _f = 0, _g = Object.entries(envAndComponents);
@@ -1825,11 +2027,13 @@ var doItFor = function (instance, envAndComponents) { return __awaiter(void 0, v
             case 14:
                 if (!(_j < envs_2.length)) return [3 /*break*/, 17];
                 env = envs_2[_j];
+                instance.log("upserting " + env + ":" + componentName + "...\n");
                 return [4 /*yield*/, (0, gitlab_1.upsertAllVariables)(instance, valuesToEdit[componentName][env], env, componentName)];
             case 15:
                 _k.sent();
                 instance.log("");
                 instance.log("✅ " + env + ":" + componentName);
+                instance.log("--------------------------------\n");
                 _k.label = 16;
             case 16:
                 _j++;
@@ -4136,6 +4340,7 @@ var commandPortForward_1 = __importDefault(__nccwpck_require__(3415));
 var commandTriggerCronjob_1 = __importDefault(__nccwpck_require__(51827));
 var commandOpenGrafanaPod_1 = __importDefault(__nccwpck_require__(55848));
 var commandSecretsClearBackups_1 = __importDefault(__nccwpck_require__(41863));
+var commandProjectRestoreDb_1 = __importDefault(__nccwpck_require__(38831));
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     return __generator(this, function (_a) {
         (0, commandSetup_1["default"])(vorpal);
@@ -4150,6 +4355,7 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
         (0, commandOpenGrafana_1["default"])(vorpal);
         (0, commandOpenGrafanaPod_1["default"])(vorpal);
         (0, commandCloudSqlProxy_1["default"])(vorpal);
+        (0, commandProjectRestoreDb_1["default"])(vorpal);
         (0, commandOpenGit_1["default"])(vorpal);
         (0, commandOpenEnv_1["default"])(vorpal);
         (0, commandTriggerCronjob_1["default"])(vorpal);
@@ -6672,135 +6878,7 @@ exports.openGoogleCloudRunDashboard = openGoogleCloudRunDashboard;
 
 /***/ }),
 
-/***/ 63069:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
-
-"use strict";
-
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-exports.__esModule = true;
-exports.startCloudSqlProxyInBackground = exports.startCloudSqlProxyInCurrentShell = exports.ERROR_NOT_INSTALLED = void 0;
-var child_process_promise_1 = __nccwpck_require__(75763);
-var command_exists_promise_1 = __importDefault(__nccwpck_require__(80133));
-exports.ERROR_NOT_INSTALLED = "cloud-sql-proxy not installed";
-var getProxyCommandSpawnArgs = function (_a) {
-    var localPort = _a.localPort, instanceName = _a.instanceName;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var commandString, _b, _c, cmd, args;
-        return __generator(this, function (_d) {
-            switch (_d.label) {
-                case 0: return [4 /*yield*/, (0, command_exists_promise_1["default"])("cloud-sql-proxy")];
-                case 1:
-                    if (!(_d.sent())) return [3 /*break*/, 2];
-                    _b = "cloud-sql-proxy --port ".concat(localPort, " ").concat(instanceName);
-                    return [3 /*break*/, 4];
-                case 2: return [4 /*yield*/, (0, command_exists_promise_1["default"])("cloud_sql_proxy" // v1
-                    )];
-                case 3:
-                    _b = (_d.sent())
-                        ? "cloud_sql_proxy -instances ".concat(instanceName, "=tcp:").concat(localPort)
-                        : null;
-                    _d.label = 4;
-                case 4:
-                    commandString = _b;
-                    if (!commandString) {
-                        throw new Error(exports.ERROR_NOT_INSTALLED);
-                    }
-                    _c = commandString.split(" "), cmd = _c[0], args = _c.slice(1);
-                    return [2 /*return*/, { cmd: cmd, args: args }];
-            }
-        });
-    });
-};
-var startCloudSqlProxyInCurrentShell = function (opts) { return __awaiter(void 0, void 0, void 0, function () {
-    var _a, cmd, args;
-    return __generator(this, function (_b) {
-        switch (_b.label) {
-            case 0: return [4 /*yield*/, getProxyCommandSpawnArgs(opts)];
-            case 1:
-                _a = _b.sent(), cmd = _a.cmd, args = _a.args;
-                return [4 /*yield*/, (0, child_process_promise_1.spawn)(cmd, args, {
-                        stdio: "inherit",
-                        shell: true
-                    })];
-            case 2:
-                _b.sent();
-                return [2 /*return*/];
-        }
-    });
-}); };
-exports.startCloudSqlProxyInCurrentShell = startCloudSqlProxyInCurrentShell;
-var startCloudSqlProxyInBackground = function (opts) { return __awaiter(void 0, void 0, void 0, function () {
-    var _a, cmd, args, proxyPromise, stop;
-    return __generator(this, function (_b) {
-        switch (_b.label) {
-            case 0: return [4 /*yield*/, getProxyCommandSpawnArgs(opts)];
-            case 1:
-                _a = _b.sent(), cmd = _a.cmd, args = _a.args;
-                proxyPromise = (0, child_process_promise_1.spawn)(cmd, args, { shell: "bash" });
-                // wait until it starts
-                return [4 /*yield*/, (0, child_process_promise_1.spawn)("echo -n \"Waiting for proxy\"\n      until echo > /dev/tcp/localhost/".concat(opts.localPort, "; do\n        sleep 0.2\n        echo -n \".\"\n      done 2>/dev/null"), [], { shell: "bash" })];
-            case 2:
-                // wait until it starts
-                _b.sent();
-                stop = function () {
-                    proxyPromise["catch"](function () {
-                        // ignore
-                    });
-                    proxyPromise.childProcess.kill();
-                };
-                // stop if catladder i stopped
-                process.on("beforeExit", stop);
-                return [2 /*return*/, {
-                        stop: stop
-                    }];
-        }
-    });
-}); };
-exports.startCloudSqlProxyInBackground = startCloudSqlProxyInBackground;
-//# sourceMappingURL=startProxy.js.map
-
-/***/ }),
-
-/***/ 4895:
+/***/ 45772:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -6842,35 +6920,234 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 exports.__esModule = true;
-exports.enableGCloudServices = void 0;
+exports.spawnCopyDb = void 0;
 var child_process_promise_1 = __nccwpck_require__(75763);
-var enableGCloudServices = function (services, config) { return __awaiter(void 0, void 0, void 0, function () {
-    var _i, services_1, service;
+var spawnCopyDb = function (opts) { return __awaiter(void 0, void 0, void 0, function () {
+    var script;
     return __generator(this, function (_a) {
         switch (_a.label) {
             case 0:
-                _i = 0, services_1 = services;
-                _a.label = 1;
-            case 1:
-                if (!(_i < services_1.length)) return [3 /*break*/, 4];
-                service = services_1[_i];
-                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud services enable ".concat(service, " --project=").concat(config.projectId))];
-            case 2:
-                _a.sent();
-                _a.label = 3;
-            case 3:
-                _i++;
-                return [3 /*break*/, 1];
-            case 4: return [2 /*return*/];
+                script = createCopyDbScript(opts);
+                return [4 /*yield*/, (0, child_process_promise_1.spawn)(script, [], {
+                        shell: "bash",
+                        stdio: "inherit"
+                    })];
+            case 1: return [2 /*return*/, _a.sent()];
         }
     });
 }); };
-exports.enableGCloudServices = enableGCloudServices;
-//# sourceMappingURL=enableServices.js.map
+exports.spawnCopyDb = spawnCopyDb;
+var createCopyDbScript = function (_a) {
+    var targetPassword = _a.targetPassword, targetPort = _a.targetPort, targetUsername = _a.targetUsername, sourceUsername = _a.sourceUsername, sourcePassword = _a.sourcePassword, sourcePort = _a.sourcePort, sourceDbName = _a.sourceDbName, targetDbName = _a.targetDbName;
+    var targetPSQL = function (command) {
+        return "PGPASSWORD=".concat(targetPassword, " psql -p ").concat(targetPort, " --host=localhost --user=").concat(targetUsername, " -q ").concat(command);
+    };
+    var copyDBScript = "\n      set -e\n     \n    \n\n      dumptmp=$(mktemp /tmp/dump.XXXXXX)\n\n      echo \"Dumping file to $dumptmp\"\n      pg_dump --dbname=postgres://".concat(sourceUsername, ":").concat(sourcePassword, "@localhost:").concat(sourcePort, "/").concat(sourceDbName, " --no-owner --no-privileges > $dumptmp\n      echo \"dump done\"\n      ").concat(targetPSQL("-c 'drop database \"".concat(targetDbName, "\" WITH (FORCE)' 1> /dev/null || true")), "\n      ").concat(targetPSQL("-c 'create database \"".concat(targetDbName, "\"' 1> /dev/null")), "\n          echo \"Restoring dump...\"\n      ").concat(targetPSQL("\"".concat(targetDbName, "\" < $dumptmp 1> /dev/null")), "\n  \n\n      echo \"Clean up...\"\n      set +e\n      rm $dumptmp\n      echo \"\n\uD83D\uDC31 Done!\"\n      ");
+    return copyDBScript;
+};
+//# sourceMappingURL=copyDb.js.map
 
 /***/ }),
 
-/***/ 41087:
+/***/ 63069:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+exports.__esModule = true;
+exports.startCloudSqlProxyInBackground = exports.startCloudSqlProxyInCurrentShell = exports.ERROR_NOT_INSTALLED = void 0;
+var child_process_promise_1 = __nccwpck_require__(75763);
+var command_exists_promise_1 = __importDefault(__nccwpck_require__(80133));
+exports.ERROR_NOT_INSTALLED = "cloud-sql-proxy not installed";
+var getProxyCommandSpawnArgs = function (_a) {
+    var localPort = _a.localPort, instanceName = _a.instanceName;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var commandString, _b, _c, cmd, args;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0: return [4 /*yield*/, (0, command_exists_promise_1["default"])("cloud-sql-proxy")];
+                case 1:
+                    if (!(_d.sent())) return [3 /*break*/, 2];
+                    _b = "cloud-sql-proxy --port ".concat(localPort, " ").concat(instanceName);
+                    return [3 /*break*/, 4];
+                case 2: return [4 /*yield*/, (0, command_exists_promise_1["default"])("cloud_sql_proxy" // v1
+                    )];
+                case 3:
+                    _b = (_d.sent())
+                        ? "cloud_sql_proxy -instances ".concat(instanceName, "=tcp:").concat(localPort)
+                        : null;
+                    _d.label = 4;
+                case 4:
+                    commandString = _b;
+                    if (!commandString) {
+                        throw new Error(exports.ERROR_NOT_INSTALLED);
+                    }
+                    _c = commandString.split(" "), cmd = _c[0], args = _c.slice(1);
+                    return [2 /*return*/, { cmd: cmd, args: args }];
+            }
+        });
+    });
+};
+var startCloudSqlProxyInCurrentShell = function (opts) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, cmd, args;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0: return [4 /*yield*/, getProxyCommandSpawnArgs(opts)];
+            case 1:
+                _a = _b.sent(), cmd = _a.cmd, args = _a.args;
+                return [4 /*yield*/, (0, child_process_promise_1.spawn)(cmd, args, {
+                        stdio: "inherit",
+                        shell: true
+                    })];
+            case 2:
+                _b.sent();
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.startCloudSqlProxyInCurrentShell = startCloudSqlProxyInCurrentShell;
+var startCloudSqlProxyInBackground = function (opts) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, cmd, args, proxyPromise, stop;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0: return [4 /*yield*/, getProxyCommandSpawnArgs(opts)];
+            case 1:
+                _a = _b.sent(), cmd = _a.cmd, args = _a.args;
+                proxyPromise = (0, child_process_promise_1.spawn)(cmd, args, { shell: "bash" });
+                // wait until it starts
+                return [4 /*yield*/, (0, child_process_promise_1.spawn)("echo -n \"Waiting for proxy\"\n      until echo > /dev/tcp/localhost/".concat(opts.localPort, "; do\n        sleep 0.2\n        echo -n \".\"\n      done 2>/dev/null"), [], { shell: "bash" })];
+            case 2:
+                // wait until it starts
+                _b.sent();
+                stop = function () {
+                    proxyPromise["catch"](function () {
+                        // ignore
+                    });
+                    proxyPromise.childProcess.kill();
+                };
+                // stop if catladder i stopped
+                process.on("beforeExit", stop);
+                return [2 /*return*/, {
+                        stop: stop
+                    }];
+        }
+    });
+}); };
+exports.startCloudSqlProxyInBackground = startCloudSqlProxyInBackground;
+//# sourceMappingURL=startProxy.js.map
+
+/***/ }),
+
+/***/ 4895:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.enableGCloudServices = void 0;
+var child_process_promise_1 = __nccwpck_require__(75763);
+var enableGCloudServices = function (services, config) { return __awaiter(void 0, void 0, void 0, function () {
+    var _i, services_1, service;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _i = 0, services_1 = services;
+                _a.label = 1;
+            case 1:
+                if (!(_i < services_1.length)) return [3 /*break*/, 4];
+                service = services_1[_i];
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud services enable ".concat(service, " --project=").concat(config.projectId))];
+            case 2:
+                _a.sent();
+                _a.label = 3;
+            case 3:
+                _i++;
+                return [3 /*break*/, 1];
+            case 4: return [2 /*return*/];
+        }
+    });
+}); };
+exports.enableGCloudServices = enableGCloudServices;
+//# sourceMappingURL=enableServices.js.map
+
+/***/ }),
+
+/***/ 41087:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -135473,6 +135750,152 @@ var isArray = Array.isArray || function (xs) {
 };
 
 
+/***/ }),
+
+/***/ 71004:
+/***/ ((module, exports) => {
+
+// MIT License
+(function (factory) {
+    if ( true && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function () {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", ({ value: true }));
+    exports.ConnectionStringParser = void 0;
+    class ConnectionStringParser {
+        constructor(options) {
+            this.scheme = (options && options.scheme) || ConnectionStringParser.DEFAULT_SCHEME;
+        }
+        /**
+         * Takes a connection string object and returns a URI string of the form:
+         *
+         * scheme://[username[:password]@]host1[:port1][,host2[:port2],...[,hostN[:portN]]][/[endpoint]][?options]
+         * @param connectionStringObject The object that describes connection string parameters
+         */
+        format(connectionStringObject) {
+            if (!connectionStringObject) {
+                return this.scheme + "://localhost";
+            }
+            if (this.scheme && connectionStringObject.scheme && this.scheme !== connectionStringObject.scheme) {
+                throw new Error(`Scheme not supported: ${connectionStringObject.scheme}`);
+            }
+            let uri = (this.scheme || connectionStringObject.scheme || ConnectionStringParser.DEFAULT_SCHEME) + "://";
+            if (connectionStringObject.username) {
+                uri += encodeURIComponent(connectionStringObject.username);
+                // Allow empty passwords
+                if (connectionStringObject.password) {
+                    uri += ":" + encodeURIComponent(connectionStringObject.password);
+                }
+                uri += "@";
+            }
+            uri += this._formatAddress(connectionStringObject);
+            // Only put a slash when there is an endpoint
+            if (connectionStringObject.endpoint) {
+                uri += "/" + encodeURIComponent(connectionStringObject.endpoint);
+            }
+            if (connectionStringObject.options && Object.keys(connectionStringObject.options).length > 0) {
+                uri += "?" + Object.keys(connectionStringObject.options)
+                    .map((option) => encodeURIComponent(option) + "=" + encodeURIComponent(connectionStringObject.options[option]))
+                    .join("&");
+            }
+            return uri;
+        }
+        /**
+         * Takes a connection string URI of form:
+         *
+         *   scheme://[username[:password]@]host1[:port1][,host2[:port2],...[,hostN[:portN]]][/[endpoint]][?options]
+         *
+         * and returns an object of form:
+         *
+         *   {
+         *     scheme: string,
+         *     username?: string,
+         *     password?: string,
+         *     hosts: [ { host: string, port?: number }, ... ],
+         *     endpoint?: string,
+         *     options?: object
+         *   }
+         *
+         * Where scheme and hosts will always be present. Other fields will only be present in the result if they were
+         * present in the input.
+         * @param uri The connection string URI
+         */
+        parse(uri) {
+            const connectionStringParser = new RegExp("^\\s*" + // Optional whitespace padding at the beginning of the line
+                "([^:]+)://" + // Scheme (Group 1)
+                "(?:([^:@,/?=&]+)(?::([^:@,/?=&]+))?@)?" + // User (Group 2) and Password (Group 3)
+                "([^@/?=&]+)" + // Host address(es) (Group 4)
+                "(?:/([^:@,/?=&]+)?)?" + // Endpoint (Group 5)
+                "(?:\\?([^:@,/?]+)?)?" + // Options (Group 6)
+                "\\s*$", // Optional whitespace padding at the end of the line
+            "gi");
+            const connectionStringObject = {};
+            if (!uri.includes("://")) {
+                throw new Error(`No scheme found in URI ${uri}`);
+            }
+            const tokens = connectionStringParser.exec(uri);
+            if (Array.isArray(tokens)) {
+                connectionStringObject.scheme = tokens[1];
+                if (this.scheme && this.scheme !== connectionStringObject.scheme) {
+                    throw new Error(`URI must start with '${this.scheme}://'`);
+                }
+                connectionStringObject.username = tokens[2] ? decodeURIComponent(tokens[2]) : tokens[2];
+                connectionStringObject.password = tokens[3] ? decodeURIComponent(tokens[3]) : tokens[3];
+                connectionStringObject.hosts = this._parseAddress(tokens[4]);
+                connectionStringObject.endpoint = tokens[5] ? decodeURIComponent(tokens[5]) : tokens[5];
+                connectionStringObject.options = tokens[6] ? this._parseOptions(tokens[6]) : tokens[6];
+            }
+            return connectionStringObject;
+        }
+        /**
+         * Formats the address portion of a connection string
+         * @param connectionStringObject The object that describes connection string parameters
+         */
+        _formatAddress(connectionStringObject) {
+            return connectionStringObject.hosts
+                .map((address) => encodeURIComponent(address.host) + (address.port ? ":" + encodeURIComponent(address.port.toString(10)) : ""))
+                .join(",");
+        }
+        /**
+         * Parses an address
+         * @param addresses The address(es) to process
+         */
+        _parseAddress(addresses) {
+            return addresses.split(",")
+                .map((address) => {
+                const i = address.indexOf(":");
+                return (i >= 0 ?
+                    { host: decodeURIComponent(address.substring(0, i)), port: +address.substring(i + 1) } :
+                    { host: decodeURIComponent(address) });
+            });
+        }
+        /**
+         * Parses options
+         * @param options The options to process
+         */
+        _parseOptions(options) {
+            const result = {};
+            options.split("&")
+                .forEach((option) => {
+                const i = option.indexOf("=");
+                if (i >= 0) {
+                    result[decodeURIComponent(option.substring(0, i))] = decodeURIComponent(option.substring(i + 1));
+                }
+            });
+            return result;
+        }
+    }
+    exports.ConnectionStringParser = ConnectionStringParser;
+    ConnectionStringParser.DEFAULT_SCHEME = "db";
+});
+
+
 /***/ }),
 
 /***/ 10968:
@@ -353250,7 +353673,6 @@ exports.RUNNER_BUILD_RESOURCE_VARIABLES = exports.APP_BUILD_JOB_NAME = void 0;
 exports.APP_BUILD_JOB_NAME = "🔨 app";
 exports.RUNNER_BUILD_RESOURCE_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
-  KUBERNETES_CPU_LIMIT: "2",
   KUBERNETES_MEMORY_REQUEST: "1Gi",
   KUBERNETES_MEMORY_LIMIT: "4Gi"
 };
@@ -353606,7 +354028,6 @@ var types_1 = __nccwpck_require__(71197);
 var base_1 = __nccwpck_require__(18035);
 var RUNNER_BUILD_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
-  KUBERNETES_CPU_LIMIT: "2",
   KUBERNETES_MEMORY_REQUEST: "2Gi",
   KUBERNETES_MEMORY_LIMIT: "4Gi"
 };
@@ -353631,7 +354052,7 @@ var createCustomBuildJobs = function (context) {
       }
     } : undefined,
     dockerBuild: {
-      script: (0, docker_1.getDockerBuildDefaultScript)(((_d = buildConfig.docker) === null || _d === void 0 ? void 0 : _d.type) === "nginx" ? "ensureNginxDockerfile" : ""),
+      script: (0, docker_1.getDockerBuildDefaultScript)(context, ((_d = buildConfig.docker) === null || _d === void 0 ? void 0 : _d.type) === "nginx" ? "ensureNginxDockerfile" : ""),
       variables: {}
     }
   });
@@ -353742,7 +354163,6 @@ var types_1 = __nccwpck_require__(71197);
 var createArtifactsConfig_1 = __nccwpck_require__(5669);
 var RUNNER_CUSTOM_TEST_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
-  KUBERNETES_CPU_LIMIT: "2",
   KUBERNETES_MEMORY_REQUEST: "2Gi",
   KUBERNETES_MEMORY_LIMIT: "4Gi"
 };
@@ -353816,26 +354236,73 @@ var __rest = this && this.__rest || function (s, e) {
   }
   return t;
 };
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+var __importDefault = this && this.__importDefault || function (mod) {
+  return mod && mod.__esModule ? mod : {
+    "default": mod
+  };
+};
 exports.__esModule = true;
-exports.getDockerBuildDefaultScript = exports.gitlabDockerLogin = exports.createDockerBuildJobBase = exports.getDockerJobBaseProps = exports.DOCKER_BUILD_JOB_NAME = exports.getDockerBuildVariables = exports.requiresDockerBuild = exports.getDockerImageVariables = void 0;
+exports.hasDockerfile = exports.getDockerBuildDefaultScript = exports.gitlabDockerLogin = exports.createDockerBuildJobBase = exports.getDockerJobBaseProps = exports.DOCKER_BUILD_JOB_NAME = exports.getDockerBuildVariables = exports.requiresDockerBuild = exports.getDockerImageVariables = void 0;
 var lodash_1 = __nccwpck_require__(23255);
 var deploy_1 = __nccwpck_require__(90223);
 var runner_1 = __nccwpck_require__(55071);
+var fs_1 = __nccwpck_require__(57147);
+var path_1 = __importDefault(__nccwpck_require__(71017));
+var gitlab_1 = __nccwpck_require__(84997);
+var artifactsRegistry_1 = __nccwpck_require__(28159);
+var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
 var DOCKER_RUNNER_BUILD_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
-  KUBERNETES_CPU_LIMIT: "1",
   KUBERNETES_MEMORY_REQUEST: "1Gi",
   KUBERNETES_MEMORY_LIMIT: "2Gi"
 };
 var getDockerImageVariables = function (context) {
-  return {
+  return __assign(__assign({}, (0, deploy_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun") ? {
+    DOCKER_REGISTRY: (0, artifactsRegistry_1.getArtifactsRegistryHost)(context),
+    DOCKER_IMAGE: (0, artifactsRegistry_1.getArtifactsRegistryImageName)(context),
+    DOCKER_CACHE_IMAGE: (0, artifactsRegistry_1.getArtifactsRegistryBuildCacheImage)(context)
+  } :
+  // gitlab registry:
+  {
     DOCKER_REGISTRY: "$CI_REGISTRY",
-    DOCKER_REGISTRY_IMAGE_PATH: "$CI_REGISTRY_IMAGE",
-    DOCKER_CACHE_IMAGE: "$DOCKER_REGISTRY_IMAGE_PATH/caches/" + context.componentName,
+    DOCKER_CACHE_IMAGE: "$CI_REGISTRY_IMAGE/caches/" + context.componentName,
+    // ONLY USED IN KUBERNETES
     DOCKER_IMAGE_NAME: context.environment.shortName + "/" + context.componentName,
-    DOCKER_IMAGE: "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
+    DOCKER_IMAGE: "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"
+  }), {
     DOCKER_IMAGE_TAG: "$CI_COMMIT_SHA"
-  };
+  });
 };
 exports.getDockerImageVariables = getDockerImageVariables;
 /**
@@ -353869,7 +354336,7 @@ var getDockerJobBaseProps = function (context) {
   return {
     image: (0, runner_1.getRunnerImage)("docker-build"),
     services: [{
-      name: "docker:20-dind",
+      name: "docker:24.0.6-dind",
       command: ["--tls=false"]
     }],
     variables: getDockerBaseVariables()
@@ -353890,11 +354357,19 @@ var createDockerBuildJobBase = function (context, _a) {
   }, def);
 };
 exports.createDockerBuildJobBase = createDockerBuildJobBase;
-exports.gitlabDockerLogin = "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY";
-var getDockerBuildDefaultScript = function (ensureDockerFileScript) {
-  return [ensureDockerFileScript, exports.gitlabDockerLogin, "docker version", "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1", "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE", "docker push $DOCKER_CACHE_IMAGE"].filter(Boolean);
+var gitlabDockerLogin = function (context) {
+  return (0, deploy_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun") ? __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat((0, artifactsRegistry_1.getArtifactsRegistryHost)(context))], false) : ["docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY"];
+};
+exports.gitlabDockerLogin = gitlabDockerLogin;
+var getDockerBuildDefaultScript = function (context, ensureDockerFileScript) {
+  return __spreadArray(__spreadArray(__spreadArray([ensureDockerFileScript], __read((0, gitlab_1.collapseableSection)("docker-login", "Docker Login")((0, exports.gitlabDockerLogin)(context))), false), __read((0, gitlab_1.collapseableSection)("docker-build", "Docker build")(["docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1" //BUILDKIT_INLINE_CACHE,  see https://testdriven.io/blog/faster-ci-builds-with-docker-cache/
+  ])), false), __read((0, gitlab_1.collapseableSection)("docker-push", "Docker push and tag")(["docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE", "docker push $DOCKER_CACHE_IMAGE"])), false).filter(Boolean);
 };
 exports.getDockerBuildDefaultScript = getDockerBuildDefaultScript;
+var hasDockerfile = function (context) {
+  return (0, fs_1.existsSync)(path_1["default"].join(context.componentConfig.dir, "Dockerfile"));
+};
+exports.hasDockerfile = hasDockerfile;
 
 /***/ }),
 
@@ -353972,8 +354447,8 @@ exports.BUILD_TYPES = {
       return {
         startCommand: "/cnb/process/web",
         cnbBuilder: {
-          image: "heroku/buildpacks:20",
-          packVersion: "0.28.0"
+          image: "heroku/builder:22",
+          packVersion: "0.32.1"
         }
       };
     }
@@ -354055,15 +354530,19 @@ var createNodeBuildJobs = function (context) {
       cache: __spreadArray(__spreadArray(__spreadArray([], __read((_b = (0, utils_1.ensureArray)(buildConfig.jobCache)) !== null && _b !== void 0 ? _b : []), false), __read((0, cache_1.getNodeCache)(context)), false), __read((0, cache_1.getNextCache)(context)), false),
       script: __spreadArray(__spreadArray([], __read(yarnInstall), false), __read((_c = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _c !== void 0 ? _c : []), false),
       artifacts: {
-        paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "__build_info.json"), (0, path_1.join)(context.componentConfig.dir, "dist"), (0, path_1.join)(context.componentConfig.dir, ".next")], __read((_e = (_d = buildConfig.artifactsPaths) === null || _d === void 0 ? void 0 : _d.map(function (path) {
-          return (0, path_1.join)(context.componentConfig.dir, path);
-        })) !== null && _e !== void 0 ? _e : []), false),
-        expire_in: "1 day"
+        paths: __spreadArray([context.componentConfig.dir], __read((_e = (_d = context.packageManagerInfo) === null || _d === void 0 ? void 0 : _d.currentWorkspaceDependencies) !== null && _e !== void 0 ? _e : []), false).flatMap(function (dir) {
+          var _a, _b;
+          return __spreadArray([(0, path_1.join)(dir, "__build_info.json"), (0, path_1.join)(dir, "dist"), (0, path_1.join)(dir, ".next")], __read((_b = (_a = buildConfig.artifactsPaths) === null || _a === void 0 ? void 0 : _a.map(function (path) {
+            return (0, path_1.join)(dir, path);
+          })) !== null && _b !== void 0 ? _b : []), false);
+        }),
+        expire_in: "1 day",
+        when: "always"
       },
       jobTags: buildConfig.jobTags
     } : undefined,
     dockerBuild: {
-      script: (0, docker_1.getDockerBuildDefaultScript)(buildConfig.type === "node-static" || buildConfig.type === "storybook" ? "ensureNginxDockerfile" : "ensureNodeDockerfile"),
+      script: (0, docker_1.getDockerBuildDefaultScript)(context, buildConfig.type === "node-static" || buildConfig.type === "storybook" ? "ensureNginxDockerfile" : "ensureNodeDockerfile"),
       cache: __spreadArray([], __read((0, cache_1.getYarnCache)(context, "pull")), false),
       variables: {
         // only required for non static
@@ -354125,6 +354604,7 @@ exports.__esModule = true;
 exports.getNextCache = exports.getNodeCache = exports.getNodeModulesCache = exports.getYarnCache = void 0;
 var path_1 = __nccwpck_require__(71017);
 var slugify_1 = __importDefault(__nccwpck_require__(44035));
+var lodash_1 = __nccwpck_require__(23255);
 var getYarnCache = function (context, policy) {
   var _a;
   if (policy === void 0) {
@@ -354154,9 +354634,9 @@ var getNodeModulesCache = function (context, policy) {
     // if component is in a shared workspace, use workspace cache. use individual cache else
     key: componentIsInWorkspace ? "node-modules-workspace" : (0, slugify_1["default"])(context.componentConfig.dir) + "-node-modules",
     policy: policy,
-    paths: __spreadArray([], __read(componentIsInWorkspace ? __spreadArray(["node_modules"], __read((_c = (_b = context.packageManagerInfo) === null || _b === void 0 ? void 0 : _b.workspaces.map(function (w) {
+    paths: __spreadArray([], __read(componentIsInWorkspace ? (0, lodash_1.uniq)(__spreadArray(["node_modules"], __read((_c = (_b = context.packageManagerInfo) === null || _b === void 0 ? void 0 : _b.workspaces.map(function (w) {
       return (0, path_1.join)(w.location, "node_modules");
-    })) !== null && _c !== void 0 ? _c : []), false) : [(0, path_1.join)(context.componentConfig.dir, "node_modules")]), false)
+    })) !== null && _c !== void 0 ? _c : []), false)) : [(0, path_1.join)(context.componentConfig.dir, "node_modules")]), false)
   }];
 };
 exports.getNodeModulesCache = getNodeModulesCache;
@@ -354188,7 +354668,6 @@ exports.__esModule = true;
 exports.NODE_RUNNER_BUILD_VARIABLES = void 0;
 exports.NODE_RUNNER_BUILD_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
-  KUBERNETES_CPU_LIMIT: "2",
   KUBERNETES_MEMORY_REQUEST: "2Gi",
   KUBERNETES_MEMORY_LIMIT: "4Gi"
 };
@@ -354324,7 +354803,7 @@ var createMeteorBuildJobs = function (context) {
       }
     } : undefined,
     dockerBuild: {
-      script: (0, docker_1.getDockerBuildDefaultScript)("ensureMeteorDockerfile"),
+      script: (0, docker_1.getDockerBuildDefaultScript)(context, "ensureMeteorDockerfile"),
       variables: {
         METEOR_INSTALL_SCRIPTS: buildConfig.installScripts ? "true" : ""
       }
@@ -354421,14 +354900,14 @@ var createNodeTestJobs = function (context) {
   }, base), {
     image: (_l = (_k = buildConfig.lint) === null || _k === void 0 ? void 0 : _k.jobImage) !== null && _l !== void 0 ? _l : defaultImage,
     cache: (0, cache_1.getNodeCache)(context),
-    script: __spreadArray(__spreadArray(["cd ".concat(context.componentConfig.dir)], __read(yarnInstall), false), __read((_o = (0, utils_1.ensureArray)((_m = buildConfig.lint) === null || _m === void 0 ? void 0 : _m.command)) !== null && _o !== void 0 ? _o : ["yarn lint"]), false)
+    script: __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, yarn_1.ensureNodeVersion)(context)), false), ["cd ".concat(context.componentConfig.dir)], false), __read(yarnInstall), false), __read((_o = (0, utils_1.ensureArray)((_m = buildConfig.lint) === null || _m === void 0 ? void 0 : _m.command)) !== null && _o !== void 0 ? _o : ["yarn lint"]), false)
   }), (0, createArtifactsConfig_1.createArtifactsConfig)(context.componentConfig.dir, (_p = buildConfig.lint) === null || _p === void 0 ? void 0 : _p.artifactsReports, (_q = buildConfig.lint) === null || _q === void 0 ? void 0 : _q.artifacts)) : null;
   var testJob = buildConfig.test !== false ? __assign(__assign(__assign({
     name: "🧪 test"
   }, base), {
     image: (_s = (_r = buildConfig.test) === null || _r === void 0 ? void 0 : _r.jobImage) !== null && _s !== void 0 ? _s : (0, runner_1.getRunnerImage)("jobs-testing-chrome"),
     cache: (0, cache_1.getNodeCache)(context),
-    script: __spreadArray(__spreadArray(["cd ".concat(context.componentConfig.dir)], __read(yarnInstall), false), __read((_u = (0, utils_1.ensureArray)((_t = buildConfig.test) === null || _t === void 0 ? void 0 : _t.command)) !== null && _u !== void 0 ? _u : ["yarn test"]), false)
+    script: __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, yarn_1.ensureNodeVersion)(context)), false), ["cd ".concat(context.componentConfig.dir)], false), __read(yarnInstall), false), __read((_u = (0, utils_1.ensureArray)((_t = buildConfig.test) === null || _t === void 0 ? void 0 : _t.command)) !== null && _u !== void 0 ? _u : ["yarn test"]), false)
   }), (0, createArtifactsConfig_1.createArtifactsConfig)(context.componentConfig.dir, (_v = buildConfig.test) === null || _v === void 0 ? void 0 : _v.artifactsReports, (_w = buildConfig.test) === null || _w === void 0 ? void 0 : _w.artifacts)) : null;
   return [auditJob, lintJob, testJob].filter(utils_1.notNil);
 };
@@ -354476,6 +354955,7 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
 exports.__esModule = true;
 exports.getDockerAppCopyAndBuildScript = exports.getYarnInstall = exports.ensureNodeVersion = void 0;
 var utils_1 = __nccwpck_require__(37461);
+var gitlab_1 = __nccwpck_require__(84997);
 var YARN_INSTALL_CLASSIC = "yarn install --frozen-lockfile";
 // FIXME: check why and when rebuild is needed
 var YARN_BERRY_PROD_REBUILD = "yarn workspaces focus --production && yarn rebuild";
@@ -354487,13 +354967,13 @@ var getYarnInstallCommand = function (context) {
   return "yarn install --immutable";
 };
 var ensureNodeVersion = function (context) {
-  return ["if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi", "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi"];
+  return (0, gitlab_1.collapseableSection)("nodeinstall", "Ensure node version")(["if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi", "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi"]);
 };
 exports.ensureNodeVersion = ensureNodeVersion;
 var getYarnInstall = function (context, options) {
   var _a;
   var postInstall = "postInstall" in context.componentConfig.build ? context.componentConfig.build.postInstall : null;
-  return __spreadArray(__spreadArray(__spreadArray([], __read((0, exports.ensureNodeVersion)(context)), false), [getYarnInstallCommand(context)], false), __read(postInstall && !(options === null || options === void 0 ? void 0 : options.noCustomPostInstall) ? (_a = (0, utils_1.ensureArray)(postInstall)) !== null && _a !== void 0 ? _a : [] : []), false);
+  return __spreadArray(__spreadArray(__spreadArray([], __read((0, exports.ensureNodeVersion)(context)), false), __read((0, gitlab_1.collapseableSection)("yarninstall", "Yarn install")([getYarnInstallCommand(context)])), false), __read(postInstall && !(options === null || options === void 0 ? void 0 : options.noCustomPostInstall) ? (0, gitlab_1.collapseableSection)("postinstall", "Custom post install")((_a = (0, utils_1.ensureArray)(postInstall)) !== null && _a !== void 0 ? _a : []) : []), false);
 };
 exports.getYarnInstall = getYarnInstall;
 var DOCKER_COPY_FILES = "COPY --chown=node:node $APP_DIR .";
@@ -354555,6 +355035,15 @@ var __read = this && this.__read || function (o, n) {
   }
   return ar;
 };
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
 exports.__esModule = true;
 exports.createRailsBuildJobs = void 0;
 var base_1 = __nccwpck_require__(18035);
@@ -354567,6 +355056,15 @@ var createRailsBuildJobs = function (context) {
     // should not happen
     throw new Error("build type is not rails");
   }
+  if ((0, docker_1.hasDockerfile)(context)) {
+    return (0, base_1.createBuildJobs)(context, {
+      appBuild: undefined,
+      dockerBuild: {
+        script: (0, docker_1.getDockerBuildDefaultScript)(context),
+        variables: {}
+      }
+    });
+  }
   var cnbConf = buildConfig.cnbBuilder;
   var packEnvArgs = Object.entries((_a = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.buildVars) !== null && _a !== void 0 ? _a : {}).map(function (_a) {
     var _b = __read(_a, 2),
@@ -354579,9 +355077,9 @@ var createRailsBuildJobs = function (context) {
     dockerBuild: {
       variables: __assign(__assign({}, context.environment.jobOnlyVars.build.envVars), context.componentConfig.build.extraVars),
       // custom script
-      script: [docker_1.gitlabDockerLogin, "docker pull $DOCKER_CACHE_IMAGE || true", "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "/pack-v").concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "-linux.tgz | tar -zx --directory /usr/local/bin pack"), "chmod +x /usr/local/bin/pack",
+      script: __spreadArray(__spreadArray([], __read((0, docker_1.gitlabDockerLogin)(context)), false), ["docker pull $DOCKER_CACHE_IMAGE || true", "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "/pack-v").concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "-linux.tgz | tar -zx --directory /usr/local/bin pack"), "chmod +x /usr/local/bin/pack",
       //  replace private git ssh gem sources with https to make bundler with credentials via env var work
-      "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock", "pack build \"$DOCKER_IMAGE:$DOCKER_IMAGE_TAG\" --builder '".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.image, "' --publish --cache-image \"$DOCKER_CACHE_IMAGE\" ").concat(packEnvArgs, " ").concat((_c = (_b = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packExtraArgs) === null || _b === void 0 ? void 0 : _b.join(" ")) !== null && _c !== void 0 ? _c : "")]
+      "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock", "pack build \"$DOCKER_IMAGE:$DOCKER_IMAGE_TAG\" --builder '".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.image, "' --publish --cache-image \"$DOCKER_CACHE_IMAGE\" ").concat(packEnvArgs, " ").concat((_c = (_b = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packExtraArgs) === null || _b === void 0 ? void 0 : _b.join(" ")) !== null && _c !== void 0 ? _c : "")], false)
     }
   });
 };
@@ -354964,7 +355462,7 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "refactor-image-ca767657" || 0;
+exports.PIPELINE_IMAGE_TAG = "refactor-gcloud-auth-no-file-b43bf0d9" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -355395,7 +355893,7 @@ var getEnvironmentVariables = function (config, componentName, env, commitInfo,
     alreadyVisited = {};
   }
   return __awaiter(void 0, void 0, void 0, function () {
-    var environmentContext, envConfigRaw, deployConfigRaw, buildConfigRaw, envType, basePredefinedVariables, predefinedVariables, host, url, devLocalConfig, port, additionalEnvVars, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegacyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
+    var environmentContext, envConfigRaw, deployConfigRaw, buildConfigRaw, envType, basePredefinedVariables, predefinedVariables, host, url, devLocalConfig, port, additionalEnvVars, HOST_INTERNAL, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegacyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
     var _a, _b;
     var _c, _d, _e, _f, _g, _h, _j, _k, _l;
     return __generator(this, function (_m) {
@@ -355419,16 +355917,21 @@ var getEnvironmentVariables = function (config, componentName, env, commitInfo,
             predefinedVariables = {
               ENV_SHORT: "local",
               ROOT_URL: url,
+              HOST_INTERNAL: host,
+              ROOT_URL_INTERNAL: "http://" + host,
               PORT: port.toString()
             };
           } else {
             additionalEnvVars = deployConfigRaw ? deploy_1.DEPLOY_TYPES[deployConfigRaw.type].getAdditionalEnvVars(environmentContext) : {};
-            host = (_e = (_d = envConfigRaw === null || envConfigRaw === void 0 ? void 0 : envConfigRaw.host) !== null && _d !== void 0 ? _d : additionalEnvVars.HOST_CANONICAL) !== null && _e !== void 0 ? _e : "unknown-host.example.com";
+            HOST_INTERNAL = (_d = additionalEnvVars.HOST_INTERNAL) !== null && _d !== void 0 ? _d : "unknown-host.example.com";
+            host = (_e = envConfigRaw === null || envConfigRaw === void 0 ? void 0 : envConfigRaw.host) !== null && _e !== void 0 ? _e : HOST_INTERNAL;
             url = "https://".concat(host);
             predefinedVariables = __assign(__assign(__assign(__assign({}, basePredefinedVariables), config.components[componentName].build.type === "rails" ? {} : {
               HOST: host
             }), {
-              ROOT_URL: url
+              ROOT_URL: url,
+              HOST_CANONICAL: HOST_INTERNAL,
+              ROOT_URL_INTERNAL: "https://" + HOST_INTERNAL
             }), additionalEnvVars);
           }
           publicEnvVarsRaw = (_g = (_f = envConfigRaw.vars) === null || _f === void 0 ? void 0 : _f.public) !== null && _g !== void 0 ? _g : {};
@@ -356279,7 +356782,7 @@ var createDeployJob = function (context, jobDefinition) {
   var _a, _b, _c, _d;
   var hasDocker = (0, docker_1.requiresDockerBuild)(context);
   var isStoppable = (0, utils_1.contextIsStoppable)(context);
-  var autoStop = context.environment.envType === "review" ? "2 week" : context.environment.envType === "dev" ? "4 weeks" : undefined;
+  var autoStop = context.environment.envType === "review" ? "1 week" : context.environment.envType === "dev" ? "4 weeks" : undefined;
   // if auto or manual is configured explicitly, use that
   var whenDeployDefined = context.componentConfig.deploy && context.componentConfig.deploy.when ? context.componentConfig.deploy.when : undefined;
   // otherwise auto deploy if env is not prod. If its prod, deploy automatically if stage is disabled
@@ -356483,13 +356986,269 @@ exports.__esModule = true;
 exports.DEPLOY_RUNNER_VARIABLES = void 0;
 exports.DEPLOY_RUNNER_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
-  KUBERNETES_CPU_LIMIT: "1",
   KUBERNETES_MEMORY_REQUEST: "200Mi",
   KUBERNETES_MEMORY_LIMIT: "400Mi"
 };
 
 /***/ }),
 
+/***/ 28159:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+exports.__esModule = true;
+exports.getDeleteUnusedImagesCommands = exports.getArtifactsRegistryImage = exports.getArtifactsRegistryBuildCacheImage = exports.getArtifactsRegistryImageName = exports.getArtifactsRegistryDockerUrl = exports.getArtifactsRegistryHost = void 0;
+var gitlab_1 = __nccwpck_require__(84997);
+var types_1 = __nccwpck_require__(63109);
+var removeFirstLinesFromCommandOutput_1 = __nccwpck_require__(77547);
+var getArtifactsRegistryHost = function (_a) {
+  var deploy = _a.componentConfig.deploy;
+  if (!(0, types_1.isOfDeployType)(deploy, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  return "".concat(deploy.region, "-docker.pkg.dev");
+};
+exports.getArtifactsRegistryHost = getArtifactsRegistryHost;
+var getArtifactsRegistryDockerUrl = function (context) {
+  var deployConfig = context.componentConfig.deploy;
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
+  return "".concat((0, exports.getArtifactsRegistryHost)(context), "/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
+};
+exports.getArtifactsRegistryDockerUrl = getArtifactsRegistryDockerUrl;
+/**
+ *
+ * lecacyReviewImageName is only temporary. In old versions the images had no reviewslug in review apps, which makes cleanup harder. We delete all those images now, but need the path
+ */
+var getArtifactsRegistryImageName = function (context, lecacyReviewImageName) {
+  var _a;
+  if (lecacyReviewImageName === void 0) {
+    lecacyReviewImageName = false;
+  }
+  if (lecacyReviewImageName && context.environment.envType !== "review") {
+    throw new Error("lecacyReviewImageName is only allowed for review app");
+  }
+  var dockerUrl = (0, exports.getArtifactsRegistryDockerUrl)(context);
+  var gcloudImagePath = __spreadArray([dockerUrl, context.environment.shortName, context.componentName], __read(context.environment.envType === "review" && !lecacyReviewImageName ? [(_a = context.commitInfo) === null || _a === void 0 ? void 0 : _a.reviewSlug] : []), false);
+  return gcloudImagePath.join("/");
+};
+exports.getArtifactsRegistryImageName = getArtifactsRegistryImageName;
+var getArtifactsRegistryBuildCacheImage = function (context) {
+  var dockerUrl = (0, exports.getArtifactsRegistryDockerUrl)(context);
+  // does not include env, so that after merge, you might get more cache hits (review-->dev)
+  var gcloudImagePath = [dockerUrl, "caches", context.componentName];
+  return gcloudImagePath.join("/");
+};
+exports.getArtifactsRegistryBuildCacheImage = getArtifactsRegistryBuildCacheImage;
+var getArtifactsRegistryImage = function (context) {
+  return "".concat((0, exports.getArtifactsRegistryImageName)(context), ":$DOCKER_IMAGE_TAG");
+};
+exports.getArtifactsRegistryImage = getArtifactsRegistryImage;
+var getDeleteImageCommands = function (fullImageName, keepNewest) {
+  if (keepNewest === void 0) {
+    keepNewest = 0;
+  }
+  if (keepNewest === 0) {
+    // no need to list tags, we delete the whole thing
+    return ["gcloud artifacts docker images delete ".concat(fullImageName, " --quiet --delete-tags")];
+  }
+  // delete unused tags
+  var listAllImagesCommand = "gcloud artifacts docker images list ".concat(fullImageName, " --sort-by=~CREATE_TIME --format=\"value(version)\"");
+  var listImagesToDeletecommand = (0, removeFirstLinesFromCommandOutput_1.removeFirstLinesFromCommandOutput)(listAllImagesCommand, keepNewest);
+  var deleteImageCommand = "gcloud artifacts docker images delete ".concat(fullImageName, "@$version --quiet --delete-tags");
+  var deleteImagesCommand = "".concat(listImagesToDeletecommand, " | while read -r version; do ").concat(deleteImageCommand, "; done");
+  return [deleteImagesCommand];
+};
+/**
+ * commands to delete unused images.
+ *
+ * @param context
+ * @param keep how many of the newest images to keep
+ * @returns
+ */
+var getDeleteUnusedImagesCommands = function (context, keep) {
+  if (keep === void 0) {
+    keep = 0;
+  }
+  var deployConfig = context.componentConfig.deploy;
+  if (deployConfig === false) {
+    return [];
+  }
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  var fullImageName = (0, exports.getArtifactsRegistryImageName)(context);
+  var buildCacheImageName = (0, exports.getArtifactsRegistryBuildCacheImage)(context);
+  return __spreadArray(__spreadArray(__spreadArray([], __read(getDeleteImageCommands(fullImageName, keep)), false), __read(getDeleteImageCommands(buildCacheImageName, 1)), false), __read(context.environment.envType === "review" ? (0, gitlab_1.allowFailureInScripts)(getDeleteImageCommands((0, exports.getArtifactsRegistryImageName)(context, true), 0)) : []), false);
+};
+exports.getDeleteUnusedImagesCommands = getDeleteUnusedImagesCommands;
+
+/***/ }),
+
+/***/ 10964:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+exports.__esModule = true;
+exports.getRemoveOldRevisionsAndImagesCommand = void 0;
+var artifactsRegistry_1 = __nccwpck_require__(28159);
+var cloudRunRevisions_1 = __nccwpck_require__(31101);
+var getRemoveOldRevisionsAndImagesCommand = function (context, when) {
+  if (when === "onStop") {
+    // service is already deleted, so we don't need to delete old revisions, just delete all images
+    return (0, artifactsRegistry_1.getDeleteUnusedImagesCommands)(context);
+  }
+  // this number only targets inactive revisions
+  var revisionsToKeep = context.environment.envType === "prod" ? 5 : 0;
+  // this number needs to be higher than inactive after deploy, so we add one
+  var imagesToKeep = revisionsToKeep + 1;
+  var deleteOldRevisionsCommands = (0, cloudRunRevisions_1.getDeleteUnusedRevisionsCommands)(context, revisionsToKeep);
+  var deleteOldImagesCommands = (0, artifactsRegistry_1.getDeleteUnusedImagesCommands)(context, imagesToKeep);
+  return __spreadArray(__spreadArray([], __read(deleteOldRevisionsCommands), false), __read(deleteOldImagesCommands), false);
+};
+exports.getRemoveOldRevisionsAndImagesCommand = getRemoveOldRevisionsAndImagesCommand;
+
+/***/ }),
+
+/***/ 31101:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+exports.__esModule = true;
+exports.getDeleteUnusedRevisionsCommands = void 0;
+var types_1 = __nccwpck_require__(63109);
+var createArgsString_1 = __nccwpck_require__(8686);
+var getServiceName_1 = __nccwpck_require__(89391);
+var removeFirstLinesFromCommandOutput_1 = __nccwpck_require__(77547);
+var getListRevisionsCommand = function (context, args) {
+  var serviceName = (0, getServiceName_1.getServiceName)(context);
+  var deployConfig = context.componentConfig.deploy;
+  if (!deployConfig || !(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  var filterRevisionArgs = __assign({
+    project: deployConfig.projectId,
+    region: deployConfig.region,
+    // only show inactive revisions
+    service: serviceName,
+    limit: "unlimited",
+    "sort-by": "metadata.creationTimestamp"
+  }, args);
+  // this prints out all inactive images of the given app
+  return "gcloud run revisions list ".concat((0, createArgsString_1.createArgsString)(filterRevisionArgs));
+};
+var getDeleteUnusedRevisionsCommands = function (context, keep) {
+  var deployConfig = context.componentConfig.deploy;
+  if (deployConfig === false) {
+    return [];
+  }
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  // this prints out all inactive images of the given app
+  var listAllInactiveRevisionsCmd = getListRevisionsCommand(context, {
+    format: "\"value(name)\"",
+    filter: "'(status.conditions.status=False OR status.conditions.status=Unknown)'"
+  });
+  // this removes the newest `revisionsToKeep` images
+  var listRevisionsToDeleteCmd = (0, removeFirstLinesFromCommandOutput_1.removeFirstLinesFromCommandOutput)(listAllInactiveRevisionsCmd, keep);
+  var deleteRevisionCmd = "gcloud run revisions delete ".concat((0, createArgsString_1.createArgsString)({
+    project: deployConfig.projectId,
+    region: deployConfig.region,
+    quiet: true
+  }), " $revisionname ");
+  var deleteRevisionsCmd = "".concat(listRevisionsToDeleteCmd, " | while read -r revisionname; do ").concat(deleteRevisionCmd, "; done");
+  return [deleteRevisionsCmd];
+};
+exports.getDeleteUnusedRevisionsCommands = getDeleteUnusedRevisionsCommands;
+
+/***/ }),
+
 /***/ 82256:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -356553,9 +357312,20 @@ var createArgsString_1 = __nccwpck_require__(8686);
 var database_1 = __nccwpck_require__(41384);
 var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
 var jobName_1 = __nccwpck_require__(77311);
-var setExtraVarsScripts = function (deployConfig) {
+var artifactsRegistry_1 = __nccwpck_require__(28159);
+var getServiceName_1 = __nccwpck_require__(89391);
+var cleanup_1 = __nccwpck_require__(10964);
+var setGoogleProjectNumberScript = function (deployConfig) {
   return ["export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe ".concat(deployConfig.projectId, " --format=\"value(projectNumber)\")"), "echo \"GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER\""];
 };
+var makeLabelString = function (obj) {
+  return Object.entries(obj).map(function (_a) {
+    var _b = __read(_a, 2),
+      key = _b[0],
+      value = _b[1];
+    return "".concat(key, "=").concat(value);
+  }).join(",");
+};
 var createGoogleCloudRunDeployJobs = function (context) {
   var _a, _b, _c;
   var deployConfig = context.componentConfig.deploy;
@@ -356566,28 +357336,17 @@ var createGoogleCloudRunDeployJobs = function (context) {
     // should not happen
     throw new Error("deploy config is wrong");
   }
-  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
-  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
-  var gcloudImageName = "".concat(dockerUrl, "/").concat(context.environment.shortName, "/").concat(context.componentName, ":$DOCKER_IMAGE_TAG");
-  var pushImageToArtifactsRegistry = [docker_1.gitlabDockerLogin, "gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)];
   var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
-  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
-    var _b = __read(_a, 2),
-      key = _b[0],
-      value = _b[1];
-    return "".concat(key, "=").concat(value);
-  }).join(",");
   var commonArgs = {
     project: deployConfig.projectId,
     region: deployConfig.region
   };
   var commonDeployArgs = __assign(__assign({
-    image: gcloudImageName
+    image: (0, artifactsRegistry_1.getArtifactsRegistryImage)(context)
   }, commonArgs), {
-    "set-cloudsql-instances": deployConfig.cloudSql ? deployConfig.cloudSql.instanceConnectionName : undefined,
-    labels: labelsString
+    "set-cloudsql-instances": deployConfig.cloudSql ? deployConfig.cloudSql.instanceConnectionName : undefined
   });
-  var serviceName = context.environment.fullName.toLowerCase();
+  var serviceName = (0, getServiceName_1.getServiceName)(context);
   var getFullJobName = function (name) {
     return (0, jobName_1.getCloudRunJobName)(context.environment.fullName, name);
   };
@@ -356616,30 +357375,41 @@ var createGoogleCloudRunDeployJobs = function (context) {
     };
   });
   var getServiceDeployScript = function (service, nameSuffix) {
-    var _a, _b, _c, _d;
+    var _a, _b, _c, _d, _e;
     var customConfig = service !== true ? service : undefined;
     var command = service !== true ? (_a = service === null || service === void 0 ? void 0 : service.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand : undefined;
+    var commandArray = command ? Array.isArray(command) ? command : command.split(" ") : undefined;
+    var fullServiceName = "".concat(serviceName).concat(nameSuffix !== null && nameSuffix !== void 0 ? nameSuffix : "");
     var argsString = (0, createArgsString_1.createArgsString)(__assign(__assign({
       // command as empty string resets it to default (uses the image's entrypoint)
-      command: command ? '"' + command.split(" ").join(",") + '"' : '""'
+      command: commandArray ? '"' + commandArray.join(",") + '"' : '""'
     }, commonDeployArgs), {
+      labels: makeLabelString(__assign(__assign({}, (0, getLabels_1.getLabels)(context)), {
+        "cloud-run-service-name": fullServiceName
+      })),
       "env-vars-file": "____envvars.yaml",
       "min-instances": (_b = customConfig === null || customConfig === void 0 ? void 0 : customConfig.minInstances) !== null && _b !== void 0 ? _b : 0,
       "max-instances": (_c = customConfig === null || customConfig === void 0 ? void 0 : customConfig.maxInstances) !== null && _c !== void 0 ? _c : 100,
       "cpu-throttling": (customConfig === null || customConfig === void 0 ? void 0 : customConfig.noCpuThrottling) !== true,
       memory: customConfig === null || customConfig === void 0 ? void 0 : customConfig.memory,
       "allow-unauthenticated": (_d = customConfig === null || customConfig === void 0 ? void 0 : customConfig.allowUnauthenticated) !== null && _d !== void 0 ? _d : true,
+      ingress: (_e = customConfig === null || customConfig === void 0 ? void 0 : customConfig.ingress) !== null && _e !== void 0 ? _e : "all",
       "cpu-boost": true
     }));
-    return "gcloud run deploy ".concat(serviceName).concat(nameSuffix !== null && nameSuffix !== void 0 ? nameSuffix : "", " ").concat(argsString);
+    return "gcloud run deploy ".concat(fullServiceName, " ").concat(argsString);
   };
   var getJobCreateScriptsForJob = function (jobName, job) {
     // due to some oversight from google, jobs create does not accept `--env-vars-file` 🤦
     // lucky, update on the other hand accepts it... so let's just imediatly update it
     // also we cannot upsert a job, so we have to create it and catch the error and then update
+    var commandArray = Array.isArray(job.command) ? job.command : job.command.split(" ");
     var commonDeployArgsString = (0, createArgsString_1.createArgsString)(__assign(__assign({
-      command: '"' + job.command.split(" ").join(",") + '"'
+      command: '"' + commandArray.join(",") + '"'
     }, commonDeployArgs), {
+      labels: makeLabelString(__assign(__assign({}, (0, getLabels_1.getLabels)(context)), {
+        "cloud-run-job-name": jobName
+      })),
+      image: job.image || commonDeployArgs.image,
       memory: job.memory || "512Mi",
       "task-timeout": job.timeout || "10m"
     }));
@@ -356654,8 +357424,8 @@ var createGoogleCloudRunDeployJobs = function (context) {
       return getJobCreateScriptsForJob(jobName, job);
     }).flat();
   };
-  var getJobRunScriptForJob = function (jobName) {
-    return "gcloud beta run jobs execute ".concat(jobName, " ").concat(commonArgsString);
+  var getJobRunScriptForJob = function (jobName, wait) {
+    return "gcloud beta run jobs execute ".concat(jobName, " ").concat(commonArgsString).concat(wait ? " --wait" : "");
   };
   var getJobRunScripts = function (when) {
     return jobsWithNames.filter(function (_a) {
@@ -356663,7 +357433,9 @@ var createGoogleCloudRunDeployJobs = function (context) {
       return job.when === when;
     }).map(function (_a) {
       var jobName = _a.jobName;
-      return getJobRunScriptForJob(jobName);
+      return getJobRunScriptForJob(jobName,
+      // wait for completin on stop jobs, since stop will delete the jobs afterwards, so they will fail
+      ["preStop", "postStop"].includes(when));
     });
   };
   var getCreateScheduleScripts = function () {
@@ -356703,18 +357475,19 @@ var createGoogleCloudRunDeployJobs = function (context) {
       "gcloud beta run jobs executions list ".concat(commonArgsString, " --job ").concat(jobName, " --format=\"value(name)\" | xargs -I {} gcloud beta run jobs executions delete {}  --quiet ").concat(commonArgsString), "gcloud beta run jobs delete ".concat(jobName, " ").concat(commonArgsString)];
     });
   };
-  var deployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(setExtraVarsScripts(deployConfig)), false), __read(pushImageToArtifactsRegistry), false), ["echo \"$ENV_VARS\" > ____envvars.yaml"], false), __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
+  var deployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gitlab_1.collapseableSection)("prepare", "Prepare...")(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(setGoogleProjectNumberScript(deployConfig)), false))), false), __read((0, gitlab_1.collapseableSection)("deploy", "Deploy to cloud run")(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml"], __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
   : []), false), __read(getCreateScheduleScripts()), false), __read(getJobCreateScripts()), false), __read(getJobRunScripts("preDeploy")), false), __read(deployConfig.service !== false ? [getServiceDeployScript(deployConfig.service)] : []), false), __read(Object.entries((_b = deployConfig.additionalServices) !== null && _b !== void 0 ? _b : {}).map(function (_a) {
     var _b = __read(_a, 2),
       name = _b[0],
       service = _b[1];
     return getServiceDeployScript(service, "-" + name);
-  })), false), __read(getJobRunScripts("postDeploy")), false), ["docker image rm ".concat(gcloudImageName)], false), __read((0, sbom_1.getDependencyTrackUploadScript)(context)), false);
-  var stopScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgsString)] : []), false), __read(Object.entries((_c = deployConfig.additionalServices) !== null && _c !== void 0 ? _c : {}).map(function (_a) {
+  })), false), __read(getJobRunScripts("postDeploy")), false))), false), __read((0, gitlab_1.collapseableSection)("cleanup", "Cleanup")((0, cleanup_1.getRemoveOldRevisionsAndImagesCommand)(context, "postDeploy") // we cleanup inactive images both on deploy and stop
+  )), false), __read((0, sbom_1.getDependencyTrackUploadScript)(context)), false);
+  var stopScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(getJobRunScripts("preStop")), false), __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgsString)] : []), false), __read(Object.entries((_c = deployConfig.additionalServices) !== null && _c !== void 0 ? _c : {}).map(function (_a) {
     var _b = __read(_a, 1),
       name = _b[0];
     return "gcloud run services delete ".concat(serviceName, "-").concat(name, " ").concat(commonArgsString);
-  })), false), __read(getDeleteSchedulesScripts()), false), __read(getDeleteJobsScripts()), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false), __read((0, sbom_1.getDependencyTrackDeleteScript)(context)), false);
+  })), false), __read(getJobRunScripts("postStop")), false), __read(getDeleteSchedulesScripts()), false), __read(getDeleteJobsScripts()), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false), __read((0, cleanup_1.getRemoveOldRevisionsAndImagesCommand)(context, "onStop")), false), __read((0, sbom_1.getDependencyTrackDeleteScript)(context)), false);
   return (0, base_1.createDeployementJobs)(context, {
     deploy: (0, lodash_1.merge)((0, docker_1.getDockerJobBaseProps)(context), {
       artifacts: {
@@ -356799,6 +357572,7 @@ var utils_1 = __nccwpck_require__(70463);
 var deployJob_1 = __nccwpck_require__(82256);
 var jobName_1 = __nccwpck_require__(77311);
 exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
+// FIXME: rename to internalHostSuffix, but this means that project-setup needs to be rerun, so its kindof a breaking change
 exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
 var getCloudSqlVariables = function (_a) {
   var _b, _c;
@@ -356857,7 +357631,7 @@ exports.GCLOUD_RUN_DEPLOY_TYPE = {
       env = ctx.env,
       componentName = ctx.componentName,
       deployConfigRaw = ctx.deployConfigRaw;
-    var HOST_CANONICAL = fullName.toLowerCase() + "-" + ((_a = process.env[(0, context_1.getSecretVarName)(env, componentName, exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)]) !== null && _a !== void 0 ? _a : "unknown-host.example.com");
+    var HOST_INTERNAL = fullName.toLowerCase() + "-" + ((_a = process.env[(0, context_1.getSecretVarName)(env, componentName, exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)]) !== null && _a !== void 0 ? _a : "unknown-host.example.com");
     var jobTriggers = deployConfigRaw && deployConfigRaw.jobs ? Object.fromEntries(Object.entries(deployConfigRaw.jobs).map(function (_a) {
       var _b = __read(_a, 2),
         name = _b[0],
@@ -356865,7 +357639,7 @@ exports.GCLOUD_RUN_DEPLOY_TYPE = {
       return ["CLOUD_RUN_JOB_TRIGGER_URL_" + (0, gitlab_1.sanitizeForBashVariable)(name), "https://".concat(deployConfigRaw.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfigRaw.projectId, "/jobs/").concat((0, jobName_1.getCloudRunJobName)(fullName, name), ":run")];
     })) : {};
     return __assign(__assign({
-      HOST_CANONICAL: HOST_CANONICAL
+      HOST_INTERNAL: HOST_INTERNAL
     }, getCloudSqlVariables(ctx)), jobTriggers);
   }
 };
@@ -357016,12 +357790,27 @@ exports.gcloudServiceAccountLoginCommands = void 0;
 var __1 = __nccwpck_require__(81344);
 var context_1 = __nccwpck_require__(22041);
 var gcloudServiceAccountLoginCommands = function (context) {
-  return ["echo $".concat((0, context_1.getSecretVarNameForContext)(context, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY), " > ./____keyfile.json\n          "), "gcloud auth activate-service-account --key-file=\"./____keyfile.json\""];
+  return ["gcloud auth activate-service-account --key-file=<(echo \"$".concat((0, context_1.getSecretVarNameForContext)(context, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY), "\")")];
 };
 exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;
 
 /***/ }),
 
+/***/ 89391:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getServiceName = void 0;
+var getServiceName = function (context) {
+  return context.environment.fullName.toLowerCase();
+};
+exports.getServiceName = getServiceName;
+
+/***/ }),
+
 /***/ 77311:
 /***/ ((__unused_webpack_module, exports) => {
 
@@ -357037,6 +357826,29 @@ exports.getCloudRunJobName = getCloudRunJobName;
 
 /***/ }),
 
+/***/ 77547:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.removeFirstLinesFromCommandOutput = void 0;
+/**
+ *
+ * takes a command and removes the first keep lines from the output
+ *
+ * @param cmd the command, its stdout is then limited
+ * @param removeFirstN how many lines to remove at the start of the command
+ * @returns
+ */
+var removeFirstLinesFromCommandOutput = function (cmd, removeFirstN) {
+  return removeFirstN === 0 ? cmd : "".concat(cmd, " | tail -n +").concat(removeFirstN + 1);
+};
+exports.removeFirstLinesFromCommandOutput = removeFirstLinesFromCommandOutput;
+
+/***/ }),
+
 /***/ 70463:
 /***/ ((__unused_webpack_module, exports) => {
 
@@ -357169,6 +357981,37 @@ var __assign = this && this.__assign || function () {
   };
   return __assign.apply(this, arguments);
 };
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
 exports.__esModule = true;
 exports.createDockerTagDeployJobs = void 0;
 var docker_1 = __nccwpck_require__(33219);
@@ -357186,7 +358029,7 @@ var createDockerTagDeployJobs = function (context) {
   var tag = deployConfig.tag;
   return (0, base_1.createDeployementJobs)(context, {
     deploy: __assign(__assign({}, (0, docker_1.getDockerJobBaseProps)(context)), {
-      script: [docker_1.gitlabDockerLogin, "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_IMAGE:".concat(tag), "docker push $DOCKER_IMAGE:".concat(tag), "echo \"pushed as $DOCKER_IMAGE:".concat(tag, "\"")]
+      script: __spreadArray(__spreadArray([], __read((0, docker_1.gitlabDockerLogin)(context)), false), ["docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_IMAGE:".concat(tag), "docker push $DOCKER_IMAGE:".concat(tag), "echo \"pushed as $DOCKER_IMAGE:".concat(tag, "\"")], false)
     })
   });
 };
@@ -357508,12 +358351,12 @@ exports.KUBERNETES_DEPLOY_TYPE = {
     var domainCanonical = deployConfigRaw && ((_b = deployConfigRaw.cluster) === null || _b === void 0 ? void 0 : _b.domainCanonical) ||
     // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
     fullConfig.domainCanonical || "panter.cloud";
-    var HOST_CANONICAL = "".concat(componentSlug, ".").concat(envInUrl, ".").concat(fullConfig.appName, ".").concat(fullConfig.customerName, ".").concat(domainCanonical); // default for kubernetes and rest
+    var HOST_INTERNAL = "".concat(componentSlug, ".").concat(envInUrl, ".").concat(fullConfig.appName, ".").concat(fullConfig.customerName, ".").concat(domainCanonical); // default for kubernetes and rest
     return {
       KUBE_NAMESPACE: KUBE_NAMESPACE,
       KUBE_APP_NAME: KUBE_APP_NAME,
       KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX,
-      HOST_CANONICAL: HOST_CANONICAL
+      HOST_INTERNAL: HOST_INTERNAL
     };
   }
 };
@@ -358719,7 +359562,8 @@ var createChildPipeline = function (type, trigger, config) {
           _a = {
             image: (0, runner_1.getRunnerImage)("jobs-default"),
             variables: {
-              FF_USE_FASTZIP: "true"
+              FF_USE_FASTZIP: "true",
+              GIT_DEPTH: 1
             },
             workflow: {
               rules: rules_1.RULES_ALWAYS
@@ -359437,7 +360281,7 @@ var path_equal_1 = __nccwpck_require__(84843);
 var yarnUtils_1 = __nccwpck_require__(51369);
 var getPackageManagerInfo = function (config, componentName) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var version, isClassic, component, workspaces, currentWorkspace, componentIsInWorkspace, workspaceRoot, packageJson, workspacePackageJson, lockFile, configFiles, configFilePaths, workspaceDependencies, pathsToCopyInDocker;
+    var version, isClassic, component, workspaces, currentWorkspace, componentIsInWorkspace, workspaceRoot, packageJson, workspacePackageJson, lockFile, configFiles, configFilePaths, currentWorkspaceDependencies, pathsToCopyInDocker;
     return __generator(this, function (_a) {
       switch (_a.label) {
         case 0:
@@ -359464,19 +360308,15 @@ var getPackageManagerInfo = function (config, componentName) {
           })), false).filter(function (f) {
             return (0, fs_1.existsSync)(f);
           });
-          workspaceDependencies = currentWorkspace ? __spreadArray(__spreadArray([], __read(currentWorkspace.workspaceDependencies), false), __read(currentWorkspace.mismatchedWorkspaceDependencies), false).map(function (name) {
-            var _a;
-            return (_a = workspaces.find(function (w) {
-              return w.name === name;
-            })) === null || _a === void 0 ? void 0 : _a.location;
-          }).filter(Boolean) : [];
-          pathsToCopyInDocker = __spreadArray(__spreadArray(__spreadArray(__spreadArray([packageJson], __read(workspacePackageJson ? [workspacePackageJson] : []), false), [lockFile], false), __read(configFilePaths), false), __read(workspaceDependencies), false);
+          currentWorkspaceDependencies = currentWorkspace ? (0, yarnUtils_1.getWorkspaceDependencies)(currentWorkspace, workspaces) : [];
+          pathsToCopyInDocker = __spreadArray(__spreadArray(__spreadArray(__spreadArray([packageJson], __read(workspacePackageJson ? [workspacePackageJson] : []), false), [lockFile], false), __read(configFilePaths), false), __read(currentWorkspaceDependencies), false);
           return [2 /*return*/, {
             type: "yarn",
             workspaces: workspaces,
             version: version,
             isClassic: isClassic,
             currentWorkspace: currentWorkspace,
+            currentWorkspaceDependencies: currentWorkspaceDependencies,
             componentIsInWorkspace: componentIsInWorkspace,
             pathsToCopyInDocker: pathsToCopyInDocker
           }];
@@ -359609,13 +360449,44 @@ var __generator = this && this.__generator || function (thisArg, body) {
     };
   }
 };
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
 var __importDefault = this && this.__importDefault || function (mod) {
   return mod && mod.__esModule ? mod : {
     "default": mod
   };
 };
 exports.__esModule = true;
-exports.getWorkspaces = exports.getYarnVersion = void 0;
+exports.getWorkspaceDependencies = exports.getWorkspaces = exports.getYarnVersion = void 0;
 var child_process_promise_1 = __nccwpck_require__(75763);
 var memoizee_1 = __importDefault(__nccwpck_require__(85839));
 var execOrFail = function (cmd, onFail) {
@@ -359685,6 +360556,20 @@ exports.getWorkspaces = (0, memoizee_1["default"])(function (isClassic) {
 }, {
   promise: true
 });
+// recursivly get all workspace dependencies
+var getWorkspaceDependencies = function (ws, allWorkspaces) {
+  return ws ? __spreadArray(__spreadArray([], __read(ws.workspaceDependencies), false), __read(ws.mismatchedWorkspaceDependencies), false).flatMap(function (location) {
+    // we have to do this recursivly
+    var otherWorkspace = allWorkspaces.find(function (w) {
+      return w.location === location;
+    });
+    if (otherWorkspace) {
+      return __spreadArray(__spreadArray([], __read((0, exports.getWorkspaceDependencies)(otherWorkspace, allWorkspaces)), false), [otherWorkspace.location], false);
+    }
+    return [];
+  }).filter(Boolean) : [];
+};
+exports.getWorkspaceDependencies = getWorkspaceDependencies;
 
 /***/ }),
 
@@ -359926,7 +360811,7 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
   return to.concat(ar || Array.prototype.slice.call(from));
 };
 exports.__esModule = true;
-exports.repeatOnFailure = exports.sanitizeForBashVariable = exports.allowFailureInScripts = void 0;
+exports.collapseableSection = exports.repeatOnFailure = exports.sanitizeForBashVariable = exports.allowFailureInScripts = void 0;
 var allowFailureInScripts = function (script) {
   return __spreadArray(__spreadArray(["set +e"], __read(script), false), ["set -e" // reenable
   ], false);
@@ -359940,6 +360825,12 @@ var repeatOnFailure = function (command, options) {
   return "\n    until ".concat(command, "\n    do\n      echo \"Trying again.\"\n      sleep ").concat(options.pauseInSeconds, "\n    done\n  ");
 };
 exports.repeatOnFailure = repeatOnFailure;
+var collapseableSection = function (name, header) {
+  return function (commands) {
+    return __spreadArray(__spreadArray(["echo -e \"\\e[0Ksection_start:$(date +%s):".concat(name, "[collapsed=true]\\r\\e[0K").concat(header, "\"")], __read(commands), false), ["echo -e \"\\e[0Ksection_end:$(date +%s):".concat(name, "\\r\\e[0K\"")], false);
+  };
+};
+exports.collapseableSection = collapseableSection;
 
 /***/ }),
 
@@ -362436,7 +363327,7 @@ module.exports = underscoreNodeF._;
 /***/ ((module) => {
 
 "use strict";
-module.exports = JSON.parse('{"name":"@catladder/cli","author":"Marco Wettstein <maw@panter.ch>","homepage":"https://git.panter.ch/catladder/catladder/#readme","bugs":"https://git.panter.ch/catladder/catladder/issues","license":"MIT","scripts":{"lint":"eslint \\"src/**/*.ts\\"","lint:fix":"eslint \\"src/**/*.ts\\" --fix","test":"yarn run lint","build":"yarn build:compile && yarn build:bundle","build:bundle":"./scripts/bundle","build:compile":"yarn tsc","build:watch":"yarn tsc -w"},"bin":{"catenv":"./bin/catenv","catladder":"./bin/catladder"},"dependencies":{"ts-node":"^10.9.1"},"engines":{"node":">=12.0.0"},"devDependencies":{"@catladder/pipeline":"0.0.0","@kubernetes/client-node":"^0.16.2","@tsconfig/node14":"^1.0.1","@types/common-tags":"^1.8.0","@types/fs-extra":"^5.0.4","@types/js-yaml":"^4.0.5","@types/lodash":"^4.14.185","@types/memoizee":"^0.4.2","@types/node-fetch":"^2.1.4","@types/request":"^2.48.1","@types/tmp":"^0.2.3","@types/update-notifier":"^2.5.0","@types/vorpal":"^1.12.0","@types/websocket":"^0.0.40","@types/yargs":"^13.0.0","child-process-promise":"^2.2.1","clipboardy":"^2.0.0","command-exists-promise":"^2.0.2","common-tags":"^1.8.0","dayjs":"^1.10.4","eslint":"^8.7.0","fs-extra":"^7.0.1","gitlab":"^4.4.1","js-yaml":"^4.1.0","lodash":"^4.17.21","memoizee":"^0.4.14","node-fetch":"^2.3.0","open":"^8.4.0","prettier":"^2.5.1","tmp-promise":"^2.0.2","typescript":"^4.5.4","vorpal":"^1.12.0"},"version":"0.0.0"}');
+module.exports = JSON.parse('{"name":"@catladder/cli","description":"Panter cli tool for Kubernetes","author":"Marco Wettstein <maw@panter.ch>","homepage":"https://git.panter.ch/catladder/catladder/#readme","bugs":"https://git.panter.ch/catladder/catladder/issues","repository":{"type":"git","url":"git+https://git.panter.ch/catladder/catladder.git","directory":"cli"},"keywords":["GitLab","cloud","cli","gitlab-ci","ci/cd","pipeline","deployment","devops","automation","typescript"],"contributors":[{"name":"Marco Wettstein","email":"maw@panter.ch"},{"name":"Michael Leu","email":"leu@panter.ch"},{"name":"Luboš Matejčík","email":"lma@panter.ch"},{"name":"Kaspar Vollenweider","email":"vok@panter.ch"},{"name":"Silvan Adrian","email":"sia@panter.ch"},{"name":"Stefan Bakocs","email":"stb@panter.ch"},{"name":"Lukas Brezina","email":"brl@panter.ch"}],"license":"MIT","version":"0.0.0","scripts":{"lint":"eslint \\"src/**/*.ts\\"","lint:fix":"eslint \\"src/**/*.ts\\" --fix","test":"yarn run lint","build":"yarn build:compile && yarn build:bundle","build:bundle":"./scripts/bundle","build:compile":"yarn tsc","build:watch":"yarn tsc -w"},"bin":{"catenv":"./bin/catenv","catladder":"./bin/catladder"},"dependencies":{"ts-node":"^10.9.1"},"engines":{"node":">=12.0.0"},"devDependencies":{"@catladder/pipeline":"0.0.0","@kubernetes/client-node":"^0.16.2","@tsconfig/node14":"^1.0.1","@types/common-tags":"^1.8.0","@types/fs-extra":"^5.0.4","@types/js-yaml":"^4.0.5","@types/lodash":"^4.14.185","@types/memoizee":"^0.4.2","@types/node-fetch":"^2.1.4","@types/request":"^2.48.1","@types/tmp":"^0.2.3","@types/update-notifier":"^2.5.0","@types/vorpal":"^1.12.0","@types/websocket":"^0.0.40","@types/yargs":"^13.0.0","child-process-promise":"^2.2.1","clipboardy":"^2.0.0","command-exists-promise":"^2.0.2","common-tags":"^1.8.0","connection-string-parser":"^1.0.4","dayjs":"^1.10.4","eslint":"^8.7.0","fs-extra":"^7.0.1","gitlab":"^4.4.1","js-yaml":"^4.1.0","lodash":"^4.17.21","memoizee":"^0.4.14","node-fetch":"^2.3.0","open":"^8.4.0","prettier":"^2.5.1","tmp-promise":"^2.0.2","typescript":"^4.5.4","vorpal":"^1.12.0"}}');
 
 /***/ }),