@catladder/cli 1.144.1 → 1.146.0

package/dist/pipeline/src/deploy/kubernetes/kubeValues.js

@@ -0,0 +1,112 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createKubeValues = void 0;
+var lodash_1 = require("lodash");
+var utils_1 = require("../../utils");
+var types_1 = require("../types");
+var cloudSql_1 = require("./cloudSql");
+var kubeEnv_1 = require("./kubeEnv");
+var mongodb_1 = require("./mongodb");
+var processSecretsAsFiles_1 = require("./processSecretsAsFiles");
+var createAppConfig = function (context, application) {
+    if (application === false) {
+        return {
+            enabled: false,
+        };
+    }
+    var _a = application !== null && application !== void 0 ? application : {}, healthRoute = _a.healthRoute, command = _a.command, rest = __rest(_a, ["healthRoute", "command"]);
+    return (0, utils_1.mergeWithMergingArrays)({
+        host: context.environment.host,
+        command: command !== null && command !== void 0 ? command : context.componentConfig.build.startCommand,
+        livenessProbe: {
+            httpGet: {
+                path: healthRoute !== null && healthRoute !== void 0 ? healthRoute : "__health",
+            },
+        },
+        readinessProbe: {
+            httpGet: {
+                path: healthRoute !== null && healthRoute !== void 0 ? healthRoute : "__health",
+            },
+        },
+        startupProbe: {
+            httpGet: {
+                path: healthRoute !== null && healthRoute !== void 0 ? healthRoute : "__health",
+            },
+        },
+    }, // default
+    rest);
+};
+var removeFalsy = function (record) {
+    if (!record)
+        return undefined;
+    return Object.fromEntries(Object.entries(record).filter(function (_a) {
+        var _b = __read(_a, 2), value = _b[1];
+        return value !== false;
+    }));
+};
+var createKubeValues = function (context) {
+    var _a, _b;
+    var deployConfig = context.componentConfig.deploy;
+    if (deployConfig === false) {
+        return [];
+    }
+    if (!(0, types_1.isOfDeployType)(deployConfig, "kubernetes")) {
+        // should not happen
+        throw new Error("deploy config is not kubernetes");
+    }
+    var values = deployConfig.values;
+    // we remove the application config because it can be just the value `false` which is a convenience feature, but not supported in the helm chart
+    // we only merge the rest of the values in
+    var _c = values !== null && values !== void 0 ? values : {}, application = _c.application, jobs = _c.jobs, cronjobs = _c.cronjobs, rest = __rest(_c, ["application", "jobs", "cronjobs"]);
+    var env = (0, kubeEnv_1.createKubeEnv)(context);
+    var defaultKubeValues = (0, lodash_1.merge)({
+        env: env,
+        application: createAppConfig(context, application),
+    }, (0, cloudSql_1.hasKubernetesCloudSQL)(context)
+        ? (0, cloudSql_1.createKubernetesCloudsqlBaseValues)(context)
+        : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled)
+        ? (0, mongodb_1.createMongodbBaseConfig)(context)
+        : {});
+    var kubeValues = (0, processSecretsAsFiles_1.processSecretsAsFiles)((0, utils_1.mergeWithMergingArrays)(defaultKubeValues, __assign({ jobs: removeFalsy(jobs), cronjobs: removeFalsy(cronjobs) }, rest)));
+    return kubeValues;
+};
+exports.createKubeValues = createKubeValues;
+//# sourceMappingURL=kubeValues.js.map

package/dist/pipeline/src/deploy/kubernetes/kubeValues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubeValues.js","sourceRoot":"","sources":["../../../../../../pipeline/src/deploy/kubernetes/kubeValues.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAA+B;AAG/B,qCAAqD;AAErD,kCAA0C;AAC1C,uCAGoB;AAEpB,qCAA0C;AAC1C,qCAAoD;AACpD,iEAAgE;AAEhE,IAAM,eAAe,GAAG,UACtB,OAAgB,EAChB,WAAwD;IAExD,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,IAAM,KAAoC,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,EAAE,EAAnD,WAAW,iBAAA,EAAE,OAAO,aAAA,EAAK,IAAI,cAA/B,0BAAiC,CAAoB,CAAC;IAE5D,OAAO,IAAA,8BAAsB,EAC3B;QACE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI;QAC9B,OAAO,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY;QAC9D,aAAa,EAAE;YACb,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU;aAChC;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU;aAChC;SACF;QACD,YAAY,EAAE;YACZ,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU;aAChC;SACF;KACF,EAAE,UAAU;IACb,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,IAAM,WAAW,GAAG,UAAI,MAAkC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,UAAC,EAAS;YAAT,KAAA,aAAS,EAAN,KAAK,QAAA;QAAM,OAAA,KAAK,KAAK,KAAK;IAAf,CAAe,CAAC,CAC9D,CAAC;AACJ,CAAC,CAAC;AAEK,IAAM,gBAAgB,GAAG,UAAC,OAAgB;;IAC/C,IAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;IACpD,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,IAAA,sBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,oBAAoB;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAEO,IAAA,MAAM,GAAK,YAAY,OAAjB,CAAkB;IAEhC,gJAAgJ;IAChJ,0CAA0C;IAC1C,IAAM,KAA2C,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,EAArD,WAAW,iBAAA,EAAE,IAAI,UAAA,EAAE,QAAQ,cAAA,EAAK,IAAI,cAAtC,mCAAwC,CAAe,CAAC;IAE9D,IAAM,GAAG,GAAG,IAAA,uBAAa,EAAC,OAAO,CAAC,CAAC;IAEnC,IAAM,iBAAiB,GAAG,IAAA,cAAK,EAC7B;QACE,GAAG,KAAA;QACH,WAAW,EAAE,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC;KACnD,EACD,IAAA,gCAAqB,EAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,IAAA,6CAAkC,EAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,EAAE,EACN,CAAA,MAAA,MAAA,YAAY,CAAC,MAAM,0CAAE,OAAO,0CAAE,OAAO;QACnC,CAAC,CAAC,IAAA,iCAAuB,EAAC,OAAO,CAAC;QAClC,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,IAAM,UAAU,GAAG,IAAA,6CAAqB,EACtC,IAAA,8BAAsB,EAAC,iBAAiB,aACtC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EACvB,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,IAE5B,IAAI,EACP,CACH,CAAC;IAEF,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAzCW,QAAA,gBAAgB,oBAyC3B"}

package/dist/pipeline/src/deploy/kubernetes/mongodb.d.ts

@@ -0,0 +1,28 @@
+import type { Context } from "../../types/context";
+export declare const createMongodbBaseConfig: (context: Context) => {
+    mongodb: {
+        enabled: boolean;
+        auth: {
+            enabled: boolean;
+            rootPassword: string;
+            replicaSetKey: string;
+        };
+        persistence: {
+            storageClass: string;
+        };
+        backup: {
+            enabled: boolean;
+            hostToBackup: string;
+            pvcToBackup: string;
+            image: string;
+            schedule: string;
+            volumeSnapshotClass: string;
+        };
+    };
+    env: {
+        secret: {
+            MONGO_OPLOG_URL?: string;
+            MONGO_URL: string;
+        };
+    };
+};

package/dist/pipeline/src/deploy/kubernetes/mongodb.js

@@ -0,0 +1,114 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMongodbBaseConfig = void 0;
+var lodash_1 = require("lodash");
+var getEnvironmentVariables_1 = require("../../context/getEnvironmentVariables");
+var types_1 = require("../types");
+var getCredentialString = function (context) {
+    return "root:$".concat((0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "MONGODB_ROOT_PASSWORD"), "@");
+};
+var getMongodbHost = function (context, name) {
+    var namespace = context.environment.envVars.KUBE_NAMESPACE;
+    return "".concat(name, ".").concat(namespace, ".svc.cluster.local:27017");
+};
+var getMongodbStandaloneHost = function (context) {
+    var fullAppname = context.environment.envVars.KUBE_APP_NAME;
+    return getMongodbHost(context, "".concat(fullAppname, "-mongodb"));
+};
+var getMongodbReplicasetHost = function (context, index) {
+    var fullAppname = context.environment.envVars.KUBE_APP_NAME;
+    return getMongodbHost(context, "".concat(fullAppname, "-mongodb-").concat(index, ".").concat(fullAppname, "-mongodb-headless"));
+};
+var createMongodbUrl = function (context, dbName) {
+    var _a, _b;
+    if (!(0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+        throw new Error("can only createMongodbUrl on supported deploys");
+    }
+    var mongodbConfig = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.mongodb;
+    var queryParams = undefined;
+    var hosts = "";
+    if ((mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset") {
+        hosts = (0, lodash_1.range)(0, (_b = mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.replicaCount) !== null && _b !== void 0 ? _b : 2)
+            .map(function (i) { return getMongodbReplicasetHost(context, i); })
+            .join(",");
+        queryParams = "replicaSet=rs0&authSource=admin";
+    }
+    else {
+        hosts = getMongodbStandaloneHost(context);
+        queryParams = "authSource=admin";
+    }
+    return "mongodb://".concat(getCredentialString(context)).concat(hosts, "/").concat(dbName).concat(queryParams ? "?".concat(queryParams) : "");
+};
+var createMongoBackupDefaultConfig = function (context) {
+    var _a;
+    if (!(0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+        throw new Error("can only create mongodb base config on supported deploys");
+    }
+    var mongodbConfig = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.mongodb;
+    var fullAppName = context.environment.envVars.KUBE_APP_NAME;
+    var backupEnabled = ["prod", "stage"].includes(context.environment.envType);
+    var hostToBackup;
+    var pvcToBackup;
+    if ((mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset") {
+        // bit quirky, we need to specify the host and its volume
+        // on replicaset its probably best to not use the first one, whcih usually starts as master, so we take the second (last one would also be ok)
+        var backupHostIndex = (mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset" &&
+            mongodbConfig.replicaCount &&
+            mongodbConfig.replicaCount > 1
+            ? 1
+            : 0;
+        hostToBackup = getMongodbReplicasetHost(context, backupHostIndex);
+        pvcToBackup = "datadir-".concat(fullAppName, "-mongodb-").concat(backupHostIndex);
+    }
+    else {
+        hostToBackup = getMongodbStandaloneHost(context);
+        pvcToBackup = "".concat(fullAppName, "-mongodb");
+    }
+    return {
+        enabled: backupEnabled,
+        hostToBackup: hostToBackup,
+        pvcToBackup: pvcToBackup,
+        image: "mrelite/kubectlmongoshell:v1.0",
+        schedule: "0 4 * * *",
+        volumeSnapshotClass: "snapshotclass",
+    };
+};
+var createMongodbBaseConfig = function (context) {
+    var _a, _b;
+    if (!(0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+        throw new Error("can only create mongodb base config on supported deploys");
+    }
+    var mongodbConfig = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.mongodb;
+    return {
+        mongodb: {
+            enabled: true,
+            auth: {
+                enabled: true,
+                rootPassword: "$" + (0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "MONGODB_ROOT_PASSWORD"),
+                replicaSetKey: "$" + (0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "MONGODB_REPLICASET_KEY"),
+            },
+            persistence: {
+                storageClass: "standard-rwo",
+            },
+            backup: createMongoBackupDefaultConfig(context),
+        },
+        env: {
+            secret: __assign({ MONGO_URL: createMongodbUrl(context, (_b = mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.dbName) !== null && _b !== void 0 ? _b : "app") }, ((mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset"
+                ? { MONGO_OPLOG_URL: createMongodbUrl(context, "local") } // oplog only works with replicasets
+                : {})),
+        },
+    };
+};
+exports.createMongodbBaseConfig = createMongodbBaseConfig;
+//# sourceMappingURL=mongodb.js.map

package/dist/pipeline/src/deploy/kubernetes/mongodb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb.js","sourceRoot":"","sources":["../../../../../../pipeline/src/deploy/kubernetes/mongodb.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,iCAA+B;AAC/B,iFAAmF;AAEnF,kCAA0C;AAE1C,IAAM,mBAAmB,GAAG,UAAC,OAAgB;IAC3C,OAAA,gBAAS,IAAA,oDAA0B,EAAC,OAAO,EAAE,uBAAuB,CAAC,MAAG;AAAxE,CAAwE,CAAC;AAC3E,IAAM,cAAc,GAAG,UAAC,OAAgB,EAAE,IAAY;IACpD,IAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC;IAC7D,OAAO,UAAG,IAAI,cAAI,SAAS,6BAA0B,CAAC;AACxD,CAAC,CAAC;AAEF,IAAM,wBAAwB,GAAG,UAAC,OAAgB;IAChD,IAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9D,OAAO,cAAc,CAAC,OAAO,EAAE,UAAG,WAAW,aAAU,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,IAAM,wBAAwB,GAAG,UAAC,OAAgB,EAAE,KAAa;IAC/D,IAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9D,OAAO,cAAc,CACnB,OAAO,EACP,UAAG,WAAW,sBAAY,KAAK,cAAI,WAAW,sBAAmB,CAClE,CAAC;AACJ,CAAC,CAAC;AACF,IAAM,gBAAgB,GAAG,UAAC,OAAgB,EAAE,MAAc;;IACxD,IAAI,CAAC,IAAA,sBAAc,EAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAM,aAAa,GAAG,MAAA,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,0CAAE,OAAO,CAAC;IAErE,IAAI,WAAW,GAAuB,SAAS,CAAC;IAEhD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY,EAAE,CAAC;QACjD,KAAK,GAAG,IAAA,cAAK,EAAC,CAAC,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,mCAAI,CAAC,CAAC;aAC/C,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC,EAApC,CAAoC,CAAC;aAChD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEb,WAAW,GAAG,iCAAiC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC1C,WAAW,GAAG,kBAAkB,CAAC;IACnC,CAAC;IAED,OAAO,oBAAa,mBAAmB,CAAC,OAAO,CAAC,SAAG,KAAK,cAAI,MAAM,SAChE,WAAW,CAAC,CAAC,CAAC,WAAI,WAAW,CAAE,CAAC,CAAC,CAAC,EAAE,CACpC,CAAC;AACL,CAAC,CAAC;AACF,IAAM,8BAA8B,GAAG,UAAC,OAAgB;;IACtD,IAAI,CAAC,IAAA,sBAAc,EAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAM,aAAa,GAAG,MAAA,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,0CAAE,OAAO,CAAC;IACrE,IAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9D,IAAM,aAAa,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAE9E,IAAI,YAAoB,CAAC;IACzB,IAAI,WAAmB,CAAC;IAExB,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY,EAAE,CAAC;QACjD,yDAAyD;QACzD,8IAA8I;QAC9I,IAAM,eAAe,GACnB,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY;YAC5C,aAAa,CAAC,YAAY;YAC1B,aAAa,CAAC,YAAY,GAAG,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,CAAC;QAER,YAAY,GAAG,wBAAwB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAClE,WAAW,GAAG,kBAAW,WAAW,sBAAY,eAAe,CAAE,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACjD,WAAW,GAAG,UAAG,WAAW,aAAU,CAAC;IACzC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,YAAY,cAAA;QACZ,WAAW,aAAA;QACX,KAAK,EAAE,gCAAgC;QACvC,QAAQ,EAAE,WAAW;QACrB,mBAAmB,EAAE,eAAe;KACrC,CAAC;AACJ,CAAC,CAAC;AACK,IAAM,uBAAuB,GAAG,UAAC,OAAgB;;IACtD,IAAI,CAAC,IAAA,sBAAc,EAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAM,aAAa,GAAG,MAAA,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,0CAAE,OAAO,CAAC;IAErE,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,YAAY,EACV,GAAG,GAAG,IAAA,oDAA0B,EAAC,OAAO,EAAE,uBAAuB,CAAC;gBACpE,aAAa,EACX,GAAG,GAAG,IAAA,oDAA0B,EAAC,OAAO,EAAE,wBAAwB,CAAC;aACtE;YACD,WAAW,EAAE;gBACX,YAAY,EAAE,cAAc;aAC7B;YACD,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC;SAChD;QACD,GAAG,EAAE;YACH,MAAM,aACJ,SAAS,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,mCAAI,KAAK,CAAC,IACjE,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY;gBAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,oCAAoC;gBAC9F,CAAC,CAAC,EAAE,CAAC,CACR;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AA9BW,QAAA,uBAAuB,2BA8BlC"}

package/dist/pipeline/src/deploy/kubernetes/processSecretsAsFiles.d.ts

@@ -0,0 +1,85 @@
+import type { StringOrBashExpression } from "../../bash/BashExpression";
+export declare const processSecretsAsFiles: <T extends {
+    env: {
+        secret: Record<string, StringOrBashExpression>;
+    };
+} & {
+    cloudsql?: import("../types").DeployConfigKubernetesValuesCloudSQL;
+    mongodb?: import("../types").DeployConfigMongodb;
+    mailhog?: {
+        enabled: boolean;
+    };
+    jobs?: Record<string, false | import("../types/base").AllowUnknownProps<{
+        command: string;
+        hook?: string;
+    }>>;
+    cronjobs?: Record<string, false | import("../types/base").AllowUnknownProps<{
+        schedule: string;
+        command: string;
+        concurrencyPolicy?: "Forbid" | "Allow" | "Replace";
+    }>>;
+    application?: false | import("../types/base").AllowUnknownProps<{
+        command?: string;
+        enabled?: boolean;
+        redirects?: import("../types").KubernetesRedirect[];
+        hostAliases?: string[];
+        replicas?: number;
+        autoscale?: import("../types").KubernetesAutoscale;
+        updateStrategy?: import("../types").KubernetesUpdateStrategy;
+        resources?: import("../types").KubernetesResourcesDef;
+        healthRoute?: string;
+        startupProbe?: {
+            httpGet?: {
+                path?: string;
+                port?: number;
+                httpHeaders?: {
+                    name: string;
+                    value: string;
+                }[];
+                failureThreshold?: number;
+                timeoutSeconds?: number;
+                periodSeconds?: number;
+                successThreshold?: number;
+            };
+        };
+        readinessProbe?: {
+            httpGet?: {
+                path?: string;
+                port?: number;
+                httpHeaders?: {
+                    name: string;
+                    value: string;
+                }[];
+                failureThreshold?: number;
+                timeoutSeconds?: number;
+                periodSeconds?: number;
+                successThreshold?: number;
+            };
+        };
+        livenessProbe?: {
+            httpGet?: {
+                path?: string;
+                port?: number;
+                httpHeaders?: {
+                    name: string;
+                    value: string;
+                }[];
+                failureThreshold?: number;
+                timeoutSeconds?: number;
+                periodSeconds?: number;
+                successThreshold?: number;
+            };
+        };
+        worker?: import("../types").KubernetesWorkerDef;
+        jobDefaults?: {
+            resources: import("../types").KubernetesResourcesDef;
+        };
+    }>;
+    secretsFromOtherComponent?: {
+        [envVar: string]: string;
+    };
+    mapServiceUrlToEnv?: {
+        [envVar: string]: string;
+    };
+    secretsAsFile?: string[];
+} & Record<string, unknown>>(values: T) => T;

package/dist/pipeline/src/deploy/kubernetes/processSecretsAsFiles.js

@@ -0,0 +1,29 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processSecretsAsFiles = void 0;
+var lodash_1 = require("lodash");
+var processSecretsAsFiles = function (values) {
+    if (!values.secretsAsFile || values.secretsAsFile.length === 0) {
+        return values;
+    }
+    // the initial idea was that we "shadow" secrets that we mount as files,
+    // but there is a weird kubernetes  issue with that (https://github.com/kubernetes/kubernetes/issues/46861),
+    // so instead we rename the secrets and append _content, so that inside kuberentes, we can use the original name to contain the path and name+_content as the actual content
+    return __assign(__assign({}, values), { env: __assign(__assign({}, values.env), { secret: __assign(__assign({}, (0, lodash_1.omit)(values.env.secret, values.secretsAsFile)), Object.fromEntries(values.secretsAsFile.map(function (key) { return [
+                key + "_content",
+                values.env.secret[key],
+            ]; }))) }) });
+};
+exports.processSecretsAsFiles = processSecretsAsFiles;
+//# sourceMappingURL=processSecretsAsFiles.js.map

package/dist/pipeline/src/deploy/kubernetes/processSecretsAsFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processSecretsAsFiles.js","sourceRoot":"","sources":["../../../../../../pipeline/src/deploy/kubernetes/processSecretsAsFiles.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,iCAA8B;AAIvB,IAAM,qBAAqB,GAAG,UAOnC,MAAS;IAET,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,wEAAwE;IACxE,4GAA4G;IAC5G,4KAA4K;IAC5K,6BACK,MAAM,KACT,GAAG,wBACE,MAAM,CAAC,GAAG,KACb,MAAM,wBACD,IAAA,aAAI,EAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,GAC7C,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAC,GAAG,IAAK,OAAA;gBAChC,GAAG,GAAG,UAAU;gBAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;aACvB,EAHiC,CAGjC,CAAC,CACH,QAGL;AACJ,CAAC,CAAC;AA9BW,QAAA,qBAAqB,yBA8BhC"}

package/dist/pipeline/src/deploy/sbom.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from "../types/context";
+export declare const sbomDeactivated: (context: Context) => boolean;
+export declare const getDependencyTrackUploadScript: (context: Context) => string[];
+export declare const getDependencyTrackDeleteScript: (context: Context) => string[];

package/dist/pipeline/src/deploy/sbom.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDependencyTrackDeleteScript = exports.getDependencyTrackUploadScript = exports.sbomDeactivated = void 0;
+var sbom_1 = require("../build/sbom");
+var sbomDeactivated = function (context) {
+    return context.componentConfig.build.type === "custom" &&
+        context.componentConfig.build.sbom === false;
+};
+exports.sbomDeactivated = sbomDeactivated;
+var getDependencyTrackUploadScript = function (context) {
+    return (0, exports.sbomDeactivated)(context)
+        ? []
+        : [
+            "echo Uploading SBOM to Dependency Track",
+            "/dtrackuploader https://dep.panter.swiss/ \"$DT_KEY_PROD\" upload \"".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, "/").concat(context.componentName, "\" \"").concat(context.environment.url, "\" \"").concat(sbom_1.SBOM_FILE, "\" vex.json || true"),
+        ];
+};
+exports.getDependencyTrackUploadScript = getDependencyTrackUploadScript;
+var getDependencyTrackDeleteScript = function (context) {
+    return (0, exports.sbomDeactivated)(context)
+        ? []
+        : [
+            "echo Disabling component in Dependency Track",
+            "/dtrackuploader https://dep.panter.swiss/ \"$DT_KEY_PROD\" disable \"".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, "/").concat(context.componentName, "\" \"").concat(context.environment.url, "\" || true"),
+        ];
+};
+exports.getDependencyTrackDeleteScript = getDependencyTrackDeleteScript;
+//# sourceMappingURL=sbom.js.map

package/dist/pipeline/src/deploy/sbom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sbom.js","sourceRoot":"","sources":["../../../../../pipeline/src/deploy/sbom.ts"],"names":[],"mappings":";;;AACA,sCAA0C;AAEnC,IAAM,eAAe,GAAG,UAAC,OAAgB;IAC9C,OAAA,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC/C,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;AAD5C,CAC4C,CAAC;AAFlC,QAAA,eAAe,mBAEmB;AAExC,IAAM,8BAA8B,GAAG,UAAC,OAAgB;IAC7D,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,yCAAyC;YACzC,8EAAoE,OAAO,CAAC,UAAU,CAAC,YAAY,cAAI,OAAO,CAAC,UAAU,CAAC,OAAO,cAAI,OAAO,CAAC,aAAa,kBAAM,OAAO,CAAC,WAAW,CAAC,GAAG,kBAAM,gBAAS,wBAAoB;SAC3N,CAAC;AACR,CAAC,CAAC;AAPW,QAAA,8BAA8B,kCAOzC;AAEK,IAAM,8BAA8B,GAAG,UAAC,OAAgB;IAC7D,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,8CAA8C;YAC9C,+EAAqE,OAAO,CAAC,UAAU,CAAC,YAAY,cAAI,OAAO,CAAC,UAAU,CAAC,OAAO,cAAI,OAAO,CAAC,aAAa,kBAAM,OAAO,CAAC,WAAW,CAAC,GAAG,eAAW;SACpM,CAAC;AACR,CAAC,CAAC;AAPW,QAAA,8BAA8B,kCAOzC"}

package/dist/pipeline/src/deploy/types/base.d.ts

@@ -0,0 +1,36 @@
+import type { EnvVars } from "../../types/config";
+export type DeployConfigBase = {
+    /**
+     * whether to deploy automatically or manual. If not defined, these rules apply:
+     * - prod: manual
+     * - all other envs: auto
+     */
+    when?: "manual" | "auto";
+    /**
+     * EXPERIMENTAL
+     * wait for other components to deploy first, before doing this deployment
+     */
+    waitFor?: string[];
+    /**
+     * tags for the underlying job runner (e.g gitlab)
+     */
+    jobTags?: string[];
+    /**
+     * vars that only exist in the deploy job.
+     * Can curently not reference other variables from other components
+     */
+    jobVars?: EnvVars;
+    /**
+     * additional env vars for the deploy job
+     *
+     * @deprecated use deploy.jobVars for deploy job specific variables
+     */
+    extraVars?: Record<string, string>;
+    /**
+     * additional vars only for the runner.
+     * Also if you use services: that require env vars, you need to set them here.
+     *
+     */
+    runnerVariables?: Record<string, string>;
+};
+export type AllowUnknownProps<T extends Record<string, unknown>> = T & Record<string, unknown>;

package/dist/pipeline/src/deploy/types/base.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=base.js.map

package/dist/pipeline/src/deploy/types/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../../../pipeline/src/deploy/types/base.ts"],"names":[],"mappings":""}

package/dist/pipeline/src/deploy/types/custom.d.ts

@@ -0,0 +1,33 @@
+import type { GitlabJobImage } from "../../types";
+import type { CatladderJob } from "../../types/jobs";
+import type { DeployConfigBase } from "./base";
+export type DeployConfigCustom = {
+    /**
+     * custom deploy types allow you to specify custom commands to deploy your app
+     */
+    type: "custom";
+    /**
+     * whether the deploy script requires a docker image to be built
+     */
+    requiresDocker: boolean;
+    /**
+     * whether your custom script requires yarn install
+     */
+    requiresYarnInstall?: boolean;
+    /**
+     * your custom script
+     */
+    script: string[];
+    /**
+     * script to run to stop the environment
+     */
+    stopScript?: string[];
+    /**
+     * image to use
+     */
+    jobImage?: GitlabJobImage;
+    /**
+     * customize cache for the job
+     */
+    jobCache?: CatladderJob["cache"];
+} & DeployConfigBase;

package/dist/pipeline/src/deploy/types/custom.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=custom.js.map

package/dist/pipeline/src/deploy/types/custom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../../../../../pipeline/src/deploy/types/custom.ts"],"names":[],"mappings":""}

package/dist/pipeline/src/deploy/types/dockerTag.d.ts

@@ -0,0 +1,12 @@
+import type { DeployConfigBase } from "./base";
+export type DeployConfigDockerTag = {
+    /**
+     * adds a custom tag on the repo to deploy it.
+     *
+     * only used in veloplus atm, generally not recommended to use
+     * because run-time environment variables have to be coordinated
+     * manually with the platform running the container.
+     */
+    type: "dockerTag";
+    tag: string;
+} & DeployConfigBase;

package/dist/pipeline/src/deploy/types/dockerTag.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=dockerTag.js.map

package/dist/pipeline/src/deploy/types/dockerTag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerTag.js","sourceRoot":"","sources":["../../../../../../pipeline/src/deploy/types/dockerTag.ts"],"names":[],"mappings":""}