@catladder/pipeline 0.0.0-more-collapse-deeb54d7 → 0.0.0-multiple-gitlab-includes-1a40efc0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (597) hide show
  1. package/README.md +17 -0
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +34 -0
  5. package/dist/bash/bashEscape.js +114 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.d.ts +0 -1
  18. package/dist/build/base/constants.js +4 -3
  19. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  20. package/dist/build/base/createAppBuildJob.js +18 -15
  21. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  22. package/dist/build/base/createArtifactsConfig.js +3 -1
  23. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  24. package/dist/build/base/createBuildJobDefinition.js +58 -0
  25. package/dist/build/base/index.d.ts +7 -4
  26. package/dist/build/base/index.js +17 -6
  27. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  28. package/dist/build/base/writeBuildInfo.js +4 -3
  29. package/dist/build/base/writeDotEnv.d.ts +3 -2
  30. package/dist/build/base/writeDotEnv.js +30 -6
  31. package/dist/build/cache/createJobCache.d.ts +7 -0
  32. package/dist/build/cache/createJobCache.js +115 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  34. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  35. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  36. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  37. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  38. package/dist/build/custom/buildJob.d.ts +2 -2
  39. package/dist/build/custom/buildJob.js +8 -67
  40. package/dist/build/custom/index.d.ts +2 -2
  41. package/dist/build/custom/index.js +3 -1
  42. package/dist/build/custom/testJob.d.ts +4 -4
  43. package/dist/build/custom/testJob.js +25 -21
  44. package/dist/build/docker.d.ts +48 -39
  45. package/dist/build/docker.js +112 -37
  46. package/dist/build/index.d.ts +14 -7
  47. package/dist/build/index.js +44 -16
  48. package/dist/build/node/buildJob.d.ts +6 -2
  49. package/dist/build/node/buildJob.js +39 -48
  50. package/dist/build/node/cache.d.ts +4 -5
  51. package/dist/build/node/cache.js +18 -23
  52. package/dist/build/node/constants.d.ts +0 -1
  53. package/dist/build/node/constants.js +5 -4
  54. package/dist/build/node/index.d.ts +4 -4
  55. package/dist/build/node/index.js +3 -1
  56. package/dist/build/node/meteor.d.ts +2 -2
  57. package/dist/build/node/meteor.js +10 -12
  58. package/dist/build/node/testJob.d.ts +3 -2
  59. package/dist/build/node/testJob.js +29 -19
  60. package/dist/build/node/yarn.d.ts +3 -2
  61. package/dist/build/node/yarn.js +13 -13
  62. package/dist/build/rails/build.d.ts +2 -2
  63. package/dist/build/rails/build.js +24 -8
  64. package/dist/build/rails/index.d.ts +2 -2
  65. package/dist/build/rails/index.js +3 -1
  66. package/dist/build/rails/test.d.ts +2 -2
  67. package/dist/build/rails/test.js +20 -12
  68. package/dist/build/sbom.d.ts +2 -2
  69. package/dist/build/sbom.js +9 -6
  70. package/dist/build/types.d.ts +152 -47
  71. package/dist/build/types.js +10 -2
  72. package/dist/catladder-gitlab.js +129 -49
  73. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  74. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  75. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  76. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  77. package/dist/config/configruedEnvs.js +3 -1
  78. package/dist/config/index.js +13 -7
  79. package/dist/config/readConfig.d.ts +2 -2
  80. package/dist/config/readConfig.js +191 -40
  81. package/dist/constants.js +5 -3
  82. package/dist/context/createAllComponentsContext.d.ts +12 -0
  83. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  84. package/dist/context/createComponentContext.d.ts +11 -0
  85. package/dist/context/createComponentContext.js +255 -0
  86. package/dist/context/createWorkspaceContext.d.ts +16 -0
  87. package/dist/context/createWorkspaceContext.js +173 -0
  88. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  89. package/dist/context/getBuildInfoVariables.js +55 -0
  90. package/dist/context/getEnvConfig.js +5 -2
  91. package/dist/context/getEnvType.js +3 -1
  92. package/dist/context/getEnvironment.d.ts +3 -3
  93. package/dist/context/getEnvironment.js +11 -12
  94. package/dist/context/getEnvironmentContext.d.ts +7 -3
  95. package/dist/context/getEnvironmentContext.js +21 -11
  96. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  97. package/dist/context/getEnvironmentVariables.js +81 -49
  98. package/dist/context/getLabels.d.ts +2 -2
  99. package/dist/context/getLabels.js +9 -7
  100. package/dist/context/getReviewSlug.d.ts +4 -0
  101. package/dist/context/getReviewSlug.js +21 -0
  102. package/dist/context/index.d.ts +2 -4
  103. package/dist/context/index.js +15 -162
  104. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  105. package/dist/context/transformJobOnlyVars.js +4 -2
  106. package/dist/context/utils/envVars.d.ts +1 -1
  107. package/dist/context/utils/envVars.js +5 -2
  108. package/dist/defaults/index.js +3 -1
  109. package/dist/deploy/base/deploy.d.ts +3 -3
  110. package/dist/deploy/base/deploy.js +38 -22
  111. package/dist/deploy/base/index.d.ts +3 -5
  112. package/dist/deploy/base/index.js +3 -1
  113. package/dist/deploy/base/rollback.d.ts +3 -3
  114. package/dist/deploy/base/rollback.js +13 -9
  115. package/dist/deploy/base/stop.d.ts +3 -3
  116. package/dist/deploy/base/stop.js +16 -11
  117. package/dist/deploy/base/types.d.ts +1 -1
  118. package/dist/deploy/base/types.js +3 -1
  119. package/dist/deploy/base/variables.d.ts +0 -1
  120. package/dist/deploy/base/variables.js +4 -3
  121. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +19 -0
  122. package/dist/deploy/cloudRun/artifactsRegistry.js +125 -0
  123. package/dist/deploy/cloudRun/cleanup.d.ts +2 -0
  124. package/dist/deploy/cloudRun/cleanup.js +53 -0
  125. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -0
  126. package/dist/deploy/cloudRun/cloudRunRevisions.js +62 -0
  127. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +7 -0
  128. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +207 -0
  129. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +4 -0
  130. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +96 -0
  131. package/dist/deploy/cloudRun/createJobs/common.d.ts +18 -0
  132. package/dist/deploy/cloudRun/createJobs/common.js +93 -0
  133. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  134. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  135. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +62 -0
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -0
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +54 -0
  139. package/dist/deploy/cloudRun/createJobs/index.d.ts +3 -0
  140. package/dist/deploy/cloudRun/createJobs/index.js +57 -0
  141. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  142. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  143. package/dist/deploy/cloudRun/index.d.ts +2 -2
  144. package/dist/deploy/cloudRun/index.js +17 -10
  145. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +3 -1
  146. package/dist/deploy/cloudRun/utils/createArgsString.js +25 -17
  147. package/dist/deploy/cloudRun/utils/database.d.ts +6 -4
  148. package/dist/deploy/cloudRun/utils/database.js +28 -15
  149. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  150. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +4 -2
  151. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -0
  152. package/dist/deploy/cloudRun/utils/getServiceName.js +10 -0
  153. package/dist/deploy/cloudRun/utils/jobName.d.ts +2 -1
  154. package/dist/deploy/cloudRun/utils/jobName.js +4 -2
  155. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.d.ts +9 -0
  156. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +18 -0
  157. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  158. package/dist/deploy/cloudSql/utils.js +7 -2
  159. package/dist/deploy/custom/deployJob.d.ts +2 -2
  160. package/dist/deploy/custom/deployJob.js +10 -9
  161. package/dist/deploy/custom/index.d.ts +2 -2
  162. package/dist/deploy/custom/index.js +3 -1
  163. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  164. package/dist/deploy/dockerTag/deployJob.js +38 -7
  165. package/dist/deploy/dockerTag/index.d.ts +2 -2
  166. package/dist/deploy/dockerTag/index.js +3 -1
  167. package/dist/deploy/index.d.ts +10 -9
  168. package/dist/deploy/index.js +13 -7
  169. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  170. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  171. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  172. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  173. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  174. package/dist/deploy/kubernetes/deployJob.js +23 -22
  175. package/dist/deploy/kubernetes/index.d.ts +2 -2
  176. package/dist/deploy/kubernetes/index.js +52 -15
  177. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  178. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  179. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  180. package/dist/deploy/kubernetes/kubeValues.js +16 -18
  181. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  182. package/dist/deploy/kubernetes/mongodb.js +14 -12
  183. package/dist/deploy/sbom.d.ts +4 -4
  184. package/dist/deploy/sbom.js +7 -4
  185. package/dist/deploy/types/base.d.ts +5 -5
  186. package/dist/deploy/types/base.js +3 -1
  187. package/dist/deploy/types/custom.d.ts +3 -7
  188. package/dist/deploy/types/custom.js +3 -1
  189. package/dist/deploy/types/dockerTag.d.ts +3 -1
  190. package/dist/deploy/types/dockerTag.js +3 -1
  191. package/dist/deploy/types/googleCloudRun.d.ts +127 -24
  192. package/dist/deploy/types/googleCloudRun.js +3 -1
  193. package/dist/deploy/types/index.d.ts +6 -6
  194. package/dist/deploy/types/index.js +14 -8
  195. package/dist/deploy/types/kubernetes.d.ts +25 -54
  196. package/dist/deploy/types/kubernetes.js +3 -1
  197. package/dist/deploy/utils.d.ts +2 -2
  198. package/dist/deploy/utils.js +5 -2
  199. package/dist/globalScriptFunctions/index.d.ts +14 -0
  200. package/dist/globalScriptFunctions/index.js +37 -0
  201. package/dist/index.d.ts +5 -2
  202. package/dist/index.js +18 -9
  203. package/dist/packageInfos.d.ts +4 -0
  204. package/dist/packageInfos.js +20 -0
  205. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  206. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  207. package/dist/pipeline/createAllJobs.d.ts +16 -6
  208. package/dist/pipeline/createAllJobs.js +99 -27
  209. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  210. package/dist/pipeline/createJobsForComponent.js +9 -149
  211. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  212. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  213. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  214. package/dist/pipeline/createMainPipeline.js +283 -0
  215. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  216. package/dist/pipeline/generatePipelineFiles.js +304 -0
  217. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  218. package/dist/pipeline/getPipelineStages.js +56 -0
  219. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  220. package/dist/pipeline/gitlab/createGitlabJobs.js +258 -74
  221. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  222. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  223. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  224. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  225. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  226. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  227. package/dist/pipeline/index.d.ts +3 -2
  228. package/dist/pipeline/index.js +16 -9
  229. package/dist/pipeline/packageManager.d.ts +3 -2
  230. package/dist/pipeline/packageManager.js +50 -24
  231. package/dist/pipeline/yarn/yarnUtils.d.ts +3 -2
  232. package/dist/pipeline/yarn/yarnUtils.js +65 -17
  233. package/dist/rules/index.d.ts +7 -2
  234. package/dist/rules/index.js +34 -16
  235. package/dist/runner/index.d.ts +1 -1
  236. package/dist/runner/index.js +3 -1
  237. package/dist/tsconfig.tsbuildinfo +1 -1
  238. package/dist/types/config.d.ts +44 -29
  239. package/dist/types/config.js +5 -2
  240. package/dist/types/context.d.ts +124 -40
  241. package/dist/types/context.js +12 -1
  242. package/dist/types/environmentContext.d.ts +15 -12
  243. package/dist/types/environmentContext.js +3 -1
  244. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  245. package/dist/types/gitlab-ci-yml.js +3 -2
  246. package/dist/types/gitlab-types.d.ts +8 -8
  247. package/dist/types/gitlab-types.js +3 -1
  248. package/dist/types/index.d.ts +1 -0
  249. package/dist/types/index.js +14 -7
  250. package/dist/types/jobDefinition.d.ts +11 -0
  251. package/dist/types/jobDefinition.js +5 -0
  252. package/dist/types/jobs.d.ts +30 -15
  253. package/dist/types/jobs.js +3 -1
  254. package/dist/types/pipeline.d.ts +3 -3
  255. package/dist/types/pipeline.js +3 -1
  256. package/dist/types/utils.d.ts +1 -1
  257. package/dist/types/utils.js +3 -1
  258. package/dist/utils/gitlab.js +7 -2
  259. package/dist/utils/index.d.ts +2 -1
  260. package/dist/utils/index.js +10 -3
  261. package/dist/utils/jsonParse.d.ts +1 -0
  262. package/dist/utils/jsonParse.js +14 -0
  263. package/dist/utils/removeUndefined.d.ts +1 -0
  264. package/dist/utils/removeUndefined.js +36 -0
  265. package/dist/utils/writeFiles.d.ts +11 -0
  266. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  267. package/dist/variables/VariableValue.d.ts +3 -0
  268. package/dist/variables/VariableValue.js +5 -0
  269. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  270. package/dist/variables/VariableValueContainingReferences.js +97 -0
  271. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  272. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  273. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  274. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  275. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  276. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  277. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  278. package/dist/variables/__tests__/variableValue.test.js +36 -0
  279. package/dist/variables/resolveAllReferences.d.ts +3 -0
  280. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -47
  281. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  282. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  283. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  284. package/dist/variables/resolveReferencesOnce.js +22 -0
  285. package/examples/.test-gen-ignore +1 -0
  286. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1418 -0
  287. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1418 -0
  288. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1418 -0
  289. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1434 -0
  290. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1418 -0
  291. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1526 -0
  292. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1418 -0
  293. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1436 -0
  294. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1418 -0
  295. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1418 -0
  296. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1418 -0
  297. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1418 -0
  298. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1490 -0
  299. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1302 -0
  300. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1418 -0
  301. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2998 -0
  302. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1733 -0
  303. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1426 -0
  304. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1285 -0
  305. package/examples/__snapshots__/custom-build-job.test.ts.snap +1174 -0
  306. package/examples/__snapshots__/custom-deploy.test.ts.snap +1168 -0
  307. package/examples/__snapshots__/custom-envs.test.ts.snap +798 -0
  308. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1182 -0
  309. package/examples/__snapshots__/git-submodule.test.ts.snap +1419 -0
  310. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1759 -0
  311. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1779 -0
  312. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3357 -0
  313. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1883 -0
  314. package/examples/__snapshots__/local-dot-env.test.ts.snap +1342 -0
  315. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1836 -0
  316. package/examples/__snapshots__/multiline-var.test.ts.snap +5679 -0
  317. package/examples/__snapshots__/native-app.test.ts.snap +2206 -0
  318. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1418 -0
  319. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1426 -0
  320. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1487 -0
  321. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1471 -0
  322. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4739 -0
  323. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1368 -0
  324. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2338 -0
  325. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2330 -0
  326. package/examples/__utils__/helpers.ts +9 -12
  327. package/examples/cloud-run-http2.test.ts +11 -0
  328. package/examples/cloud-run-http2.ts +29 -0
  329. package/examples/cloud-run-memory-limit.test.ts +11 -0
  330. package/examples/cloud-run-memory-limit.ts +10 -5
  331. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  332. package/examples/cloud-run-meteor-with-worker.ts +37 -0
  333. package/examples/cloud-run-nextjs.test.ts +11 -0
  334. package/examples/cloud-run-nextjs.ts +28 -0
  335. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  336. package/examples/cloud-run-no-cpu-throttling.ts +6 -4
  337. package/examples/cloud-run-no-service.test.ts +11 -0
  338. package/examples/cloud-run-no-service.ts +33 -0
  339. package/examples/cloud-run-non-public.test.ts +11 -0
  340. package/examples/cloud-run-non-public.ts +5 -4
  341. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  342. package/examples/cloud-run-post-stop-job.ts +42 -0
  343. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  344. package/examples/cloud-run-service-custom-vpc-connector.ts +30 -0
  345. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  346. package/examples/cloud-run-service-custom-vpc.ts +31 -0
  347. package/examples/cloud-run-service-gen2.test.ts +11 -0
  348. package/examples/cloud-run-service-gen2.ts +29 -0
  349. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  350. package/examples/cloud-run-service-increase-timout.ts +29 -0
  351. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  352. package/examples/cloud-run-service-with-volumes.ts +56 -0
  353. package/examples/cloud-run-storybook.test.ts +11 -0
  354. package/examples/cloud-run-storybook.ts +33 -0
  355. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  356. package/examples/cloud-run-with-ngnix.ts +29 -0
  357. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  358. package/examples/cloud-run-with-sql-reuse-db.ts +5 -4
  359. package/examples/cloud-run-with-sql.test.ts +11 -0
  360. package/examples/cloud-run-with-sql.ts +6 -20
  361. package/examples/cloud-run-with-worker.test.ts +11 -0
  362. package/examples/cloud-run-with-worker.ts +37 -0
  363. package/examples/custom-build-job-with-tests.test.ts +11 -0
  364. package/examples/custom-build-job-with-tests.ts +5 -4
  365. package/examples/custom-build-job.test.ts +11 -0
  366. package/examples/custom-build-job.ts +5 -4
  367. package/examples/custom-deploy.test.ts +11 -0
  368. package/examples/custom-deploy.ts +12 -4
  369. package/examples/custom-envs.test.ts +11 -0
  370. package/examples/custom-envs.ts +5 -4
  371. package/examples/custom-sbom-java.test.ts +11 -0
  372. package/examples/custom-sbom-java.ts +10 -6
  373. package/examples/git-submodule.test.ts +11 -0
  374. package/examples/git-submodule.ts +30 -0
  375. package/examples/kubernetes-application-customization.test.ts +11 -0
  376. package/examples/kubernetes-application-customization.ts +7 -4
  377. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  378. package/examples/kubernetes-with-cloud-sql.ts +7 -4
  379. package/examples/kubernetes-with-jobs.test.ts +11 -0
  380. package/examples/kubernetes-with-jobs.ts +7 -4
  381. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  382. package/examples/kubernetes-with-mongodb.ts +7 -4
  383. package/examples/local-dot-env.test.ts +11 -0
  384. package/examples/local-dot-env.ts +27 -0
  385. package/examples/meteor-kubernetes.test.ts +11 -0
  386. package/examples/meteor-kubernetes.ts +4 -5
  387. package/examples/multiline-var.test.ts +11 -0
  388. package/examples/multiline-var.ts +107 -0
  389. package/examples/native-app.test.ts +11 -0
  390. package/examples/native-app.ts +22 -17
  391. package/examples/node-build-with-custom-image.test.ts +11 -0
  392. package/examples/node-build-with-custom-image.ts +5 -4
  393. package/examples/node-build-with-docker-additions.test.ts +11 -0
  394. package/examples/node-build-with-docker-additions.ts +29 -0
  395. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  396. package/examples/rails-k8s-with-worker.test.ts +11 -0
  397. package/examples/rails-k8s-with-worker.ts +14 -11
  398. package/examples/referencing-other-vars.test.ts +11 -0
  399. package/examples/referencing-other-vars.ts +83 -0
  400. package/examples/wait-for-other-deploy.test.ts +11 -0
  401. package/examples/wait-for-other-deploy.ts +5 -4
  402. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  403. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  404. package/examples/workspace-api-www.test.ts +11 -0
  405. package/examples/workspace-api-www.ts +46 -0
  406. package/package.json +75 -26
  407. package/scripts/generate-examples-test.ts +84 -0
  408. package/scripts/generate-gitlab-ci-types.ts +2 -2
  409. package/scripts/tsconfig.json +7 -0
  410. package/src/bash/BashExpression.ts +78 -0
  411. package/src/bash/bashEscape.ts +158 -0
  412. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  413. package/src/bash/bashYaml.ts +80 -0
  414. package/src/bash/getInjectVarsScript.ts +21 -0
  415. package/src/bash/index.ts +2 -0
  416. package/src/build/artifacts/createBuildJobArtifact.ts +61 -0
  417. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  418. package/src/build/base/constants.ts +2 -2
  419. package/src/build/base/createAppBuildJob.ts +40 -24
  420. package/src/build/base/createArtifactsConfig.ts +2 -2
  421. package/src/build/base/createBuildJobDefinition.ts +37 -0
  422. package/src/build/base/index.ts +37 -8
  423. package/src/build/base/writeBuildInfo.ts +3 -3
  424. package/src/build/base/writeDotEnv.ts +25 -6
  425. package/src/build/cache/createJobCache.ts +83 -0
  426. package/src/build/cache/getAllCacheConfigsFromConfig.ts +28 -0
  427. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  428. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  429. package/src/build/custom/buildJob.ts +11 -37
  430. package/src/build/custom/index.ts +2 -2
  431. package/src/build/custom/testJob.ts +24 -22
  432. package/src/build/docker.ts +145 -49
  433. package/src/build/index.ts +42 -10
  434. package/src/build/node/buildJob.ts +65 -62
  435. package/src/build/node/cache.ts +30 -35
  436. package/src/build/node/constants.ts +2 -3
  437. package/src/build/node/index.ts +8 -4
  438. package/src/build/node/meteor.ts +16 -24
  439. package/src/build/node/testJob.ts +47 -26
  440. package/src/build/node/yarn.ts +32 -16
  441. package/src/build/rails/build.ts +21 -9
  442. package/src/build/rails/index.ts +2 -2
  443. package/src/build/rails/test.ts +22 -12
  444. package/src/build/sbom.ts +15 -10
  445. package/src/build/types.ts +190 -47
  446. package/src/catladder-gitlab.ts +7 -56
  447. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  448. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  449. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  450. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  451. package/src/config/configruedEnvs.ts +6 -6
  452. package/src/config/readConfig.ts +15 -22
  453. package/src/constants.ts +5 -2
  454. package/src/context/createAllComponentsContext.ts +31 -0
  455. package/src/context/createComponentContext.ts +134 -0
  456. package/src/context/createWorkspaceContext.ts +56 -0
  457. package/src/context/getBuildInfoVariables.ts +36 -0
  458. package/src/context/getEnvConfig.ts +3 -3
  459. package/src/context/getEnvType.ts +1 -1
  460. package/src/context/getEnvironment.ts +8 -24
  461. package/src/context/getEnvironmentContext.ts +25 -29
  462. package/src/context/getEnvironmentVariables.ts +104 -76
  463. package/src/context/getLabels.ts +5 -5
  464. package/src/context/getReviewSlug.ts +27 -0
  465. package/src/context/index.ts +1 -65
  466. package/src/context/transformJobOnlyVars.ts +6 -3
  467. package/src/context/utils/envVars.ts +5 -4
  468. package/src/deploy/base/deploy.ts +63 -47
  469. package/src/deploy/base/index.ts +11 -6
  470. package/src/deploy/base/rollback.ts +11 -16
  471. package/src/deploy/base/stop.ts +11 -15
  472. package/src/deploy/base/variables.ts +1 -2
  473. package/src/deploy/cloudRun/artifactsRegistry.ts +126 -0
  474. package/src/deploy/cloudRun/cleanup.ts +30 -0
  475. package/src/deploy/cloudRun/cloudRunRevisions.ts +65 -0
  476. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +227 -0
  477. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +86 -0
  478. package/src/deploy/cloudRun/createJobs/common.ts +59 -0
  479. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  480. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +71 -0
  481. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +34 -0
  482. package/src/deploy/cloudRun/createJobs/index.ts +51 -0
  483. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  484. package/src/deploy/cloudRun/index.ts +85 -59
  485. package/src/deploy/cloudRun/utils/createArgsString.ts +21 -13
  486. package/src/deploy/cloudRun/utils/database.ts +31 -9
  487. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +9 -11
  488. package/src/deploy/cloudRun/utils/getServiceName.ts +3 -0
  489. package/src/deploy/cloudRun/utils/jobName.ts +7 -2
  490. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +12 -0
  491. package/src/deploy/cloudSql/utils.ts +13 -10
  492. package/src/deploy/custom/deployJob.ts +15 -10
  493. package/src/deploy/custom/index.ts +2 -2
  494. package/src/deploy/dockerTag/deployJob.ts +7 -8
  495. package/src/deploy/dockerTag/index.ts +8 -7
  496. package/src/deploy/index.ts +15 -12
  497. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  498. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  499. package/src/deploy/kubernetes/deployJob.ts +30 -21
  500. package/src/deploy/kubernetes/index.ts +43 -35
  501. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  502. package/src/deploy/kubernetes/kubeValues.ts +15 -19
  503. package/src/deploy/kubernetes/mongodb.ts +15 -15
  504. package/src/deploy/sbom.ts +18 -10
  505. package/src/deploy/types/base.ts +3 -3
  506. package/src/deploy/types/custom.ts +3 -7
  507. package/src/deploy/types/dockerTag.ts +2 -0
  508. package/src/deploy/types/googleCloudRun.ts +133 -10
  509. package/src/deploy/types/index.ts +2 -2
  510. package/src/deploy/types/kubernetes.ts +5 -36
  511. package/src/deploy/utils.ts +5 -5
  512. package/src/globalScriptFunctions/index.ts +30 -0
  513. package/src/index.ts +4 -1
  514. package/src/packageInfos.ts +14 -0
  515. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  516. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  517. package/src/pipeline/createAllJobs.ts +67 -33
  518. package/src/pipeline/createJobsForComponent.ts +10 -38
  519. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  520. package/src/pipeline/createMainPipeline.ts +119 -0
  521. package/src/pipeline/generatePipelineFiles.ts +100 -0
  522. package/src/pipeline/getPipelineStages.ts +23 -0
  523. package/src/pipeline/gitlab/createGitlabJobs.ts +388 -108
  524. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  525. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  526. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  527. package/src/pipeline/index.ts +2 -1
  528. package/src/pipeline/packageManager.ts +44 -26
  529. package/src/pipeline/yarn/yarnUtils.ts +39 -10
  530. package/src/rules/index.ts +36 -9
  531. package/src/runner/index.ts +0 -1
  532. package/src/types/config.ts +43 -16
  533. package/src/types/context.ts +165 -37
  534. package/src/types/environmentContext.ts +18 -13
  535. package/src/types/gitlab-ci-yml.ts +0 -1
  536. package/src/types/gitlab-types.ts +10 -7
  537. package/src/types/index.ts +1 -0
  538. package/src/types/jobDefinition.ts +34 -0
  539. package/src/types/jobs.ts +31 -15
  540. package/src/types/utils.ts +4 -4
  541. package/src/utils/gitlab.ts +20 -3
  542. package/src/utils/index.ts +6 -3
  543. package/src/utils/jsonParse.ts +7 -0
  544. package/src/utils/removeUndefined.ts +4 -0
  545. package/src/utils/writeFiles.ts +52 -0
  546. package/src/variables/VariableValue.ts +6 -0
  547. package/src/variables/VariableValueContainingReferences.ts +89 -0
  548. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  549. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  550. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  551. package/src/variables/__tests__/variableValue.test.ts +73 -0
  552. package/src/variables/resolveAllReferences.ts +46 -0
  553. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  554. package/src/variables/resolveReferencesOnce.ts +29 -0
  555. package/bin/catladder-gitlab-dev.js +0 -3
  556. package/bin/catladder-gitlab.js +0 -3
  557. package/dist/bundles/catladder-gitlab/index.js +0 -33838
  558. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  559. package/dist/context/resolveReferences.d.ts +0 -4
  560. package/dist/context/resolveReferences.js +0 -254
  561. package/dist/deploy/cloudRun/deployJob.d.ts +0 -3
  562. package/dist/deploy/cloudRun/deployJob.js +0 -248
  563. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  564. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  565. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  566. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  567. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  568. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1780
  569. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1780
  570. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1780
  571. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3532
  572. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3543
  573. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1656
  574. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1362
  575. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1556
  576. package/examples/__snapshots__/custom-envs.ts.snap +0 -1050
  577. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1370
  578. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2468
  579. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2428
  580. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2440
  581. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4453
  582. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2632
  583. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2557
  584. package/examples/__snapshots__/native-app.ts.snap +0 -2878
  585. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1780
  586. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4189
  587. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -1922
  588. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  589. package/scripts/bundle +0 -2
  590. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  591. package/src/context/resolveReferences.ts +0 -70
  592. package/src/deploy/cloudRun/deployJob.ts +0 -301
  593. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  594. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  595. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  596. package/src/pipeline/createChildPipeline.ts +0 -45
  597. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
package/examples/__snapshots__/rails-k8s-with-worker.ts.snap DELETED
@@ -1,4189 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "app ↩️ Rollback ⚠️ | dev ": {
9
- "environment": {
10
- "action": "access",
11
- "name": "dev/app",
12
- "url": "https://app.dev.test-app.pan.panter.cloud",
13
- },
14
- "image": "path/to/docker/kubernetes:the-version",
15
- "interruptible": true,
16
- "needs": [],
17
- "retry": {
18
- "max": 2,
19
- "when": [
20
- "runner_system_failure",
21
- "stuck_or_timeout_failure",
22
- ],
23
- },
24
- "rules": [
25
- {
26
- "allow_failure": true,
27
- "when": "manual",
28
- },
29
- ],
30
- "script": [
31
- "kubectl config set-cluster "kube-pan-test-app-dev-app" --server="$CL_dev_app_KUBE_URL" --certificate-authority <(echo $CL_dev_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
32
- "kubectl config set-credentials "kube-pan-test-app-dev-app" --token="$CL_dev_app_KUBE_TOKEN"",
33
- "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
34
- "kubectl config use-context "kube-pan-test-app-dev-app"",
35
- "kubernetesRollback",
36
- ],
37
- "stage": "rollback dev",
38
- "variables": {
39
- "APP_DIR": ".",
40
- "BUILD_ID": "some-id",
41
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
42
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
43
- "BUILD_INFO_ID": "some-id",
44
- "COMPONENT_NAME": "app",
45
- "ENV_SHORT": "dev",
46
- "ENV_TYPE": "dev",
47
- "GIT_STRATEGY": "none",
48
- "HELM_ARGS": "",
49
- "HELM_EXPERIMENTAL_OCI": "1",
50
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
51
- "HOST_CANONICAL": "app.dev.test-app.pan.panter.cloud",
52
- "KUBERNETES_CPU_LIMIT": "1",
53
- "KUBERNETES_CPU_REQUEST": "0.5",
54
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
55
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
56
- "KUBE_APP_NAME": "app",
57
- "KUBE_APP_NAME_PREFIX": "",
58
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
59
- "KUBE_NAMESPACE": "pan-test-app-dev",
60
- "KUBE_VALUES": "env:
61
- secret:
62
- SECRET_KEY_BASE: '$CL_dev_app_SECRET_KEY_BASE'
63
- POSTGRESQL_PASSWORD: '$CL_dev_app_POSTGRESQL_PASSWORD'
64
- cloudsqlProxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
65
- public:
66
- ENV_SHORT: 'dev'
67
- APP_DIR: '.'
68
- ENV_TYPE: 'dev'
69
- BUILD_INFO_ID: 'some-id'
70
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
71
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
72
- ROOT_URL: 'https://app.dev.test-app.pan.panter.cloud'
73
- KUBE_NAMESPACE: 'pan-test-app-dev'
74
- KUBE_APP_NAME: 'app'
75
- KUBE_APP_NAME_PREFIX: ''
76
- HOST_CANONICAL: 'app.dev.test-app.pan.panter.cloud'
77
- RAILS_ENV: 'production'
78
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
79
- application:
80
- host: 'app.dev.test-app.pan.panter.cloud'
81
- command: '/cnb/process/web'
82
- livenessProbe:
83
- httpGet:
84
- path: '__health'
85
- readinessProbe:
86
- httpGet:
87
- path: '__health'
88
- startupProbe:
89
- httpGet:
90
- path: '__health'
91
- worker:
92
- enabled: true
93
- command: 'launcher bundle exec rake jobs:work'
94
- cloudsql:
95
- enabled: true
96
- dbUser: 'postgres'
97
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-dev'
98
- proxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
99
- fullDbName: 'app'
100
- projectId: 'some-project-id'
101
- jobs:
102
- db-migrate:
103
- hook: 'post-install,post-upgrade'
104
- command: 'launcher bundle exec rake db:migrate'
105
- ",
106
- "POSTGRESQL_PASSWORD": "$CL_dev_app_POSTGRESQL_PASSWORD",
107
- "RAILS_ENV": "production",
108
- "RELEASE_NAME": "pan-test-app-dev-app",
109
- "ROOT_URL": "https://app.dev.test-app.pan.panter.cloud",
110
- "SECRET_KEY_BASE": "$CL_dev_app_SECRET_KEY_BASE",
111
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
112
- "cloudsqlProxyCredentials": "$CL_dev_app_cloudsqlProxyCredentials",
113
- },
114
- },
115
- "app 👮 lint": {
116
- "cache": {
117
- "key": {
118
- "files": [
119
- "Gemfile.lock",
120
- ],
121
- "prefix": "$CI_JOB_IMAGE",
122
- },
123
- "paths": [
124
- "tmp/cache",
125
- ],
126
- },
127
- "image": "ruby:3.2.1",
128
- "interruptible": true,
129
- "needs": [],
130
- "retry": {
131
- "max": 2,
132
- "when": [
133
- "runner_system_failure",
134
- "stuck_or_timeout_failure",
135
- ],
136
- },
137
- "script": [
138
- "cd .",
139
- "bundle config set path 'tmp/cache'",
140
- "bundle install -j $(nproc)",
141
- "bundle exec rubocop",
142
- ],
143
- "stage": "test",
144
- "variables": {},
145
- },
146
- "app 🔨 docker | dev ": {
147
- "image": "path/to/docker/docker-build:the-version",
148
- "interruptible": true,
149
- "needs": [],
150
- "retry": {
151
- "max": 2,
152
- "when": [
153
- "runner_system_failure",
154
- "stuck_or_timeout_failure",
155
- ],
156
- },
157
- "script": [
158
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
159
- "docker pull $DOCKER_CACHE_IMAGE || true",
160
- "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v0.28.0/pack-v0.28.0-linux.tgz | tar -zx --directory /usr/local/bin pack",
161
- "chmod +x /usr/local/bin/pack",
162
- "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock",
163
- "pack build "$DOCKER_IMAGE:$DOCKER_IMAGE_TAG" --builder 'heroku/buildpacks:20' --publish --cache-image "$DOCKER_CACHE_IMAGE" --env 'SECRET_KEY_BASE=dummy-value' ",
164
- ],
165
- "services": [
166
- {
167
- "command": [
168
- "--tls=false",
169
- ],
170
- "name": "docker:20-dind",
171
- },
172
- ],
173
- "stage": "build",
174
- "variables": {
175
- "APP_DIR": ".",
176
- "DOCKERFILE_ADDITIONS": undefined,
177
- "DOCKERFILE_ADDITIONS_END": undefined,
178
- "DOCKER_BUILDKIT": "1",
179
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
180
- "DOCKER_DIR": ".",
181
- "DOCKER_DRIVER": "overlay2",
182
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
183
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
184
- "DOCKER_IMAGE_NAME": "dev/app",
185
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
186
- "DOCKER_REGISTRY": "$CI_REGISTRY",
187
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
188
- "DOCKER_TLS_CERTDIR": "",
189
- "KUBERNETES_CPU_LIMIT": "1",
190
- "KUBERNETES_CPU_REQUEST": "0.5",
191
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
192
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
193
- },
194
- },
195
- "app 🚀 Deploy | dev ": {
196
- "allow_failure": false,
197
- "environment": {
198
- "auto_stop_in": "4 weeks",
199
- "name": "dev/app",
200
- "on_stop": "app 🛑 Stop ⚠️ | dev ",
201
- "url": "https://app.dev.test-app.pan.panter.cloud",
202
- },
203
- "image": "path/to/docker/kubernetes:the-version",
204
- "interruptible": true,
205
- "needs": [
206
- {
207
- "artifacts": false,
208
- "job": "app 👮 lint",
209
- },
210
- {
211
- "artifacts": false,
212
- "job": "app 🔨 docker | dev ",
213
- },
214
- {
215
- "artifacts": false,
216
- "job": "app 🧪 test",
217
- },
218
- {
219
- "artifacts": true,
220
- "job": "app 🧾 sbom | dev ",
221
- },
222
- {
223
- "artifacts": false,
224
- "job": "app 🛡 audit",
225
- },
226
- ],
227
- "retry": {
228
- "max": 2,
229
- "when": [
230
- "runner_system_failure",
231
- "stuck_or_timeout_failure",
232
- ],
233
- },
234
- "rules": [
235
- {
236
- "when": "on_success",
237
- },
238
- ],
239
- "script": [
240
- "kubectl config set-cluster "kube-pan-test-app-dev-app" --server="$CL_dev_app_KUBE_URL" --certificate-authority <(echo $CL_dev_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
241
- "kubectl config set-credentials "kube-pan-test-app-dev-app" --token="$CL_dev_app_KUBE_TOKEN"",
242
- "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
243
- "kubectl config use-context "kube-pan-test-app-dev-app"",
244
- "kubernetesCreateSecret",
245
- "kubernetesDeploy",
246
- "echo Uploading SBOM to Dependency Track",
247
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.dev.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
248
- "echo deployment successful 😻",
249
- ],
250
- "stage": "deploy dev",
251
- "variables": {
252
- "APP_DIR": ".",
253
- "BUILD_ID": "some-id",
254
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
255
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
256
- "BUILD_INFO_ID": "some-id",
257
- "COMPONENT_NAME": "app",
258
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
259
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
260
- "DOCKER_IMAGE_NAME": "dev/app",
261
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
262
- "DOCKER_REGISTRY": "$CI_REGISTRY",
263
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
264
- "ENV_SHORT": "dev",
265
- "ENV_TYPE": "dev",
266
- "HELM_ARGS": "",
267
- "HELM_EXPERIMENTAL_OCI": "1",
268
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
269
- "HOST_CANONICAL": "app.dev.test-app.pan.panter.cloud",
270
- "KUBERNETES_CPU_LIMIT": "1",
271
- "KUBERNETES_CPU_REQUEST": "0.5",
272
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
273
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
274
- "KUBE_APP_NAME": "app",
275
- "KUBE_APP_NAME_PREFIX": "",
276
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
277
- "KUBE_NAMESPACE": "pan-test-app-dev",
278
- "KUBE_VALUES": "env:
279
- secret:
280
- SECRET_KEY_BASE: '$CL_dev_app_SECRET_KEY_BASE'
281
- POSTGRESQL_PASSWORD: '$CL_dev_app_POSTGRESQL_PASSWORD'
282
- cloudsqlProxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
283
- public:
284
- ENV_SHORT: 'dev'
285
- APP_DIR: '.'
286
- ENV_TYPE: 'dev'
287
- BUILD_INFO_ID: 'some-id'
288
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
289
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
290
- ROOT_URL: 'https://app.dev.test-app.pan.panter.cloud'
291
- KUBE_NAMESPACE: 'pan-test-app-dev'
292
- KUBE_APP_NAME: 'app'
293
- KUBE_APP_NAME_PREFIX: ''
294
- HOST_CANONICAL: 'app.dev.test-app.pan.panter.cloud'
295
- RAILS_ENV: 'production'
296
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
297
- application:
298
- host: 'app.dev.test-app.pan.panter.cloud'
299
- command: '/cnb/process/web'
300
- livenessProbe:
301
- httpGet:
302
- path: '__health'
303
- readinessProbe:
304
- httpGet:
305
- path: '__health'
306
- startupProbe:
307
- httpGet:
308
- path: '__health'
309
- worker:
310
- enabled: true
311
- command: 'launcher bundle exec rake jobs:work'
312
- cloudsql:
313
- enabled: true
314
- dbUser: 'postgres'
315
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-dev'
316
- proxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
317
- fullDbName: 'app'
318
- projectId: 'some-project-id'
319
- jobs:
320
- db-migrate:
321
- hook: 'post-install,post-upgrade'
322
- command: 'launcher bundle exec rake db:migrate'
323
- ",
324
- "POSTGRESQL_PASSWORD": "$CL_dev_app_POSTGRESQL_PASSWORD",
325
- "RAILS_ENV": "production",
326
- "RELEASE_NAME": "pan-test-app-dev-app",
327
- "ROOT_URL": "https://app.dev.test-app.pan.panter.cloud",
328
- "SECRET_KEY_BASE": "$CL_dev_app_SECRET_KEY_BASE",
329
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
330
- "cloudsqlProxyCredentials": "$CL_dev_app_cloudsqlProxyCredentials",
331
- },
332
- },
333
- "app 🛑 Stop ⚠️ | dev ": {
334
- "environment": {
335
- "action": "stop",
336
- "name": "dev/app",
337
- "url": "https://app.dev.test-app.pan.panter.cloud",
338
- },
339
- "image": "path/to/docker/kubernetes:the-version",
340
- "interruptible": true,
341
- "needs": [],
342
- "retry": {
343
- "max": 2,
344
- "when": [
345
- "runner_system_failure",
346
- "stuck_or_timeout_failure",
347
- ],
348
- },
349
- "rules": [
350
- {
351
- "allow_failure": true,
352
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
353
- "when": "on_success",
354
- },
355
- {
356
- "allow_failure": true,
357
- "when": "manual",
358
- },
359
- ],
360
- "script": [
361
- "kubectl config set-cluster "kube-pan-test-app-dev-app" --server="$CL_dev_app_KUBE_URL" --certificate-authority <(echo $CL_dev_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
362
- "kubectl config set-credentials "kube-pan-test-app-dev-app" --token="$CL_dev_app_KUBE_TOKEN"",
363
- "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
364
- "kubectl config use-context "kube-pan-test-app-dev-app"",
365
- "kubernetesDelete",
366
- "echo Disabling component in Dependency Track",
367
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.dev.test-app.pan.panter.cloud" || true",
368
- ],
369
- "stage": "stop dev",
370
- "variables": {
371
- "APP_DIR": ".",
372
- "BUILD_ID": "some-id",
373
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
374
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
375
- "BUILD_INFO_ID": "some-id",
376
- "COMPONENT_NAME": "app",
377
- "ENV_SHORT": "dev",
378
- "ENV_TYPE": "dev",
379
- "GIT_STRATEGY": "none",
380
- "HELM_ARGS": "",
381
- "HELM_EXPERIMENTAL_OCI": "1",
382
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
383
- "HOST_CANONICAL": "app.dev.test-app.pan.panter.cloud",
384
- "KUBERNETES_CPU_LIMIT": "1",
385
- "KUBERNETES_CPU_REQUEST": "0.5",
386
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
387
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
388
- "KUBE_APP_NAME": "app",
389
- "KUBE_APP_NAME_PREFIX": "",
390
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
391
- "KUBE_NAMESPACE": "pan-test-app-dev",
392
- "KUBE_VALUES": "env:
393
- secret:
394
- SECRET_KEY_BASE: '$CL_dev_app_SECRET_KEY_BASE'
395
- POSTGRESQL_PASSWORD: '$CL_dev_app_POSTGRESQL_PASSWORD'
396
- cloudsqlProxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
397
- public:
398
- ENV_SHORT: 'dev'
399
- APP_DIR: '.'
400
- ENV_TYPE: 'dev'
401
- BUILD_INFO_ID: 'some-id'
402
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
403
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
404
- ROOT_URL: 'https://app.dev.test-app.pan.panter.cloud'
405
- KUBE_NAMESPACE: 'pan-test-app-dev'
406
- KUBE_APP_NAME: 'app'
407
- KUBE_APP_NAME_PREFIX: ''
408
- HOST_CANONICAL: 'app.dev.test-app.pan.panter.cloud'
409
- RAILS_ENV: 'production'
410
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
411
- application:
412
- host: 'app.dev.test-app.pan.panter.cloud'
413
- command: '/cnb/process/web'
414
- livenessProbe:
415
- httpGet:
416
- path: '__health'
417
- readinessProbe:
418
- httpGet:
419
- path: '__health'
420
- startupProbe:
421
- httpGet:
422
- path: '__health'
423
- worker:
424
- enabled: true
425
- command: 'launcher bundle exec rake jobs:work'
426
- cloudsql:
427
- enabled: true
428
- dbUser: 'postgres'
429
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-dev'
430
- proxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
431
- fullDbName: 'app'
432
- projectId: 'some-project-id'
433
- jobs:
434
- db-migrate:
435
- hook: 'post-install,post-upgrade'
436
- command: 'launcher bundle exec rake db:migrate'
437
- ",
438
- "POSTGRESQL_PASSWORD": "$CL_dev_app_POSTGRESQL_PASSWORD",
439
- "RAILS_ENV": "production",
440
- "RELEASE_NAME": "pan-test-app-dev-app",
441
- "ROOT_URL": "https://app.dev.test-app.pan.panter.cloud",
442
- "SECRET_KEY_BASE": "$CL_dev_app_SECRET_KEY_BASE",
443
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
444
- "cloudsqlProxyCredentials": "$CL_dev_app_cloudsqlProxyCredentials",
445
- },
446
- },
447
- "app 🛡 audit": {
448
- "allow_failure": true,
449
- "image": "ruby:3.2.1",
450
- "interruptible": true,
451
- "needs": [],
452
- "retry": {
453
- "max": 2,
454
- "when": [
455
- "runner_system_failure",
456
- "stuck_or_timeout_failure",
457
- ],
458
- },
459
- "script": [
460
- "cd .",
461
- "gem install bundler-audit",
462
- "bundle audit check",
463
- ],
464
- "stage": "test",
465
- "variables": {},
466
- },
467
- "app 🧪 test": {
468
- "cache": {
469
- "key": {
470
- "files": [
471
- "Gemfile.lock",
472
- ],
473
- "prefix": "$CI_JOB_IMAGE",
474
- },
475
- "paths": [
476
- "tmp/cache",
477
- ],
478
- },
479
- "image": "ruby:3.2.1",
480
- "interruptible": true,
481
- "needs": [],
482
- "retry": {
483
- "max": 2,
484
- "when": [
485
- "runner_system_failure",
486
- "stuck_or_timeout_failure",
487
- ],
488
- },
489
- "script": [
490
- "cd .",
491
- "bundle config set path 'tmp/cache'",
492
- "bundle install -j $(nproc)",
493
- "bundle exec rspec",
494
- ],
495
- "stage": "test",
496
- "variables": {},
497
- },
498
- "app 🧾 sbom | dev ": {
499
- "allow_failure": true,
500
- "artifacts": {
501
- "paths": [
502
- "__sbom.json",
503
- ],
504
- },
505
- "image": "aquasec/trivy:0.38.3",
506
- "interruptible": true,
507
- "needs": [],
508
- "retry": {
509
- "max": 2,
510
- "when": [
511
- "runner_system_failure",
512
- "stuck_or_timeout_failure",
513
- ],
514
- },
515
- "script": [
516
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
517
- ],
518
- "stage": "build",
519
- "variables": {},
520
- },
521
- },
522
- "stages": [
523
- "setup",
524
- "setup dev",
525
- "setup review",
526
- "setup stage",
527
- "setup prod",
528
- "setup local",
529
- "test",
530
- "test dev",
531
- "test review",
532
- "test stage",
533
- "test prod",
534
- "test local",
535
- "build",
536
- "build dev",
537
- "build review",
538
- "build stage",
539
- "build prod",
540
- "build local",
541
- "deploy",
542
- "deploy dev",
543
- "deploy review",
544
- "deploy stage",
545
- "deploy prod",
546
- "deploy local",
547
- "verify",
548
- "verify dev",
549
- "verify review",
550
- "verify stage",
551
- "verify prod",
552
- "verify local",
553
- "rollback",
554
- "rollback dev",
555
- "rollback review",
556
- "rollback stage",
557
- "rollback prod",
558
- "rollback local",
559
- "stop",
560
- "stop dev",
561
- "stop review",
562
- "stop stage",
563
- "stop prod",
564
- "stop local",
565
- ],
566
- "variables": {
567
- "FF_USE_FASTZIP": "true",
568
- },
569
- "workflow": {
570
- "rules": [
571
- {
572
- "if": "$CI_COMMIT_TAG",
573
- },
574
- {
575
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
576
- "when": "never",
577
- },
578
- {
579
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
580
- },
581
- {
582
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
583
- },
584
- {
585
- "if": "$CI_MERGE_REQUEST_ID",
586
- },
587
- ],
588
- },
589
- },
590
- "mr": {
591
- "image": "path/to/docker/jobs-default:the-version",
592
- "jobs": {
593
- "app ↩️ Rollback ⚠️ | review ": {
594
- "environment": {
595
- "action": "access",
596
- "name": "review/some-commit/app",
597
- "url": "https://app.mr1234.review.test-app.pan.panter.cloud",
598
- },
599
- "image": "path/to/docker/kubernetes:the-version",
600
- "interruptible": true,
601
- "needs": [],
602
- "retry": {
603
- "max": 2,
604
- "when": [
605
- "runner_system_failure",
606
- "stuck_or_timeout_failure",
607
- ],
608
- },
609
- "rules": [
610
- {
611
- "allow_failure": true,
612
- "when": "manual",
613
- },
614
- ],
615
- "script": [
616
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-app" --server="$CL_review_app_KUBE_URL" --certificate-authority <(echo $CL_review_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
617
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-app" --token="$CL_review_app_KUBE_TOKEN"",
618
- "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
619
- "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
620
- "kubernetesRollback",
621
- ],
622
- "stage": "rollback review",
623
- "variables": {
624
- "APP_DIR": ".",
625
- "BUILD_ID": "some-id",
626
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
627
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
628
- "BUILD_INFO_ID": "some-id",
629
- "COMPONENT_NAME": "app",
630
- "ENV_SHORT": "review",
631
- "ENV_TYPE": "review",
632
- "GIT_STRATEGY": "none",
633
- "HELM_ARGS": "",
634
- "HELM_EXPERIMENTAL_OCI": "1",
635
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
636
- "HOST_CANONICAL": "app.mr1234.review.test-app.pan.panter.cloud",
637
- "KUBERNETES_CPU_LIMIT": "1",
638
- "KUBERNETES_CPU_REQUEST": "0.5",
639
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
640
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
641
- "KUBE_APP_NAME": "mr1234-app",
642
- "KUBE_APP_NAME_PREFIX": "mr1234-",
643
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
644
- "KUBE_NAMESPACE": "pan-test-app-review",
645
- "KUBE_VALUES": "env:
646
- secret:
647
- SECRET_KEY_BASE: '$CL_review_app_SECRET_KEY_BASE'
648
- POSTGRESQL_PASSWORD: '$CL_review_app_POSTGRESQL_PASSWORD'
649
- cloudsqlProxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
650
- public:
651
- ENV_SHORT: 'review'
652
- APP_DIR: '.'
653
- ENV_TYPE: 'review'
654
- BUILD_INFO_ID: 'some-id'
655
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
656
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
657
- ROOT_URL: 'https://app.mr1234.review.test-app.pan.panter.cloud'
658
- KUBE_NAMESPACE: 'pan-test-app-review'
659
- KUBE_APP_NAME: 'mr1234-app'
660
- KUBE_APP_NAME_PREFIX: 'mr1234-'
661
- HOST_CANONICAL: 'app.mr1234.review.test-app.pan.panter.cloud'
662
- RAILS_ENV: 'production'
663
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
664
- application:
665
- host: 'app.mr1234.review.test-app.pan.panter.cloud'
666
- command: '/cnb/process/web'
667
- livenessProbe:
668
- httpGet:
669
- path: '__health'
670
- readinessProbe:
671
- httpGet:
672
- path: '__health'
673
- startupProbe:
674
- httpGet:
675
- path: '__health'
676
- worker:
677
- enabled: true
678
- command: 'launcher bundle exec rake jobs:work'
679
- cloudsql:
680
- enabled: true
681
- dbUser: 'postgres'
682
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-review'
683
- proxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
684
- fullDbName: 'mr1234-app'
685
- projectId: 'some-project-id'
686
- jobs:
687
- db-migrate:
688
- hook: 'post-upgrade'
689
- command: 'launcher bundle exec rake db:migrate'
690
- db-prepare-seed:
691
- hook: 'post-install'
692
- command: 'launcher bundle exec rake db:prepare db:seed'
693
- ",
694
- "POSTGRESQL_PASSWORD": "$CL_review_app_POSTGRESQL_PASSWORD",
695
- "RAILS_ENV": "production",
696
- "RELEASE_NAME": "pan-test-app-review-mr1234-app",
697
- "ROOT_URL": "https://app.mr1234.review.test-app.pan.panter.cloud",
698
- "SECRET_KEY_BASE": "$CL_review_app_SECRET_KEY_BASE",
699
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
700
- "cloudsqlProxyCredentials": "$CL_review_app_cloudsqlProxyCredentials",
701
- },
702
- },
703
- "app 👮 lint": {
704
- "cache": {
705
- "key": {
706
- "files": [
707
- "Gemfile.lock",
708
- ],
709
- "prefix": "$CI_JOB_IMAGE",
710
- },
711
- "paths": [
712
- "tmp/cache",
713
- ],
714
- },
715
- "image": "ruby:3.2.1",
716
- "interruptible": true,
717
- "needs": [],
718
- "retry": {
719
- "max": 2,
720
- "when": [
721
- "runner_system_failure",
722
- "stuck_or_timeout_failure",
723
- ],
724
- },
725
- "script": [
726
- "cd .",
727
- "bundle config set path 'tmp/cache'",
728
- "bundle install -j $(nproc)",
729
- "bundle exec rubocop",
730
- ],
731
- "stage": "test",
732
- "variables": {},
733
- },
734
- "app 🔨 docker | review ": {
735
- "image": "path/to/docker/docker-build:the-version",
736
- "interruptible": true,
737
- "needs": [],
738
- "retry": {
739
- "max": 2,
740
- "when": [
741
- "runner_system_failure",
742
- "stuck_or_timeout_failure",
743
- ],
744
- },
745
- "script": [
746
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
747
- "docker pull $DOCKER_CACHE_IMAGE || true",
748
- "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v0.28.0/pack-v0.28.0-linux.tgz | tar -zx --directory /usr/local/bin pack",
749
- "chmod +x /usr/local/bin/pack",
750
- "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock",
751
- "pack build "$DOCKER_IMAGE:$DOCKER_IMAGE_TAG" --builder 'heroku/buildpacks:20' --publish --cache-image "$DOCKER_CACHE_IMAGE" --env 'SECRET_KEY_BASE=dummy-value' ",
752
- ],
753
- "services": [
754
- {
755
- "command": [
756
- "--tls=false",
757
- ],
758
- "name": "docker:20-dind",
759
- },
760
- ],
761
- "stage": "build",
762
- "variables": {
763
- "APP_DIR": ".",
764
- "DOCKERFILE_ADDITIONS": undefined,
765
- "DOCKERFILE_ADDITIONS_END": undefined,
766
- "DOCKER_BUILDKIT": "1",
767
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
768
- "DOCKER_DIR": ".",
769
- "DOCKER_DRIVER": "overlay2",
770
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
771
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
772
- "DOCKER_IMAGE_NAME": "review/app",
773
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
774
- "DOCKER_REGISTRY": "$CI_REGISTRY",
775
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
776
- "DOCKER_TLS_CERTDIR": "",
777
- "KUBERNETES_CPU_LIMIT": "1",
778
- "KUBERNETES_CPU_REQUEST": "0.5",
779
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
780
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
781
- },
782
- },
783
- "app 🚀 Deploy | review ": {
784
- "allow_failure": false,
785
- "environment": {
786
- "auto_stop_in": "2 week",
787
- "name": "review/some-commit/app",
788
- "on_stop": "app 🛑 Stop ⚠️ | review ",
789
- "url": "https://app.mr1234.review.test-app.pan.panter.cloud",
790
- },
791
- "image": "path/to/docker/kubernetes:the-version",
792
- "interruptible": true,
793
- "needs": [
794
- {
795
- "artifacts": false,
796
- "job": "app 👮 lint",
797
- },
798
- {
799
- "artifacts": false,
800
- "job": "app 🔨 docker | review ",
801
- },
802
- {
803
- "artifacts": false,
804
- "job": "app 🧪 test",
805
- },
806
- {
807
- "artifacts": true,
808
- "job": "app 🧾 sbom | review ",
809
- },
810
- {
811
- "artifacts": false,
812
- "job": "app 🛡 audit",
813
- },
814
- ],
815
- "retry": {
816
- "max": 2,
817
- "when": [
818
- "runner_system_failure",
819
- "stuck_or_timeout_failure",
820
- ],
821
- },
822
- "rules": [
823
- {
824
- "when": "on_success",
825
- },
826
- ],
827
- "script": [
828
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-app" --server="$CL_review_app_KUBE_URL" --certificate-authority <(echo $CL_review_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
829
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-app" --token="$CL_review_app_KUBE_TOKEN"",
830
- "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
831
- "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
832
- "kubernetesCreateSecret",
833
- "kubernetesDeploy",
834
- "echo Uploading SBOM to Dependency Track",
835
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.mr1234.review.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
836
- "echo deployment successful 😻",
837
- ],
838
- "stage": "deploy review",
839
- "variables": {
840
- "APP_DIR": ".",
841
- "BUILD_ID": "some-id",
842
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
843
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
844
- "BUILD_INFO_ID": "some-id",
845
- "COMPONENT_NAME": "app",
846
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
847
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
848
- "DOCKER_IMAGE_NAME": "review/app",
849
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
850
- "DOCKER_REGISTRY": "$CI_REGISTRY",
851
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
852
- "ENV_SHORT": "review",
853
- "ENV_TYPE": "review",
854
- "HELM_ARGS": "",
855
- "HELM_EXPERIMENTAL_OCI": "1",
856
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
857
- "HOST_CANONICAL": "app.mr1234.review.test-app.pan.panter.cloud",
858
- "KUBERNETES_CPU_LIMIT": "1",
859
- "KUBERNETES_CPU_REQUEST": "0.5",
860
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
861
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
862
- "KUBE_APP_NAME": "mr1234-app",
863
- "KUBE_APP_NAME_PREFIX": "mr1234-",
864
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
865
- "KUBE_NAMESPACE": "pan-test-app-review",
866
- "KUBE_VALUES": "env:
867
- secret:
868
- SECRET_KEY_BASE: '$CL_review_app_SECRET_KEY_BASE'
869
- POSTGRESQL_PASSWORD: '$CL_review_app_POSTGRESQL_PASSWORD'
870
- cloudsqlProxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
871
- public:
872
- ENV_SHORT: 'review'
873
- APP_DIR: '.'
874
- ENV_TYPE: 'review'
875
- BUILD_INFO_ID: 'some-id'
876
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
877
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
878
- ROOT_URL: 'https://app.mr1234.review.test-app.pan.panter.cloud'
879
- KUBE_NAMESPACE: 'pan-test-app-review'
880
- KUBE_APP_NAME: 'mr1234-app'
881
- KUBE_APP_NAME_PREFIX: 'mr1234-'
882
- HOST_CANONICAL: 'app.mr1234.review.test-app.pan.panter.cloud'
883
- RAILS_ENV: 'production'
884
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
885
- application:
886
- host: 'app.mr1234.review.test-app.pan.panter.cloud'
887
- command: '/cnb/process/web'
888
- livenessProbe:
889
- httpGet:
890
- path: '__health'
891
- readinessProbe:
892
- httpGet:
893
- path: '__health'
894
- startupProbe:
895
- httpGet:
896
- path: '__health'
897
- worker:
898
- enabled: true
899
- command: 'launcher bundle exec rake jobs:work'
900
- cloudsql:
901
- enabled: true
902
- dbUser: 'postgres'
903
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-review'
904
- proxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
905
- fullDbName: 'mr1234-app'
906
- projectId: 'some-project-id'
907
- jobs:
908
- db-migrate:
909
- hook: 'post-upgrade'
910
- command: 'launcher bundle exec rake db:migrate'
911
- db-prepare-seed:
912
- hook: 'post-install'
913
- command: 'launcher bundle exec rake db:prepare db:seed'
914
- ",
915
- "POSTGRESQL_PASSWORD": "$CL_review_app_POSTGRESQL_PASSWORD",
916
- "RAILS_ENV": "production",
917
- "RELEASE_NAME": "pan-test-app-review-mr1234-app",
918
- "ROOT_URL": "https://app.mr1234.review.test-app.pan.panter.cloud",
919
- "SECRET_KEY_BASE": "$CL_review_app_SECRET_KEY_BASE",
920
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
921
- "cloudsqlProxyCredentials": "$CL_review_app_cloudsqlProxyCredentials",
922
- },
923
- },
924
- "app 🛑 Stop ⚠️ | review ": {
925
- "environment": {
926
- "action": "stop",
927
- "name": "review/some-commit/app",
928
- "url": "https://app.mr1234.review.test-app.pan.panter.cloud",
929
- },
930
- "image": "path/to/docker/kubernetes:the-version",
931
- "interruptible": true,
932
- "needs": [],
933
- "retry": {
934
- "max": 2,
935
- "when": [
936
- "runner_system_failure",
937
- "stuck_or_timeout_failure",
938
- ],
939
- },
940
- "rules": [
941
- {
942
- "allow_failure": true,
943
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
944
- "when": "on_success",
945
- },
946
- {
947
- "allow_failure": true,
948
- "when": "manual",
949
- },
950
- ],
951
- "script": [
952
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-app" --server="$CL_review_app_KUBE_URL" --certificate-authority <(echo $CL_review_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
953
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-app" --token="$CL_review_app_KUBE_TOKEN"",
954
- "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
955
- "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
956
- "kubernetesDelete",
957
- "echo Disabling component in Dependency Track",
958
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.mr1234.review.test-app.pan.panter.cloud" || true",
959
- ],
960
- "stage": "stop review",
961
- "variables": {
962
- "APP_DIR": ".",
963
- "BUILD_ID": "some-id",
964
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
965
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
966
- "BUILD_INFO_ID": "some-id",
967
- "COMPONENT_NAME": "app",
968
- "ENV_SHORT": "review",
969
- "ENV_TYPE": "review",
970
- "GIT_STRATEGY": "none",
971
- "HELM_ARGS": "",
972
- "HELM_EXPERIMENTAL_OCI": "1",
973
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
974
- "HOST_CANONICAL": "app.mr1234.review.test-app.pan.panter.cloud",
975
- "KUBERNETES_CPU_LIMIT": "1",
976
- "KUBERNETES_CPU_REQUEST": "0.5",
977
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
978
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
979
- "KUBE_APP_NAME": "mr1234-app",
980
- "KUBE_APP_NAME_PREFIX": "mr1234-",
981
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
982
- "KUBE_NAMESPACE": "pan-test-app-review",
983
- "KUBE_VALUES": "env:
984
- secret:
985
- SECRET_KEY_BASE: '$CL_review_app_SECRET_KEY_BASE'
986
- POSTGRESQL_PASSWORD: '$CL_review_app_POSTGRESQL_PASSWORD'
987
- cloudsqlProxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
988
- public:
989
- ENV_SHORT: 'review'
990
- APP_DIR: '.'
991
- ENV_TYPE: 'review'
992
- BUILD_INFO_ID: 'some-id'
993
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
994
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
995
- ROOT_URL: 'https://app.mr1234.review.test-app.pan.panter.cloud'
996
- KUBE_NAMESPACE: 'pan-test-app-review'
997
- KUBE_APP_NAME: 'mr1234-app'
998
- KUBE_APP_NAME_PREFIX: 'mr1234-'
999
- HOST_CANONICAL: 'app.mr1234.review.test-app.pan.panter.cloud'
1000
- RAILS_ENV: 'production'
1001
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1002
- application:
1003
- host: 'app.mr1234.review.test-app.pan.panter.cloud'
1004
- command: '/cnb/process/web'
1005
- livenessProbe:
1006
- httpGet:
1007
- path: '__health'
1008
- readinessProbe:
1009
- httpGet:
1010
- path: '__health'
1011
- startupProbe:
1012
- httpGet:
1013
- path: '__health'
1014
- worker:
1015
- enabled: true
1016
- command: 'launcher bundle exec rake jobs:work'
1017
- cloudsql:
1018
- enabled: true
1019
- dbUser: 'postgres'
1020
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-review'
1021
- proxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
1022
- fullDbName: 'mr1234-app'
1023
- projectId: 'some-project-id'
1024
- jobs:
1025
- db-migrate:
1026
- hook: 'post-upgrade'
1027
- command: 'launcher bundle exec rake db:migrate'
1028
- db-prepare-seed:
1029
- hook: 'post-install'
1030
- command: 'launcher bundle exec rake db:prepare db:seed'
1031
- ",
1032
- "POSTGRESQL_PASSWORD": "$CL_review_app_POSTGRESQL_PASSWORD",
1033
- "RAILS_ENV": "production",
1034
- "RELEASE_NAME": "pan-test-app-review-mr1234-app",
1035
- "ROOT_URL": "https://app.mr1234.review.test-app.pan.panter.cloud",
1036
- "SECRET_KEY_BASE": "$CL_review_app_SECRET_KEY_BASE",
1037
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1038
- "cloudsqlProxyCredentials": "$CL_review_app_cloudsqlProxyCredentials",
1039
- },
1040
- },
1041
- "app 🛡 audit": {
1042
- "allow_failure": true,
1043
- "image": "ruby:3.2.1",
1044
- "interruptible": true,
1045
- "needs": [],
1046
- "retry": {
1047
- "max": 2,
1048
- "when": [
1049
- "runner_system_failure",
1050
- "stuck_or_timeout_failure",
1051
- ],
1052
- },
1053
- "script": [
1054
- "cd .",
1055
- "gem install bundler-audit",
1056
- "bundle audit check",
1057
- ],
1058
- "stage": "test",
1059
- "variables": {},
1060
- },
1061
- "app 🧪 test": {
1062
- "cache": {
1063
- "key": {
1064
- "files": [
1065
- "Gemfile.lock",
1066
- ],
1067
- "prefix": "$CI_JOB_IMAGE",
1068
- },
1069
- "paths": [
1070
- "tmp/cache",
1071
- ],
1072
- },
1073
- "image": "ruby:3.2.1",
1074
- "interruptible": true,
1075
- "needs": [],
1076
- "retry": {
1077
- "max": 2,
1078
- "when": [
1079
- "runner_system_failure",
1080
- "stuck_or_timeout_failure",
1081
- ],
1082
- },
1083
- "script": [
1084
- "cd .",
1085
- "bundle config set path 'tmp/cache'",
1086
- "bundle install -j $(nproc)",
1087
- "bundle exec rspec",
1088
- ],
1089
- "stage": "test",
1090
- "variables": {},
1091
- },
1092
- "app 🧾 sbom | review ": {
1093
- "allow_failure": true,
1094
- "artifacts": {
1095
- "paths": [
1096
- "__sbom.json",
1097
- ],
1098
- },
1099
- "image": "aquasec/trivy:0.38.3",
1100
- "interruptible": true,
1101
- "needs": [],
1102
- "retry": {
1103
- "max": 2,
1104
- "when": [
1105
- "runner_system_failure",
1106
- "stuck_or_timeout_failure",
1107
- ],
1108
- },
1109
- "script": [
1110
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
1111
- ],
1112
- "stage": "build",
1113
- "variables": {},
1114
- },
1115
- },
1116
- "stages": [
1117
- "setup",
1118
- "setup dev",
1119
- "setup review",
1120
- "setup stage",
1121
- "setup prod",
1122
- "setup local",
1123
- "test",
1124
- "test dev",
1125
- "test review",
1126
- "test stage",
1127
- "test prod",
1128
- "test local",
1129
- "build",
1130
- "build dev",
1131
- "build review",
1132
- "build stage",
1133
- "build prod",
1134
- "build local",
1135
- "deploy",
1136
- "deploy dev",
1137
- "deploy review",
1138
- "deploy stage",
1139
- "deploy prod",
1140
- "deploy local",
1141
- "verify",
1142
- "verify dev",
1143
- "verify review",
1144
- "verify stage",
1145
- "verify prod",
1146
- "verify local",
1147
- "rollback",
1148
- "rollback dev",
1149
- "rollback review",
1150
- "rollback stage",
1151
- "rollback prod",
1152
- "rollback local",
1153
- "stop",
1154
- "stop dev",
1155
- "stop review",
1156
- "stop stage",
1157
- "stop prod",
1158
- "stop local",
1159
- ],
1160
- "variables": {
1161
- "FF_USE_FASTZIP": "true",
1162
- },
1163
- "workflow": {
1164
- "rules": [
1165
- {
1166
- "if": "$CI_COMMIT_TAG",
1167
- },
1168
- {
1169
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1170
- "when": "never",
1171
- },
1172
- {
1173
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1174
- },
1175
- {
1176
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1177
- },
1178
- {
1179
- "if": "$CI_MERGE_REQUEST_ID",
1180
- },
1181
- ],
1182
- },
1183
- },
1184
- "taggedRelease": {
1185
- "image": "path/to/docker/jobs-default:the-version",
1186
- "jobs": {
1187
- "app ↩️ Rollback ⚠️ | prod ": {
1188
- "environment": {
1189
- "action": "access",
1190
- "name": "prod/app",
1191
- "url": "https://my-fancy-website.com",
1192
- },
1193
- "image": "path/to/docker/kubernetes:the-version",
1194
- "interruptible": true,
1195
- "needs": [],
1196
- "retry": {
1197
- "max": 2,
1198
- "when": [
1199
- "runner_system_failure",
1200
- "stuck_or_timeout_failure",
1201
- ],
1202
- },
1203
- "rules": [
1204
- {
1205
- "allow_failure": true,
1206
- "when": "manual",
1207
- },
1208
- ],
1209
- "script": [
1210
- "kubectl config set-cluster "kube-pan-test-app-prod-app" --server="$CL_prod_app_KUBE_URL" --certificate-authority <(echo $CL_prod_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1211
- "kubectl config set-credentials "kube-pan-test-app-prod-app" --token="$CL_prod_app_KUBE_TOKEN"",
1212
- "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
1213
- "kubectl config use-context "kube-pan-test-app-prod-app"",
1214
- "kubernetesRollback",
1215
- ],
1216
- "stage": "rollback prod",
1217
- "variables": {
1218
- "APP_DIR": ".",
1219
- "BUILD_ID": "some-id",
1220
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1221
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1222
- "BUILD_INFO_ID": "some-id",
1223
- "COMPONENT_NAME": "app",
1224
- "ENV_SHORT": "prod",
1225
- "ENV_TYPE": "prod",
1226
- "GIT_STRATEGY": "none",
1227
- "HELM_ARGS": "",
1228
- "HELM_EXPERIMENTAL_OCI": "1",
1229
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1230
- "HOST_CANONICAL": "app.prod.test-app.pan.panter.cloud",
1231
- "KUBERNETES_CPU_LIMIT": "1",
1232
- "KUBERNETES_CPU_REQUEST": "0.5",
1233
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1234
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1235
- "KUBE_APP_NAME": "app",
1236
- "KUBE_APP_NAME_PREFIX": "",
1237
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
1238
- "KUBE_NAMESPACE": "pan-test-app-prod",
1239
- "KUBE_VALUES": "env:
1240
- secret:
1241
- SECRET_KEY_BASE: '$CL_prod_app_SECRET_KEY_BASE'
1242
- POSTGRESQL_PASSWORD: '$CL_prod_app_POSTGRESQL_PASSWORD'
1243
- cloudsqlProxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
1244
- public:
1245
- ENV_SHORT: 'prod'
1246
- APP_DIR: '.'
1247
- ENV_TYPE: 'prod'
1248
- BUILD_INFO_ID: 'some-id'
1249
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1250
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1251
- ROOT_URL: 'https://my-fancy-website.com'
1252
- KUBE_NAMESPACE: 'pan-test-app-prod'
1253
- KUBE_APP_NAME: 'app'
1254
- KUBE_APP_NAME_PREFIX: ''
1255
- HOST_CANONICAL: 'app.prod.test-app.pan.panter.cloud'
1256
- RAILS_ENV: 'production'
1257
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1258
- application:
1259
- host: 'my-fancy-website.com'
1260
- command: '/cnb/process/web'
1261
- livenessProbe:
1262
- httpGet:
1263
- path: '__health'
1264
- readinessProbe:
1265
- httpGet:
1266
- path: '__health'
1267
- startupProbe:
1268
- httpGet:
1269
- path: '__health'
1270
- worker:
1271
- enabled: true
1272
- command: 'launcher bundle exec rake jobs:work'
1273
- cloudsql:
1274
- enabled: true
1275
- dbUser: 'postgres'
1276
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-prod'
1277
- proxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
1278
- fullDbName: 'app'
1279
- projectId: 'some-project-id'
1280
- jobs:
1281
- db-migrate:
1282
- hook: 'post-install,post-upgrade'
1283
- command: 'launcher bundle exec rake db:migrate'
1284
- ",
1285
- "POSTGRESQL_PASSWORD": "$CL_prod_app_POSTGRESQL_PASSWORD",
1286
- "RAILS_ENV": "production",
1287
- "RELEASE_NAME": "pan-test-app-prod-app",
1288
- "ROOT_URL": "https://my-fancy-website.com",
1289
- "SECRET_KEY_BASE": "$CL_prod_app_SECRET_KEY_BASE",
1290
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1291
- "cloudsqlProxyCredentials": "$CL_prod_app_cloudsqlProxyCredentials",
1292
- },
1293
- },
1294
- "app ↩️ Rollback ⚠️ | stage ": {
1295
- "environment": {
1296
- "action": "access",
1297
- "name": "stage/app",
1298
- "url": "https://app.stage.test-app.pan.panter.cloud",
1299
- },
1300
- "image": "path/to/docker/kubernetes:the-version",
1301
- "interruptible": true,
1302
- "needs": [],
1303
- "retry": {
1304
- "max": 2,
1305
- "when": [
1306
- "runner_system_failure",
1307
- "stuck_or_timeout_failure",
1308
- ],
1309
- },
1310
- "rules": [
1311
- {
1312
- "allow_failure": true,
1313
- "when": "manual",
1314
- },
1315
- ],
1316
- "script": [
1317
- "kubectl config set-cluster "kube-pan-test-app-stage-app" --server="$CL_stage_app_KUBE_URL" --certificate-authority <(echo $CL_stage_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1318
- "kubectl config set-credentials "kube-pan-test-app-stage-app" --token="$CL_stage_app_KUBE_TOKEN"",
1319
- "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
1320
- "kubectl config use-context "kube-pan-test-app-stage-app"",
1321
- "kubernetesRollback",
1322
- ],
1323
- "stage": "rollback stage",
1324
- "variables": {
1325
- "APP_DIR": ".",
1326
- "BUILD_ID": "some-id",
1327
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1328
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1329
- "BUILD_INFO_ID": "some-id",
1330
- "COMPONENT_NAME": "app",
1331
- "ENV_SHORT": "stage",
1332
- "ENV_TYPE": "stage",
1333
- "GIT_STRATEGY": "none",
1334
- "HELM_ARGS": "",
1335
- "HELM_EXPERIMENTAL_OCI": "1",
1336
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1337
- "HOST_CANONICAL": "app.stage.test-app.pan.panter.cloud",
1338
- "KUBERNETES_CPU_LIMIT": "1",
1339
- "KUBERNETES_CPU_REQUEST": "0.5",
1340
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1341
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1342
- "KUBE_APP_NAME": "app",
1343
- "KUBE_APP_NAME_PREFIX": "",
1344
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
1345
- "KUBE_NAMESPACE": "pan-test-app-stage",
1346
- "KUBE_VALUES": "env:
1347
- secret:
1348
- SECRET_KEY_BASE: '$CL_stage_app_SECRET_KEY_BASE'
1349
- POSTGRESQL_PASSWORD: '$CL_stage_app_POSTGRESQL_PASSWORD'
1350
- cloudsqlProxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
1351
- public:
1352
- ENV_SHORT: 'stage'
1353
- APP_DIR: '.'
1354
- ENV_TYPE: 'stage'
1355
- BUILD_INFO_ID: 'some-id'
1356
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1357
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1358
- ROOT_URL: 'https://app.stage.test-app.pan.panter.cloud'
1359
- KUBE_NAMESPACE: 'pan-test-app-stage'
1360
- KUBE_APP_NAME: 'app'
1361
- KUBE_APP_NAME_PREFIX: ''
1362
- HOST_CANONICAL: 'app.stage.test-app.pan.panter.cloud'
1363
- RAILS_ENV: 'production'
1364
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1365
- application:
1366
- host: 'app.stage.test-app.pan.panter.cloud'
1367
- command: '/cnb/process/web'
1368
- livenessProbe:
1369
- httpGet:
1370
- path: '__health'
1371
- readinessProbe:
1372
- httpGet:
1373
- path: '__health'
1374
- startupProbe:
1375
- httpGet:
1376
- path: '__health'
1377
- worker:
1378
- enabled: true
1379
- command: 'launcher bundle exec rake jobs:work'
1380
- cloudsql:
1381
- enabled: true
1382
- dbUser: 'postgres'
1383
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-stage'
1384
- proxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
1385
- fullDbName: 'app'
1386
- projectId: 'some-project-id'
1387
- jobs:
1388
- db-migrate:
1389
- hook: 'post-install,post-upgrade'
1390
- command: 'launcher bundle exec rake db:migrate'
1391
- ",
1392
- "POSTGRESQL_PASSWORD": "$CL_stage_app_POSTGRESQL_PASSWORD",
1393
- "RAILS_ENV": "production",
1394
- "RELEASE_NAME": "pan-test-app-stage-app",
1395
- "ROOT_URL": "https://app.stage.test-app.pan.panter.cloud",
1396
- "SECRET_KEY_BASE": "$CL_stage_app_SECRET_KEY_BASE",
1397
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1398
- "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
1399
- },
1400
- },
1401
- "app 🔨 docker | prod ": {
1402
- "image": "path/to/docker/docker-build:the-version",
1403
- "interruptible": true,
1404
- "needs": [],
1405
- "retry": {
1406
- "max": 2,
1407
- "when": [
1408
- "runner_system_failure",
1409
- "stuck_or_timeout_failure",
1410
- ],
1411
- },
1412
- "script": [
1413
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1414
- "docker pull $DOCKER_CACHE_IMAGE || true",
1415
- "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v0.28.0/pack-v0.28.0-linux.tgz | tar -zx --directory /usr/local/bin pack",
1416
- "chmod +x /usr/local/bin/pack",
1417
- "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock",
1418
- "pack build "$DOCKER_IMAGE:$DOCKER_IMAGE_TAG" --builder 'heroku/buildpacks:20' --publish --cache-image "$DOCKER_CACHE_IMAGE" --env 'SECRET_KEY_BASE=dummy-value' ",
1419
- ],
1420
- "services": [
1421
- {
1422
- "command": [
1423
- "--tls=false",
1424
- ],
1425
- "name": "docker:20-dind",
1426
- },
1427
- ],
1428
- "stage": "build",
1429
- "variables": {
1430
- "APP_DIR": ".",
1431
- "DOCKERFILE_ADDITIONS": undefined,
1432
- "DOCKERFILE_ADDITIONS_END": undefined,
1433
- "DOCKER_BUILDKIT": "1",
1434
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
1435
- "DOCKER_DIR": ".",
1436
- "DOCKER_DRIVER": "overlay2",
1437
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1438
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1439
- "DOCKER_IMAGE_NAME": "prod/app",
1440
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1441
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1442
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1443
- "DOCKER_TLS_CERTDIR": "",
1444
- "KUBERNETES_CPU_LIMIT": "1",
1445
- "KUBERNETES_CPU_REQUEST": "0.5",
1446
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1447
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1448
- },
1449
- },
1450
- "app 🔨 docker | stage ": {
1451
- "image": "path/to/docker/docker-build:the-version",
1452
- "interruptible": true,
1453
- "needs": [],
1454
- "retry": {
1455
- "max": 2,
1456
- "when": [
1457
- "runner_system_failure",
1458
- "stuck_or_timeout_failure",
1459
- ],
1460
- },
1461
- "script": [
1462
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1463
- "docker pull $DOCKER_CACHE_IMAGE || true",
1464
- "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v0.28.0/pack-v0.28.0-linux.tgz | tar -zx --directory /usr/local/bin pack",
1465
- "chmod +x /usr/local/bin/pack",
1466
- "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock",
1467
- "pack build "$DOCKER_IMAGE:$DOCKER_IMAGE_TAG" --builder 'heroku/buildpacks:20' --publish --cache-image "$DOCKER_CACHE_IMAGE" --env 'SECRET_KEY_BASE=dummy-value' ",
1468
- ],
1469
- "services": [
1470
- {
1471
- "command": [
1472
- "--tls=false",
1473
- ],
1474
- "name": "docker:20-dind",
1475
- },
1476
- ],
1477
- "stage": "build",
1478
- "variables": {
1479
- "APP_DIR": ".",
1480
- "DOCKERFILE_ADDITIONS": undefined,
1481
- "DOCKERFILE_ADDITIONS_END": undefined,
1482
- "DOCKER_BUILDKIT": "1",
1483
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
1484
- "DOCKER_DIR": ".",
1485
- "DOCKER_DRIVER": "overlay2",
1486
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1487
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1488
- "DOCKER_IMAGE_NAME": "stage/app",
1489
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1490
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1491
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1492
- "DOCKER_TLS_CERTDIR": "",
1493
- "KUBERNETES_CPU_LIMIT": "1",
1494
- "KUBERNETES_CPU_REQUEST": "0.5",
1495
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1496
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1497
- },
1498
- },
1499
- "app 🚀 Deploy | prod ": {
1500
- "allow_failure": true,
1501
- "environment": {
1502
- "auto_stop_in": undefined,
1503
- "name": "prod/app",
1504
- "on_stop": "app 🛑 Stop ⚠️ | prod ",
1505
- "url": "https://my-fancy-website.com",
1506
- },
1507
- "image": "path/to/docker/kubernetes:the-version",
1508
- "interruptible": true,
1509
- "needs": [
1510
- {
1511
- "artifacts": false,
1512
- "job": "app 🔨 docker | prod ",
1513
- },
1514
- {
1515
- "artifacts": true,
1516
- "job": "app 🧾 sbom | prod ",
1517
- },
1518
- ],
1519
- "retry": {
1520
- "max": 2,
1521
- "when": [
1522
- "runner_system_failure",
1523
- "stuck_or_timeout_failure",
1524
- ],
1525
- },
1526
- "rules": [
1527
- {
1528
- "when": "manual",
1529
- },
1530
- ],
1531
- "script": [
1532
- "kubectl config set-cluster "kube-pan-test-app-prod-app" --server="$CL_prod_app_KUBE_URL" --certificate-authority <(echo $CL_prod_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1533
- "kubectl config set-credentials "kube-pan-test-app-prod-app" --token="$CL_prod_app_KUBE_TOKEN"",
1534
- "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
1535
- "kubectl config use-context "kube-pan-test-app-prod-app"",
1536
- "kubernetesCreateSecret",
1537
- "kubernetesDeploy",
1538
- "echo Uploading SBOM to Dependency Track",
1539
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://my-fancy-website.com" "__sbom.json" vex.json || true",
1540
- "echo deployment successful 😻",
1541
- ],
1542
- "stage": "deploy prod",
1543
- "variables": {
1544
- "APP_DIR": ".",
1545
- "BUILD_ID": "some-id",
1546
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1547
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1548
- "BUILD_INFO_ID": "some-id",
1549
- "COMPONENT_NAME": "app",
1550
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
1551
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1552
- "DOCKER_IMAGE_NAME": "prod/app",
1553
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1554
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1555
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1556
- "ENV_SHORT": "prod",
1557
- "ENV_TYPE": "prod",
1558
- "HELM_ARGS": "",
1559
- "HELM_EXPERIMENTAL_OCI": "1",
1560
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1561
- "HOST_CANONICAL": "app.prod.test-app.pan.panter.cloud",
1562
- "KUBERNETES_CPU_LIMIT": "1",
1563
- "KUBERNETES_CPU_REQUEST": "0.5",
1564
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1565
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1566
- "KUBE_APP_NAME": "app",
1567
- "KUBE_APP_NAME_PREFIX": "",
1568
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
1569
- "KUBE_NAMESPACE": "pan-test-app-prod",
1570
- "KUBE_VALUES": "env:
1571
- secret:
1572
- SECRET_KEY_BASE: '$CL_prod_app_SECRET_KEY_BASE'
1573
- POSTGRESQL_PASSWORD: '$CL_prod_app_POSTGRESQL_PASSWORD'
1574
- cloudsqlProxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
1575
- public:
1576
- ENV_SHORT: 'prod'
1577
- APP_DIR: '.'
1578
- ENV_TYPE: 'prod'
1579
- BUILD_INFO_ID: 'some-id'
1580
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1581
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1582
- ROOT_URL: 'https://my-fancy-website.com'
1583
- KUBE_NAMESPACE: 'pan-test-app-prod'
1584
- KUBE_APP_NAME: 'app'
1585
- KUBE_APP_NAME_PREFIX: ''
1586
- HOST_CANONICAL: 'app.prod.test-app.pan.panter.cloud'
1587
- RAILS_ENV: 'production'
1588
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1589
- application:
1590
- host: 'my-fancy-website.com'
1591
- command: '/cnb/process/web'
1592
- livenessProbe:
1593
- httpGet:
1594
- path: '__health'
1595
- readinessProbe:
1596
- httpGet:
1597
- path: '__health'
1598
- startupProbe:
1599
- httpGet:
1600
- path: '__health'
1601
- worker:
1602
- enabled: true
1603
- command: 'launcher bundle exec rake jobs:work'
1604
- cloudsql:
1605
- enabled: true
1606
- dbUser: 'postgres'
1607
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-prod'
1608
- proxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
1609
- fullDbName: 'app'
1610
- projectId: 'some-project-id'
1611
- jobs:
1612
- db-migrate:
1613
- hook: 'post-install,post-upgrade'
1614
- command: 'launcher bundle exec rake db:migrate'
1615
- ",
1616
- "POSTGRESQL_PASSWORD": "$CL_prod_app_POSTGRESQL_PASSWORD",
1617
- "RAILS_ENV": "production",
1618
- "RELEASE_NAME": "pan-test-app-prod-app",
1619
- "ROOT_URL": "https://my-fancy-website.com",
1620
- "SECRET_KEY_BASE": "$CL_prod_app_SECRET_KEY_BASE",
1621
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1622
- "cloudsqlProxyCredentials": "$CL_prod_app_cloudsqlProxyCredentials",
1623
- },
1624
- },
1625
- "app 🚀 Deploy | stage ": {
1626
- "allow_failure": false,
1627
- "environment": {
1628
- "auto_stop_in": undefined,
1629
- "name": "stage/app",
1630
- "on_stop": "app 🛑 Stop ⚠️ | stage ",
1631
- "url": "https://app.stage.test-app.pan.panter.cloud",
1632
- },
1633
- "image": "path/to/docker/kubernetes:the-version",
1634
- "interruptible": true,
1635
- "needs": [
1636
- {
1637
- "artifacts": false,
1638
- "job": "app 🔨 docker | stage ",
1639
- },
1640
- {
1641
- "artifacts": true,
1642
- "job": "app 🧾 sbom | stage ",
1643
- },
1644
- ],
1645
- "retry": {
1646
- "max": 2,
1647
- "when": [
1648
- "runner_system_failure",
1649
- "stuck_or_timeout_failure",
1650
- ],
1651
- },
1652
- "rules": [
1653
- {
1654
- "when": "on_success",
1655
- },
1656
- ],
1657
- "script": [
1658
- "kubectl config set-cluster "kube-pan-test-app-stage-app" --server="$CL_stage_app_KUBE_URL" --certificate-authority <(echo $CL_stage_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1659
- "kubectl config set-credentials "kube-pan-test-app-stage-app" --token="$CL_stage_app_KUBE_TOKEN"",
1660
- "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
1661
- "kubectl config use-context "kube-pan-test-app-stage-app"",
1662
- "kubernetesCreateSecret",
1663
- "kubernetesDeploy",
1664
- "echo Uploading SBOM to Dependency Track",
1665
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.stage.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
1666
- "echo deployment successful 😻",
1667
- ],
1668
- "stage": "deploy stage",
1669
- "variables": {
1670
- "APP_DIR": ".",
1671
- "BUILD_ID": "some-id",
1672
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1673
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1674
- "BUILD_INFO_ID": "some-id",
1675
- "COMPONENT_NAME": "app",
1676
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
1677
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1678
- "DOCKER_IMAGE_NAME": "stage/app",
1679
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1680
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1681
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1682
- "ENV_SHORT": "stage",
1683
- "ENV_TYPE": "stage",
1684
- "HELM_ARGS": "",
1685
- "HELM_EXPERIMENTAL_OCI": "1",
1686
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1687
- "HOST_CANONICAL": "app.stage.test-app.pan.panter.cloud",
1688
- "KUBERNETES_CPU_LIMIT": "1",
1689
- "KUBERNETES_CPU_REQUEST": "0.5",
1690
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1691
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1692
- "KUBE_APP_NAME": "app",
1693
- "KUBE_APP_NAME_PREFIX": "",
1694
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
1695
- "KUBE_NAMESPACE": "pan-test-app-stage",
1696
- "KUBE_VALUES": "env:
1697
- secret:
1698
- SECRET_KEY_BASE: '$CL_stage_app_SECRET_KEY_BASE'
1699
- POSTGRESQL_PASSWORD: '$CL_stage_app_POSTGRESQL_PASSWORD'
1700
- cloudsqlProxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
1701
- public:
1702
- ENV_SHORT: 'stage'
1703
- APP_DIR: '.'
1704
- ENV_TYPE: 'stage'
1705
- BUILD_INFO_ID: 'some-id'
1706
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1707
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1708
- ROOT_URL: 'https://app.stage.test-app.pan.panter.cloud'
1709
- KUBE_NAMESPACE: 'pan-test-app-stage'
1710
- KUBE_APP_NAME: 'app'
1711
- KUBE_APP_NAME_PREFIX: ''
1712
- HOST_CANONICAL: 'app.stage.test-app.pan.panter.cloud'
1713
- RAILS_ENV: 'production'
1714
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1715
- application:
1716
- host: 'app.stage.test-app.pan.panter.cloud'
1717
- command: '/cnb/process/web'
1718
- livenessProbe:
1719
- httpGet:
1720
- path: '__health'
1721
- readinessProbe:
1722
- httpGet:
1723
- path: '__health'
1724
- startupProbe:
1725
- httpGet:
1726
- path: '__health'
1727
- worker:
1728
- enabled: true
1729
- command: 'launcher bundle exec rake jobs:work'
1730
- cloudsql:
1731
- enabled: true
1732
- dbUser: 'postgres'
1733
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-stage'
1734
- proxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
1735
- fullDbName: 'app'
1736
- projectId: 'some-project-id'
1737
- jobs:
1738
- db-migrate:
1739
- hook: 'post-install,post-upgrade'
1740
- command: 'launcher bundle exec rake db:migrate'
1741
- ",
1742
- "POSTGRESQL_PASSWORD": "$CL_stage_app_POSTGRESQL_PASSWORD",
1743
- "RAILS_ENV": "production",
1744
- "RELEASE_NAME": "pan-test-app-stage-app",
1745
- "ROOT_URL": "https://app.stage.test-app.pan.panter.cloud",
1746
- "SECRET_KEY_BASE": "$CL_stage_app_SECRET_KEY_BASE",
1747
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1748
- "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
1749
- },
1750
- },
1751
- "app 🛑 Stop ⚠️ | prod ": {
1752
- "environment": {
1753
- "action": "stop",
1754
- "name": "prod/app",
1755
- "url": "https://my-fancy-website.com",
1756
- },
1757
- "image": "path/to/docker/kubernetes:the-version",
1758
- "interruptible": true,
1759
- "needs": [],
1760
- "retry": {
1761
- "max": 2,
1762
- "when": [
1763
- "runner_system_failure",
1764
- "stuck_or_timeout_failure",
1765
- ],
1766
- },
1767
- "rules": [
1768
- {
1769
- "allow_failure": true,
1770
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1771
- "when": "on_success",
1772
- },
1773
- {
1774
- "allow_failure": true,
1775
- "when": "manual",
1776
- },
1777
- ],
1778
- "script": [
1779
- "kubectl config set-cluster "kube-pan-test-app-prod-app" --server="$CL_prod_app_KUBE_URL" --certificate-authority <(echo $CL_prod_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1780
- "kubectl config set-credentials "kube-pan-test-app-prod-app" --token="$CL_prod_app_KUBE_TOKEN"",
1781
- "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
1782
- "kubectl config use-context "kube-pan-test-app-prod-app"",
1783
- "kubernetesDelete",
1784
- "echo Disabling component in Dependency Track",
1785
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://my-fancy-website.com" || true",
1786
- ],
1787
- "stage": "stop prod",
1788
- "variables": {
1789
- "APP_DIR": ".",
1790
- "BUILD_ID": "some-id",
1791
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1792
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1793
- "BUILD_INFO_ID": "some-id",
1794
- "COMPONENT_NAME": "app",
1795
- "ENV_SHORT": "prod",
1796
- "ENV_TYPE": "prod",
1797
- "GIT_STRATEGY": "none",
1798
- "HELM_ARGS": "",
1799
- "HELM_EXPERIMENTAL_OCI": "1",
1800
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1801
- "HOST_CANONICAL": "app.prod.test-app.pan.panter.cloud",
1802
- "KUBERNETES_CPU_LIMIT": "1",
1803
- "KUBERNETES_CPU_REQUEST": "0.5",
1804
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1805
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1806
- "KUBE_APP_NAME": "app",
1807
- "KUBE_APP_NAME_PREFIX": "",
1808
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
1809
- "KUBE_NAMESPACE": "pan-test-app-prod",
1810
- "KUBE_VALUES": "env:
1811
- secret:
1812
- SECRET_KEY_BASE: '$CL_prod_app_SECRET_KEY_BASE'
1813
- POSTGRESQL_PASSWORD: '$CL_prod_app_POSTGRESQL_PASSWORD'
1814
- cloudsqlProxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
1815
- public:
1816
- ENV_SHORT: 'prod'
1817
- APP_DIR: '.'
1818
- ENV_TYPE: 'prod'
1819
- BUILD_INFO_ID: 'some-id'
1820
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1821
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1822
- ROOT_URL: 'https://my-fancy-website.com'
1823
- KUBE_NAMESPACE: 'pan-test-app-prod'
1824
- KUBE_APP_NAME: 'app'
1825
- KUBE_APP_NAME_PREFIX: ''
1826
- HOST_CANONICAL: 'app.prod.test-app.pan.panter.cloud'
1827
- RAILS_ENV: 'production'
1828
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1829
- application:
1830
- host: 'my-fancy-website.com'
1831
- command: '/cnb/process/web'
1832
- livenessProbe:
1833
- httpGet:
1834
- path: '__health'
1835
- readinessProbe:
1836
- httpGet:
1837
- path: '__health'
1838
- startupProbe:
1839
- httpGet:
1840
- path: '__health'
1841
- worker:
1842
- enabled: true
1843
- command: 'launcher bundle exec rake jobs:work'
1844
- cloudsql:
1845
- enabled: true
1846
- dbUser: 'postgres'
1847
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-prod'
1848
- proxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
1849
- fullDbName: 'app'
1850
- projectId: 'some-project-id'
1851
- jobs:
1852
- db-migrate:
1853
- hook: 'post-install,post-upgrade'
1854
- command: 'launcher bundle exec rake db:migrate'
1855
- ",
1856
- "POSTGRESQL_PASSWORD": "$CL_prod_app_POSTGRESQL_PASSWORD",
1857
- "RAILS_ENV": "production",
1858
- "RELEASE_NAME": "pan-test-app-prod-app",
1859
- "ROOT_URL": "https://my-fancy-website.com",
1860
- "SECRET_KEY_BASE": "$CL_prod_app_SECRET_KEY_BASE",
1861
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1862
- "cloudsqlProxyCredentials": "$CL_prod_app_cloudsqlProxyCredentials",
1863
- },
1864
- },
1865
- "app 🛑 Stop ⚠️ | stage ": {
1866
- "environment": {
1867
- "action": "stop",
1868
- "name": "stage/app",
1869
- "url": "https://app.stage.test-app.pan.panter.cloud",
1870
- },
1871
- "image": "path/to/docker/kubernetes:the-version",
1872
- "interruptible": true,
1873
- "needs": [],
1874
- "retry": {
1875
- "max": 2,
1876
- "when": [
1877
- "runner_system_failure",
1878
- "stuck_or_timeout_failure",
1879
- ],
1880
- },
1881
- "rules": [
1882
- {
1883
- "allow_failure": true,
1884
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1885
- "when": "on_success",
1886
- },
1887
- {
1888
- "allow_failure": true,
1889
- "when": "manual",
1890
- },
1891
- ],
1892
- "script": [
1893
- "kubectl config set-cluster "kube-pan-test-app-stage-app" --server="$CL_stage_app_KUBE_URL" --certificate-authority <(echo $CL_stage_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1894
- "kubectl config set-credentials "kube-pan-test-app-stage-app" --token="$CL_stage_app_KUBE_TOKEN"",
1895
- "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
1896
- "kubectl config use-context "kube-pan-test-app-stage-app"",
1897
- "kubernetesDelete",
1898
- "echo Disabling component in Dependency Track",
1899
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.stage.test-app.pan.panter.cloud" || true",
1900
- ],
1901
- "stage": "stop stage",
1902
- "variables": {
1903
- "APP_DIR": ".",
1904
- "BUILD_ID": "some-id",
1905
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1906
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1907
- "BUILD_INFO_ID": "some-id",
1908
- "COMPONENT_NAME": "app",
1909
- "ENV_SHORT": "stage",
1910
- "ENV_TYPE": "stage",
1911
- "GIT_STRATEGY": "none",
1912
- "HELM_ARGS": "",
1913
- "HELM_EXPERIMENTAL_OCI": "1",
1914
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1915
- "HOST_CANONICAL": "app.stage.test-app.pan.panter.cloud",
1916
- "KUBERNETES_CPU_LIMIT": "1",
1917
- "KUBERNETES_CPU_REQUEST": "0.5",
1918
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1919
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1920
- "KUBE_APP_NAME": "app",
1921
- "KUBE_APP_NAME_PREFIX": "",
1922
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
1923
- "KUBE_NAMESPACE": "pan-test-app-stage",
1924
- "KUBE_VALUES": "env:
1925
- secret:
1926
- SECRET_KEY_BASE: '$CL_stage_app_SECRET_KEY_BASE'
1927
- POSTGRESQL_PASSWORD: '$CL_stage_app_POSTGRESQL_PASSWORD'
1928
- cloudsqlProxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
1929
- public:
1930
- ENV_SHORT: 'stage'
1931
- APP_DIR: '.'
1932
- ENV_TYPE: 'stage'
1933
- BUILD_INFO_ID: 'some-id'
1934
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1935
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1936
- ROOT_URL: 'https://app.stage.test-app.pan.panter.cloud'
1937
- KUBE_NAMESPACE: 'pan-test-app-stage'
1938
- KUBE_APP_NAME: 'app'
1939
- KUBE_APP_NAME_PREFIX: ''
1940
- HOST_CANONICAL: 'app.stage.test-app.pan.panter.cloud'
1941
- RAILS_ENV: 'production'
1942
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
1943
- application:
1944
- host: 'app.stage.test-app.pan.panter.cloud'
1945
- command: '/cnb/process/web'
1946
- livenessProbe:
1947
- httpGet:
1948
- path: '__health'
1949
- readinessProbe:
1950
- httpGet:
1951
- path: '__health'
1952
- startupProbe:
1953
- httpGet:
1954
- path: '__health'
1955
- worker:
1956
- enabled: true
1957
- command: 'launcher bundle exec rake jobs:work'
1958
- cloudsql:
1959
- enabled: true
1960
- dbUser: 'postgres'
1961
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-stage'
1962
- proxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
1963
- fullDbName: 'app'
1964
- projectId: 'some-project-id'
1965
- jobs:
1966
- db-migrate:
1967
- hook: 'post-install,post-upgrade'
1968
- command: 'launcher bundle exec rake db:migrate'
1969
- ",
1970
- "POSTGRESQL_PASSWORD": "$CL_stage_app_POSTGRESQL_PASSWORD",
1971
- "RAILS_ENV": "production",
1972
- "RELEASE_NAME": "pan-test-app-stage-app",
1973
- "ROOT_URL": "https://app.stage.test-app.pan.panter.cloud",
1974
- "SECRET_KEY_BASE": "$CL_stage_app_SECRET_KEY_BASE",
1975
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
1976
- "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
1977
- },
1978
- },
1979
- "app 🧾 sbom | prod ": {
1980
- "allow_failure": true,
1981
- "artifacts": {
1982
- "paths": [
1983
- "__sbom.json",
1984
- ],
1985
- },
1986
- "image": "aquasec/trivy:0.38.3",
1987
- "interruptible": true,
1988
- "needs": [],
1989
- "retry": {
1990
- "max": 2,
1991
- "when": [
1992
- "runner_system_failure",
1993
- "stuck_or_timeout_failure",
1994
- ],
1995
- },
1996
- "script": [
1997
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
1998
- ],
1999
- "stage": "build",
2000
- "variables": {},
2001
- },
2002
- "app 🧾 sbom | stage ": {
2003
- "allow_failure": true,
2004
- "artifacts": {
2005
- "paths": [
2006
- "__sbom.json",
2007
- ],
2008
- },
2009
- "image": "aquasec/trivy:0.38.3",
2010
- "interruptible": true,
2011
- "needs": [],
2012
- "retry": {
2013
- "max": 2,
2014
- "when": [
2015
- "runner_system_failure",
2016
- "stuck_or_timeout_failure",
2017
- ],
2018
- },
2019
- "script": [
2020
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
2021
- ],
2022
- "stage": "build",
2023
- "variables": {},
2024
- },
2025
- },
2026
- "stages": [
2027
- "setup",
2028
- "setup dev",
2029
- "setup review",
2030
- "setup stage",
2031
- "setup prod",
2032
- "setup local",
2033
- "test",
2034
- "test dev",
2035
- "test review",
2036
- "test stage",
2037
- "test prod",
2038
- "test local",
2039
- "build",
2040
- "build dev",
2041
- "build review",
2042
- "build stage",
2043
- "build prod",
2044
- "build local",
2045
- "deploy",
2046
- "deploy dev",
2047
- "deploy review",
2048
- "deploy stage",
2049
- "deploy prod",
2050
- "deploy local",
2051
- "verify",
2052
- "verify dev",
2053
- "verify review",
2054
- "verify stage",
2055
- "verify prod",
2056
- "verify local",
2057
- "rollback",
2058
- "rollback dev",
2059
- "rollback review",
2060
- "rollback stage",
2061
- "rollback prod",
2062
- "rollback local",
2063
- "stop",
2064
- "stop dev",
2065
- "stop review",
2066
- "stop stage",
2067
- "stop prod",
2068
- "stop local",
2069
- ],
2070
- "variables": {
2071
- "FF_USE_FASTZIP": "true",
2072
- },
2073
- "workflow": {
2074
- "rules": [
2075
- {
2076
- "if": "$CI_COMMIT_TAG",
2077
- },
2078
- {
2079
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2080
- "when": "never",
2081
- },
2082
- {
2083
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2084
- },
2085
- {
2086
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2087
- },
2088
- {
2089
- "if": "$CI_MERGE_REQUEST_ID",
2090
- },
2091
- ],
2092
- },
2093
- },
2094
- }
2095
- `;
2096
-
2097
- exports[`matches snapshot with a Dockerfile 1`] = `
2098
- {
2099
- "mainBranch": {
2100
- "image": "path/to/docker/jobs-default:the-version",
2101
- "jobs": {
2102
- "app ↩️ Rollback ⚠️ | dev ": {
2103
- "environment": {
2104
- "action": "access",
2105
- "name": "dev/app",
2106
- "url": "https://app.dev.test-app.pan.panter.cloud",
2107
- },
2108
- "image": "path/to/docker/kubernetes:the-version",
2109
- "interruptible": true,
2110
- "needs": [],
2111
- "retry": {
2112
- "max": 2,
2113
- "when": [
2114
- "runner_system_failure",
2115
- "stuck_or_timeout_failure",
2116
- ],
2117
- },
2118
- "rules": [
2119
- {
2120
- "allow_failure": true,
2121
- "when": "manual",
2122
- },
2123
- ],
2124
- "script": [
2125
- "kubectl config set-cluster "kube-pan-test-app-dev-app" --server="$CL_dev_app_KUBE_URL" --certificate-authority <(echo $CL_dev_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2126
- "kubectl config set-credentials "kube-pan-test-app-dev-app" --token="$CL_dev_app_KUBE_TOKEN"",
2127
- "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
2128
- "kubectl config use-context "kube-pan-test-app-dev-app"",
2129
- "kubernetesRollback",
2130
- ],
2131
- "stage": "rollback dev",
2132
- "variables": {
2133
- "APP_DIR": ".",
2134
- "BUILD_ID": "some-id",
2135
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2136
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2137
- "BUILD_INFO_ID": "some-id",
2138
- "COMPONENT_NAME": "app",
2139
- "ENV_SHORT": "dev",
2140
- "ENV_TYPE": "dev",
2141
- "GIT_STRATEGY": "none",
2142
- "HELM_ARGS": "",
2143
- "HELM_EXPERIMENTAL_OCI": "1",
2144
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2145
- "HOST_CANONICAL": "app.dev.test-app.pan.panter.cloud",
2146
- "KUBERNETES_CPU_LIMIT": "1",
2147
- "KUBERNETES_CPU_REQUEST": "0.5",
2148
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2149
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2150
- "KUBE_APP_NAME": "app",
2151
- "KUBE_APP_NAME_PREFIX": "",
2152
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
2153
- "KUBE_NAMESPACE": "pan-test-app-dev",
2154
- "KUBE_VALUES": "env:
2155
- secret:
2156
- SECRET_KEY_BASE: '$CL_dev_app_SECRET_KEY_BASE'
2157
- POSTGRESQL_PASSWORD: '$CL_dev_app_POSTGRESQL_PASSWORD'
2158
- cloudsqlProxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
2159
- public:
2160
- ENV_SHORT: 'dev'
2161
- APP_DIR: '.'
2162
- ENV_TYPE: 'dev'
2163
- BUILD_INFO_ID: 'some-id'
2164
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2165
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2166
- ROOT_URL: 'https://app.dev.test-app.pan.panter.cloud'
2167
- KUBE_NAMESPACE: 'pan-test-app-dev'
2168
- KUBE_APP_NAME: 'app'
2169
- KUBE_APP_NAME_PREFIX: ''
2170
- HOST_CANONICAL: 'app.dev.test-app.pan.panter.cloud'
2171
- RAILS_ENV: 'production'
2172
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
2173
- application:
2174
- host: 'app.dev.test-app.pan.panter.cloud'
2175
- command: '/cnb/process/web'
2176
- livenessProbe:
2177
- httpGet:
2178
- path: '__health'
2179
- readinessProbe:
2180
- httpGet:
2181
- path: '__health'
2182
- startupProbe:
2183
- httpGet:
2184
- path: '__health'
2185
- worker:
2186
- enabled: true
2187
- command: 'launcher bundle exec rake jobs:work'
2188
- cloudsql:
2189
- enabled: true
2190
- dbUser: 'postgres'
2191
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-dev'
2192
- proxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
2193
- fullDbName: 'app'
2194
- projectId: 'some-project-id'
2195
- jobs:
2196
- db-migrate:
2197
- hook: 'post-install,post-upgrade'
2198
- command: 'launcher bundle exec rake db:migrate'
2199
- ",
2200
- "POSTGRESQL_PASSWORD": "$CL_dev_app_POSTGRESQL_PASSWORD",
2201
- "RAILS_ENV": "production",
2202
- "RELEASE_NAME": "pan-test-app-dev-app",
2203
- "ROOT_URL": "https://app.dev.test-app.pan.panter.cloud",
2204
- "SECRET_KEY_BASE": "$CL_dev_app_SECRET_KEY_BASE",
2205
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
2206
- "cloudsqlProxyCredentials": "$CL_dev_app_cloudsqlProxyCredentials",
2207
- },
2208
- },
2209
- "app 👮 lint": {
2210
- "cache": {
2211
- "key": {
2212
- "files": [
2213
- "Gemfile.lock",
2214
- ],
2215
- "prefix": "$CI_JOB_IMAGE",
2216
- },
2217
- "paths": [
2218
- "tmp/cache",
2219
- ],
2220
- },
2221
- "image": "ruby:3.2.1",
2222
- "interruptible": true,
2223
- "needs": [],
2224
- "retry": {
2225
- "max": 2,
2226
- "when": [
2227
- "runner_system_failure",
2228
- "stuck_or_timeout_failure",
2229
- ],
2230
- },
2231
- "script": [
2232
- "cd .",
2233
- "bundle config set path 'tmp/cache'",
2234
- "bundle install -j $(nproc)",
2235
- "bundle exec rubocop",
2236
- ],
2237
- "stage": "test",
2238
- "variables": {},
2239
- },
2240
- "app 🔨 docker | dev ": {
2241
- "image": "path/to/docker/docker-build:the-version",
2242
- "interruptible": true,
2243
- "needs": [],
2244
- "retry": {
2245
- "max": 2,
2246
- "when": [
2247
- "runner_system_failure",
2248
- "stuck_or_timeout_failure",
2249
- ],
2250
- },
2251
- "script": [
2252
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2253
- "docker version",
2254
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2255
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2256
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2257
- "docker push $DOCKER_CACHE_IMAGE",
2258
- ],
2259
- "services": [
2260
- {
2261
- "command": [
2262
- "--tls=false",
2263
- ],
2264
- "name": "docker:20-dind",
2265
- },
2266
- ],
2267
- "stage": "build",
2268
- "variables": {
2269
- "APP_DIR": ".",
2270
- "DOCKERFILE_ADDITIONS": undefined,
2271
- "DOCKERFILE_ADDITIONS_END": undefined,
2272
- "DOCKER_BUILDKIT": "1",
2273
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
2274
- "DOCKER_DIR": ".",
2275
- "DOCKER_DRIVER": "overlay2",
2276
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2277
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2278
- "DOCKER_IMAGE_NAME": "dev/app",
2279
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2280
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2281
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2282
- "DOCKER_TLS_CERTDIR": "",
2283
- "KUBERNETES_CPU_LIMIT": "1",
2284
- "KUBERNETES_CPU_REQUEST": "0.5",
2285
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2286
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2287
- },
2288
- },
2289
- "app 🚀 Deploy | dev ": {
2290
- "allow_failure": false,
2291
- "environment": {
2292
- "auto_stop_in": "4 weeks",
2293
- "name": "dev/app",
2294
- "on_stop": "app 🛑 Stop ⚠️ | dev ",
2295
- "url": "https://app.dev.test-app.pan.panter.cloud",
2296
- },
2297
- "image": "path/to/docker/kubernetes:the-version",
2298
- "interruptible": true,
2299
- "needs": [
2300
- {
2301
- "artifacts": false,
2302
- "job": "app 👮 lint",
2303
- },
2304
- {
2305
- "artifacts": false,
2306
- "job": "app 🔨 docker | dev ",
2307
- },
2308
- {
2309
- "artifacts": false,
2310
- "job": "app 🧪 test",
2311
- },
2312
- {
2313
- "artifacts": true,
2314
- "job": "app 🧾 sbom | dev ",
2315
- },
2316
- {
2317
- "artifacts": false,
2318
- "job": "app 🛡 audit",
2319
- },
2320
- ],
2321
- "retry": {
2322
- "max": 2,
2323
- "when": [
2324
- "runner_system_failure",
2325
- "stuck_or_timeout_failure",
2326
- ],
2327
- },
2328
- "rules": [
2329
- {
2330
- "when": "on_success",
2331
- },
2332
- ],
2333
- "script": [
2334
- "kubectl config set-cluster "kube-pan-test-app-dev-app" --server="$CL_dev_app_KUBE_URL" --certificate-authority <(echo $CL_dev_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2335
- "kubectl config set-credentials "kube-pan-test-app-dev-app" --token="$CL_dev_app_KUBE_TOKEN"",
2336
- "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
2337
- "kubectl config use-context "kube-pan-test-app-dev-app"",
2338
- "kubernetesCreateSecret",
2339
- "kubernetesDeploy",
2340
- "echo Uploading SBOM to Dependency Track",
2341
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.dev.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
2342
- "echo deployment successful 😻",
2343
- ],
2344
- "stage": "deploy dev",
2345
- "variables": {
2346
- "APP_DIR": ".",
2347
- "BUILD_ID": "some-id",
2348
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2349
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2350
- "BUILD_INFO_ID": "some-id",
2351
- "COMPONENT_NAME": "app",
2352
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
2353
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2354
- "DOCKER_IMAGE_NAME": "dev/app",
2355
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2356
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2357
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2358
- "ENV_SHORT": "dev",
2359
- "ENV_TYPE": "dev",
2360
- "HELM_ARGS": "",
2361
- "HELM_EXPERIMENTAL_OCI": "1",
2362
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2363
- "HOST_CANONICAL": "app.dev.test-app.pan.panter.cloud",
2364
- "KUBERNETES_CPU_LIMIT": "1",
2365
- "KUBERNETES_CPU_REQUEST": "0.5",
2366
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2367
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2368
- "KUBE_APP_NAME": "app",
2369
- "KUBE_APP_NAME_PREFIX": "",
2370
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
2371
- "KUBE_NAMESPACE": "pan-test-app-dev",
2372
- "KUBE_VALUES": "env:
2373
- secret:
2374
- SECRET_KEY_BASE: '$CL_dev_app_SECRET_KEY_BASE'
2375
- POSTGRESQL_PASSWORD: '$CL_dev_app_POSTGRESQL_PASSWORD'
2376
- cloudsqlProxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
2377
- public:
2378
- ENV_SHORT: 'dev'
2379
- APP_DIR: '.'
2380
- ENV_TYPE: 'dev'
2381
- BUILD_INFO_ID: 'some-id'
2382
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2383
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2384
- ROOT_URL: 'https://app.dev.test-app.pan.panter.cloud'
2385
- KUBE_NAMESPACE: 'pan-test-app-dev'
2386
- KUBE_APP_NAME: 'app'
2387
- KUBE_APP_NAME_PREFIX: ''
2388
- HOST_CANONICAL: 'app.dev.test-app.pan.panter.cloud'
2389
- RAILS_ENV: 'production'
2390
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
2391
- application:
2392
- host: 'app.dev.test-app.pan.panter.cloud'
2393
- command: '/cnb/process/web'
2394
- livenessProbe:
2395
- httpGet:
2396
- path: '__health'
2397
- readinessProbe:
2398
- httpGet:
2399
- path: '__health'
2400
- startupProbe:
2401
- httpGet:
2402
- path: '__health'
2403
- worker:
2404
- enabled: true
2405
- command: 'launcher bundle exec rake jobs:work'
2406
- cloudsql:
2407
- enabled: true
2408
- dbUser: 'postgres'
2409
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-dev'
2410
- proxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
2411
- fullDbName: 'app'
2412
- projectId: 'some-project-id'
2413
- jobs:
2414
- db-migrate:
2415
- hook: 'post-install,post-upgrade'
2416
- command: 'launcher bundle exec rake db:migrate'
2417
- ",
2418
- "POSTGRESQL_PASSWORD": "$CL_dev_app_POSTGRESQL_PASSWORD",
2419
- "RAILS_ENV": "production",
2420
- "RELEASE_NAME": "pan-test-app-dev-app",
2421
- "ROOT_URL": "https://app.dev.test-app.pan.panter.cloud",
2422
- "SECRET_KEY_BASE": "$CL_dev_app_SECRET_KEY_BASE",
2423
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
2424
- "cloudsqlProxyCredentials": "$CL_dev_app_cloudsqlProxyCredentials",
2425
- },
2426
- },
2427
- "app 🛑 Stop ⚠️ | dev ": {
2428
- "environment": {
2429
- "action": "stop",
2430
- "name": "dev/app",
2431
- "url": "https://app.dev.test-app.pan.panter.cloud",
2432
- },
2433
- "image": "path/to/docker/kubernetes:the-version",
2434
- "interruptible": true,
2435
- "needs": [],
2436
- "retry": {
2437
- "max": 2,
2438
- "when": [
2439
- "runner_system_failure",
2440
- "stuck_or_timeout_failure",
2441
- ],
2442
- },
2443
- "rules": [
2444
- {
2445
- "allow_failure": true,
2446
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2447
- "when": "on_success",
2448
- },
2449
- {
2450
- "allow_failure": true,
2451
- "when": "manual",
2452
- },
2453
- ],
2454
- "script": [
2455
- "kubectl config set-cluster "kube-pan-test-app-dev-app" --server="$CL_dev_app_KUBE_URL" --certificate-authority <(echo $CL_dev_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2456
- "kubectl config set-credentials "kube-pan-test-app-dev-app" --token="$CL_dev_app_KUBE_TOKEN"",
2457
- "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
2458
- "kubectl config use-context "kube-pan-test-app-dev-app"",
2459
- "kubernetesDelete",
2460
- "echo Disabling component in Dependency Track",
2461
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.dev.test-app.pan.panter.cloud" || true",
2462
- ],
2463
- "stage": "stop dev",
2464
- "variables": {
2465
- "APP_DIR": ".",
2466
- "BUILD_ID": "some-id",
2467
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2468
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2469
- "BUILD_INFO_ID": "some-id",
2470
- "COMPONENT_NAME": "app",
2471
- "ENV_SHORT": "dev",
2472
- "ENV_TYPE": "dev",
2473
- "GIT_STRATEGY": "none",
2474
- "HELM_ARGS": "",
2475
- "HELM_EXPERIMENTAL_OCI": "1",
2476
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2477
- "HOST_CANONICAL": "app.dev.test-app.pan.panter.cloud",
2478
- "KUBERNETES_CPU_LIMIT": "1",
2479
- "KUBERNETES_CPU_REQUEST": "0.5",
2480
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2481
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2482
- "KUBE_APP_NAME": "app",
2483
- "KUBE_APP_NAME_PREFIX": "",
2484
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
2485
- "KUBE_NAMESPACE": "pan-test-app-dev",
2486
- "KUBE_VALUES": "env:
2487
- secret:
2488
- SECRET_KEY_BASE: '$CL_dev_app_SECRET_KEY_BASE'
2489
- POSTGRESQL_PASSWORD: '$CL_dev_app_POSTGRESQL_PASSWORD'
2490
- cloudsqlProxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
2491
- public:
2492
- ENV_SHORT: 'dev'
2493
- APP_DIR: '.'
2494
- ENV_TYPE: 'dev'
2495
- BUILD_INFO_ID: 'some-id'
2496
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2497
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2498
- ROOT_URL: 'https://app.dev.test-app.pan.panter.cloud'
2499
- KUBE_NAMESPACE: 'pan-test-app-dev'
2500
- KUBE_APP_NAME: 'app'
2501
- KUBE_APP_NAME_PREFIX: ''
2502
- HOST_CANONICAL: 'app.dev.test-app.pan.panter.cloud'
2503
- RAILS_ENV: 'production'
2504
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
2505
- application:
2506
- host: 'app.dev.test-app.pan.panter.cloud'
2507
- command: '/cnb/process/web'
2508
- livenessProbe:
2509
- httpGet:
2510
- path: '__health'
2511
- readinessProbe:
2512
- httpGet:
2513
- path: '__health'
2514
- startupProbe:
2515
- httpGet:
2516
- path: '__health'
2517
- worker:
2518
- enabled: true
2519
- command: 'launcher bundle exec rake jobs:work'
2520
- cloudsql:
2521
- enabled: true
2522
- dbUser: 'postgres'
2523
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-dev'
2524
- proxyCredentials: '$CL_dev_app_cloudsqlProxyCredentials'
2525
- fullDbName: 'app'
2526
- projectId: 'some-project-id'
2527
- jobs:
2528
- db-migrate:
2529
- hook: 'post-install,post-upgrade'
2530
- command: 'launcher bundle exec rake db:migrate'
2531
- ",
2532
- "POSTGRESQL_PASSWORD": "$CL_dev_app_POSTGRESQL_PASSWORD",
2533
- "RAILS_ENV": "production",
2534
- "RELEASE_NAME": "pan-test-app-dev-app",
2535
- "ROOT_URL": "https://app.dev.test-app.pan.panter.cloud",
2536
- "SECRET_KEY_BASE": "$CL_dev_app_SECRET_KEY_BASE",
2537
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
2538
- "cloudsqlProxyCredentials": "$CL_dev_app_cloudsqlProxyCredentials",
2539
- },
2540
- },
2541
- "app 🛡 audit": {
2542
- "allow_failure": true,
2543
- "image": "ruby:3.2.1",
2544
- "interruptible": true,
2545
- "needs": [],
2546
- "retry": {
2547
- "max": 2,
2548
- "when": [
2549
- "runner_system_failure",
2550
- "stuck_or_timeout_failure",
2551
- ],
2552
- },
2553
- "script": [
2554
- "cd .",
2555
- "gem install bundler-audit",
2556
- "bundle audit check",
2557
- ],
2558
- "stage": "test",
2559
- "variables": {},
2560
- },
2561
- "app 🧪 test": {
2562
- "cache": {
2563
- "key": {
2564
- "files": [
2565
- "Gemfile.lock",
2566
- ],
2567
- "prefix": "$CI_JOB_IMAGE",
2568
- },
2569
- "paths": [
2570
- "tmp/cache",
2571
- ],
2572
- },
2573
- "image": "ruby:3.2.1",
2574
- "interruptible": true,
2575
- "needs": [],
2576
- "retry": {
2577
- "max": 2,
2578
- "when": [
2579
- "runner_system_failure",
2580
- "stuck_or_timeout_failure",
2581
- ],
2582
- },
2583
- "script": [
2584
- "cd .",
2585
- "bundle config set path 'tmp/cache'",
2586
- "bundle install -j $(nproc)",
2587
- "bundle exec rspec",
2588
- ],
2589
- "stage": "test",
2590
- "variables": {},
2591
- },
2592
- "app 🧾 sbom | dev ": {
2593
- "allow_failure": true,
2594
- "artifacts": {
2595
- "paths": [
2596
- "__sbom.json",
2597
- ],
2598
- },
2599
- "image": "aquasec/trivy:0.38.3",
2600
- "interruptible": true,
2601
- "needs": [],
2602
- "retry": {
2603
- "max": 2,
2604
- "when": [
2605
- "runner_system_failure",
2606
- "stuck_or_timeout_failure",
2607
- ],
2608
- },
2609
- "script": [
2610
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
2611
- ],
2612
- "stage": "build",
2613
- "variables": {},
2614
- },
2615
- },
2616
- "stages": [
2617
- "setup",
2618
- "setup dev",
2619
- "setup review",
2620
- "setup stage",
2621
- "setup prod",
2622
- "setup local",
2623
- "test",
2624
- "test dev",
2625
- "test review",
2626
- "test stage",
2627
- "test prod",
2628
- "test local",
2629
- "build",
2630
- "build dev",
2631
- "build review",
2632
- "build stage",
2633
- "build prod",
2634
- "build local",
2635
- "deploy",
2636
- "deploy dev",
2637
- "deploy review",
2638
- "deploy stage",
2639
- "deploy prod",
2640
- "deploy local",
2641
- "verify",
2642
- "verify dev",
2643
- "verify review",
2644
- "verify stage",
2645
- "verify prod",
2646
- "verify local",
2647
- "rollback",
2648
- "rollback dev",
2649
- "rollback review",
2650
- "rollback stage",
2651
- "rollback prod",
2652
- "rollback local",
2653
- "stop",
2654
- "stop dev",
2655
- "stop review",
2656
- "stop stage",
2657
- "stop prod",
2658
- "stop local",
2659
- ],
2660
- "variables": {
2661
- "FF_USE_FASTZIP": "true",
2662
- },
2663
- "workflow": {
2664
- "rules": [
2665
- {
2666
- "if": "$CI_COMMIT_TAG",
2667
- },
2668
- {
2669
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2670
- "when": "never",
2671
- },
2672
- {
2673
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2674
- },
2675
- {
2676
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2677
- },
2678
- {
2679
- "if": "$CI_MERGE_REQUEST_ID",
2680
- },
2681
- ],
2682
- },
2683
- },
2684
- "mr": {
2685
- "image": "path/to/docker/jobs-default:the-version",
2686
- "jobs": {
2687
- "app ↩️ Rollback ⚠️ | review ": {
2688
- "environment": {
2689
- "action": "access",
2690
- "name": "review/some-commit/app",
2691
- "url": "https://app.mr1234.review.test-app.pan.panter.cloud",
2692
- },
2693
- "image": "path/to/docker/kubernetes:the-version",
2694
- "interruptible": true,
2695
- "needs": [],
2696
- "retry": {
2697
- "max": 2,
2698
- "when": [
2699
- "runner_system_failure",
2700
- "stuck_or_timeout_failure",
2701
- ],
2702
- },
2703
- "rules": [
2704
- {
2705
- "allow_failure": true,
2706
- "when": "manual",
2707
- },
2708
- ],
2709
- "script": [
2710
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-app" --server="$CL_review_app_KUBE_URL" --certificate-authority <(echo $CL_review_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2711
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-app" --token="$CL_review_app_KUBE_TOKEN"",
2712
- "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
2713
- "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
2714
- "kubernetesRollback",
2715
- ],
2716
- "stage": "rollback review",
2717
- "variables": {
2718
- "APP_DIR": ".",
2719
- "BUILD_ID": "some-id",
2720
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2721
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2722
- "BUILD_INFO_ID": "some-id",
2723
- "COMPONENT_NAME": "app",
2724
- "ENV_SHORT": "review",
2725
- "ENV_TYPE": "review",
2726
- "GIT_STRATEGY": "none",
2727
- "HELM_ARGS": "",
2728
- "HELM_EXPERIMENTAL_OCI": "1",
2729
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2730
- "HOST_CANONICAL": "app.mr1234.review.test-app.pan.panter.cloud",
2731
- "KUBERNETES_CPU_LIMIT": "1",
2732
- "KUBERNETES_CPU_REQUEST": "0.5",
2733
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2734
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2735
- "KUBE_APP_NAME": "mr1234-app",
2736
- "KUBE_APP_NAME_PREFIX": "mr1234-",
2737
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
2738
- "KUBE_NAMESPACE": "pan-test-app-review",
2739
- "KUBE_VALUES": "env:
2740
- secret:
2741
- SECRET_KEY_BASE: '$CL_review_app_SECRET_KEY_BASE'
2742
- POSTGRESQL_PASSWORD: '$CL_review_app_POSTGRESQL_PASSWORD'
2743
- cloudsqlProxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
2744
- public:
2745
- ENV_SHORT: 'review'
2746
- APP_DIR: '.'
2747
- ENV_TYPE: 'review'
2748
- BUILD_INFO_ID: 'some-id'
2749
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2750
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2751
- ROOT_URL: 'https://app.mr1234.review.test-app.pan.panter.cloud'
2752
- KUBE_NAMESPACE: 'pan-test-app-review'
2753
- KUBE_APP_NAME: 'mr1234-app'
2754
- KUBE_APP_NAME_PREFIX: 'mr1234-'
2755
- HOST_CANONICAL: 'app.mr1234.review.test-app.pan.panter.cloud'
2756
- RAILS_ENV: 'production'
2757
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
2758
- application:
2759
- host: 'app.mr1234.review.test-app.pan.panter.cloud'
2760
- command: '/cnb/process/web'
2761
- livenessProbe:
2762
- httpGet:
2763
- path: '__health'
2764
- readinessProbe:
2765
- httpGet:
2766
- path: '__health'
2767
- startupProbe:
2768
- httpGet:
2769
- path: '__health'
2770
- worker:
2771
- enabled: true
2772
- command: 'launcher bundle exec rake jobs:work'
2773
- cloudsql:
2774
- enabled: true
2775
- dbUser: 'postgres'
2776
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-review'
2777
- proxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
2778
- fullDbName: 'mr1234-app'
2779
- projectId: 'some-project-id'
2780
- jobs:
2781
- db-migrate:
2782
- hook: 'post-upgrade'
2783
- command: 'launcher bundle exec rake db:migrate'
2784
- db-prepare-seed:
2785
- hook: 'post-install'
2786
- command: 'launcher bundle exec rake db:prepare db:seed'
2787
- ",
2788
- "POSTGRESQL_PASSWORD": "$CL_review_app_POSTGRESQL_PASSWORD",
2789
- "RAILS_ENV": "production",
2790
- "RELEASE_NAME": "pan-test-app-review-mr1234-app",
2791
- "ROOT_URL": "https://app.mr1234.review.test-app.pan.panter.cloud",
2792
- "SECRET_KEY_BASE": "$CL_review_app_SECRET_KEY_BASE",
2793
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
2794
- "cloudsqlProxyCredentials": "$CL_review_app_cloudsqlProxyCredentials",
2795
- },
2796
- },
2797
- "app 👮 lint": {
2798
- "cache": {
2799
- "key": {
2800
- "files": [
2801
- "Gemfile.lock",
2802
- ],
2803
- "prefix": "$CI_JOB_IMAGE",
2804
- },
2805
- "paths": [
2806
- "tmp/cache",
2807
- ],
2808
- },
2809
- "image": "ruby:3.2.1",
2810
- "interruptible": true,
2811
- "needs": [],
2812
- "retry": {
2813
- "max": 2,
2814
- "when": [
2815
- "runner_system_failure",
2816
- "stuck_or_timeout_failure",
2817
- ],
2818
- },
2819
- "script": [
2820
- "cd .",
2821
- "bundle config set path 'tmp/cache'",
2822
- "bundle install -j $(nproc)",
2823
- "bundle exec rubocop",
2824
- ],
2825
- "stage": "test",
2826
- "variables": {},
2827
- },
2828
- "app 🔨 docker | review ": {
2829
- "image": "path/to/docker/docker-build:the-version",
2830
- "interruptible": true,
2831
- "needs": [],
2832
- "retry": {
2833
- "max": 2,
2834
- "when": [
2835
- "runner_system_failure",
2836
- "stuck_or_timeout_failure",
2837
- ],
2838
- },
2839
- "script": [
2840
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2841
- "docker version",
2842
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2843
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2844
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2845
- "docker push $DOCKER_CACHE_IMAGE",
2846
- ],
2847
- "services": [
2848
- {
2849
- "command": [
2850
- "--tls=false",
2851
- ],
2852
- "name": "docker:20-dind",
2853
- },
2854
- ],
2855
- "stage": "build",
2856
- "variables": {
2857
- "APP_DIR": ".",
2858
- "DOCKERFILE_ADDITIONS": undefined,
2859
- "DOCKERFILE_ADDITIONS_END": undefined,
2860
- "DOCKER_BUILDKIT": "1",
2861
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
2862
- "DOCKER_DIR": ".",
2863
- "DOCKER_DRIVER": "overlay2",
2864
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2865
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2866
- "DOCKER_IMAGE_NAME": "review/app",
2867
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2868
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2869
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2870
- "DOCKER_TLS_CERTDIR": "",
2871
- "KUBERNETES_CPU_LIMIT": "1",
2872
- "KUBERNETES_CPU_REQUEST": "0.5",
2873
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2874
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2875
- },
2876
- },
2877
- "app 🚀 Deploy | review ": {
2878
- "allow_failure": false,
2879
- "environment": {
2880
- "auto_stop_in": "2 week",
2881
- "name": "review/some-commit/app",
2882
- "on_stop": "app 🛑 Stop ⚠️ | review ",
2883
- "url": "https://app.mr1234.review.test-app.pan.panter.cloud",
2884
- },
2885
- "image": "path/to/docker/kubernetes:the-version",
2886
- "interruptible": true,
2887
- "needs": [
2888
- {
2889
- "artifacts": false,
2890
- "job": "app 👮 lint",
2891
- },
2892
- {
2893
- "artifacts": false,
2894
- "job": "app 🔨 docker | review ",
2895
- },
2896
- {
2897
- "artifacts": false,
2898
- "job": "app 🧪 test",
2899
- },
2900
- {
2901
- "artifacts": true,
2902
- "job": "app 🧾 sbom | review ",
2903
- },
2904
- {
2905
- "artifacts": false,
2906
- "job": "app 🛡 audit",
2907
- },
2908
- ],
2909
- "retry": {
2910
- "max": 2,
2911
- "when": [
2912
- "runner_system_failure",
2913
- "stuck_or_timeout_failure",
2914
- ],
2915
- },
2916
- "rules": [
2917
- {
2918
- "when": "on_success",
2919
- },
2920
- ],
2921
- "script": [
2922
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-app" --server="$CL_review_app_KUBE_URL" --certificate-authority <(echo $CL_review_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2923
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-app" --token="$CL_review_app_KUBE_TOKEN"",
2924
- "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
2925
- "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
2926
- "kubernetesCreateSecret",
2927
- "kubernetesDeploy",
2928
- "echo Uploading SBOM to Dependency Track",
2929
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.mr1234.review.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
2930
- "echo deployment successful 😻",
2931
- ],
2932
- "stage": "deploy review",
2933
- "variables": {
2934
- "APP_DIR": ".",
2935
- "BUILD_ID": "some-id",
2936
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2937
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2938
- "BUILD_INFO_ID": "some-id",
2939
- "COMPONENT_NAME": "app",
2940
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
2941
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2942
- "DOCKER_IMAGE_NAME": "review/app",
2943
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2944
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2945
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2946
- "ENV_SHORT": "review",
2947
- "ENV_TYPE": "review",
2948
- "HELM_ARGS": "",
2949
- "HELM_EXPERIMENTAL_OCI": "1",
2950
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2951
- "HOST_CANONICAL": "app.mr1234.review.test-app.pan.panter.cloud",
2952
- "KUBERNETES_CPU_LIMIT": "1",
2953
- "KUBERNETES_CPU_REQUEST": "0.5",
2954
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2955
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2956
- "KUBE_APP_NAME": "mr1234-app",
2957
- "KUBE_APP_NAME_PREFIX": "mr1234-",
2958
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
2959
- "KUBE_NAMESPACE": "pan-test-app-review",
2960
- "KUBE_VALUES": "env:
2961
- secret:
2962
- SECRET_KEY_BASE: '$CL_review_app_SECRET_KEY_BASE'
2963
- POSTGRESQL_PASSWORD: '$CL_review_app_POSTGRESQL_PASSWORD'
2964
- cloudsqlProxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
2965
- public:
2966
- ENV_SHORT: 'review'
2967
- APP_DIR: '.'
2968
- ENV_TYPE: 'review'
2969
- BUILD_INFO_ID: 'some-id'
2970
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2971
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2972
- ROOT_URL: 'https://app.mr1234.review.test-app.pan.panter.cloud'
2973
- KUBE_NAMESPACE: 'pan-test-app-review'
2974
- KUBE_APP_NAME: 'mr1234-app'
2975
- KUBE_APP_NAME_PREFIX: 'mr1234-'
2976
- HOST_CANONICAL: 'app.mr1234.review.test-app.pan.panter.cloud'
2977
- RAILS_ENV: 'production'
2978
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
2979
- application:
2980
- host: 'app.mr1234.review.test-app.pan.panter.cloud'
2981
- command: '/cnb/process/web'
2982
- livenessProbe:
2983
- httpGet:
2984
- path: '__health'
2985
- readinessProbe:
2986
- httpGet:
2987
- path: '__health'
2988
- startupProbe:
2989
- httpGet:
2990
- path: '__health'
2991
- worker:
2992
- enabled: true
2993
- command: 'launcher bundle exec rake jobs:work'
2994
- cloudsql:
2995
- enabled: true
2996
- dbUser: 'postgres'
2997
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-review'
2998
- proxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
2999
- fullDbName: 'mr1234-app'
3000
- projectId: 'some-project-id'
3001
- jobs:
3002
- db-migrate:
3003
- hook: 'post-upgrade'
3004
- command: 'launcher bundle exec rake db:migrate'
3005
- db-prepare-seed:
3006
- hook: 'post-install'
3007
- command: 'launcher bundle exec rake db:prepare db:seed'
3008
- ",
3009
- "POSTGRESQL_PASSWORD": "$CL_review_app_POSTGRESQL_PASSWORD",
3010
- "RAILS_ENV": "production",
3011
- "RELEASE_NAME": "pan-test-app-review-mr1234-app",
3012
- "ROOT_URL": "https://app.mr1234.review.test-app.pan.panter.cloud",
3013
- "SECRET_KEY_BASE": "$CL_review_app_SECRET_KEY_BASE",
3014
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3015
- "cloudsqlProxyCredentials": "$CL_review_app_cloudsqlProxyCredentials",
3016
- },
3017
- },
3018
- "app 🛑 Stop ⚠️ | review ": {
3019
- "environment": {
3020
- "action": "stop",
3021
- "name": "review/some-commit/app",
3022
- "url": "https://app.mr1234.review.test-app.pan.panter.cloud",
3023
- },
3024
- "image": "path/to/docker/kubernetes:the-version",
3025
- "interruptible": true,
3026
- "needs": [],
3027
- "retry": {
3028
- "max": 2,
3029
- "when": [
3030
- "runner_system_failure",
3031
- "stuck_or_timeout_failure",
3032
- ],
3033
- },
3034
- "rules": [
3035
- {
3036
- "allow_failure": true,
3037
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3038
- "when": "on_success",
3039
- },
3040
- {
3041
- "allow_failure": true,
3042
- "when": "manual",
3043
- },
3044
- ],
3045
- "script": [
3046
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-app" --server="$CL_review_app_KUBE_URL" --certificate-authority <(echo $CL_review_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3047
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-app" --token="$CL_review_app_KUBE_TOKEN"",
3048
- "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
3049
- "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
3050
- "kubernetesDelete",
3051
- "echo Disabling component in Dependency Track",
3052
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.mr1234.review.test-app.pan.panter.cloud" || true",
3053
- ],
3054
- "stage": "stop review",
3055
- "variables": {
3056
- "APP_DIR": ".",
3057
- "BUILD_ID": "some-id",
3058
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3059
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3060
- "BUILD_INFO_ID": "some-id",
3061
- "COMPONENT_NAME": "app",
3062
- "ENV_SHORT": "review",
3063
- "ENV_TYPE": "review",
3064
- "GIT_STRATEGY": "none",
3065
- "HELM_ARGS": "",
3066
- "HELM_EXPERIMENTAL_OCI": "1",
3067
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
3068
- "HOST_CANONICAL": "app.mr1234.review.test-app.pan.panter.cloud",
3069
- "KUBERNETES_CPU_LIMIT": "1",
3070
- "KUBERNETES_CPU_REQUEST": "0.5",
3071
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3072
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3073
- "KUBE_APP_NAME": "mr1234-app",
3074
- "KUBE_APP_NAME_PREFIX": "mr1234-",
3075
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
3076
- "KUBE_NAMESPACE": "pan-test-app-review",
3077
- "KUBE_VALUES": "env:
3078
- secret:
3079
- SECRET_KEY_BASE: '$CL_review_app_SECRET_KEY_BASE'
3080
- POSTGRESQL_PASSWORD: '$CL_review_app_POSTGRESQL_PASSWORD'
3081
- cloudsqlProxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
3082
- public:
3083
- ENV_SHORT: 'review'
3084
- APP_DIR: '.'
3085
- ENV_TYPE: 'review'
3086
- BUILD_INFO_ID: 'some-id'
3087
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3088
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3089
- ROOT_URL: 'https://app.mr1234.review.test-app.pan.panter.cloud'
3090
- KUBE_NAMESPACE: 'pan-test-app-review'
3091
- KUBE_APP_NAME: 'mr1234-app'
3092
- KUBE_APP_NAME_PREFIX: 'mr1234-'
3093
- HOST_CANONICAL: 'app.mr1234.review.test-app.pan.panter.cloud'
3094
- RAILS_ENV: 'production'
3095
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
3096
- application:
3097
- host: 'app.mr1234.review.test-app.pan.panter.cloud'
3098
- command: '/cnb/process/web'
3099
- livenessProbe:
3100
- httpGet:
3101
- path: '__health'
3102
- readinessProbe:
3103
- httpGet:
3104
- path: '__health'
3105
- startupProbe:
3106
- httpGet:
3107
- path: '__health'
3108
- worker:
3109
- enabled: true
3110
- command: 'launcher bundle exec rake jobs:work'
3111
- cloudsql:
3112
- enabled: true
3113
- dbUser: 'postgres'
3114
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-review'
3115
- proxyCredentials: '$CL_review_app_cloudsqlProxyCredentials'
3116
- fullDbName: 'mr1234-app'
3117
- projectId: 'some-project-id'
3118
- jobs:
3119
- db-migrate:
3120
- hook: 'post-upgrade'
3121
- command: 'launcher bundle exec rake db:migrate'
3122
- db-prepare-seed:
3123
- hook: 'post-install'
3124
- command: 'launcher bundle exec rake db:prepare db:seed'
3125
- ",
3126
- "POSTGRESQL_PASSWORD": "$CL_review_app_POSTGRESQL_PASSWORD",
3127
- "RAILS_ENV": "production",
3128
- "RELEASE_NAME": "pan-test-app-review-mr1234-app",
3129
- "ROOT_URL": "https://app.mr1234.review.test-app.pan.panter.cloud",
3130
- "SECRET_KEY_BASE": "$CL_review_app_SECRET_KEY_BASE",
3131
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3132
- "cloudsqlProxyCredentials": "$CL_review_app_cloudsqlProxyCredentials",
3133
- },
3134
- },
3135
- "app 🛡 audit": {
3136
- "allow_failure": true,
3137
- "image": "ruby:3.2.1",
3138
- "interruptible": true,
3139
- "needs": [],
3140
- "retry": {
3141
- "max": 2,
3142
- "when": [
3143
- "runner_system_failure",
3144
- "stuck_or_timeout_failure",
3145
- ],
3146
- },
3147
- "script": [
3148
- "cd .",
3149
- "gem install bundler-audit",
3150
- "bundle audit check",
3151
- ],
3152
- "stage": "test",
3153
- "variables": {},
3154
- },
3155
- "app 🧪 test": {
3156
- "cache": {
3157
- "key": {
3158
- "files": [
3159
- "Gemfile.lock",
3160
- ],
3161
- "prefix": "$CI_JOB_IMAGE",
3162
- },
3163
- "paths": [
3164
- "tmp/cache",
3165
- ],
3166
- },
3167
- "image": "ruby:3.2.1",
3168
- "interruptible": true,
3169
- "needs": [],
3170
- "retry": {
3171
- "max": 2,
3172
- "when": [
3173
- "runner_system_failure",
3174
- "stuck_or_timeout_failure",
3175
- ],
3176
- },
3177
- "script": [
3178
- "cd .",
3179
- "bundle config set path 'tmp/cache'",
3180
- "bundle install -j $(nproc)",
3181
- "bundle exec rspec",
3182
- ],
3183
- "stage": "test",
3184
- "variables": {},
3185
- },
3186
- "app 🧾 sbom | review ": {
3187
- "allow_failure": true,
3188
- "artifacts": {
3189
- "paths": [
3190
- "__sbom.json",
3191
- ],
3192
- },
3193
- "image": "aquasec/trivy:0.38.3",
3194
- "interruptible": true,
3195
- "needs": [],
3196
- "retry": {
3197
- "max": 2,
3198
- "when": [
3199
- "runner_system_failure",
3200
- "stuck_or_timeout_failure",
3201
- ],
3202
- },
3203
- "script": [
3204
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
3205
- ],
3206
- "stage": "build",
3207
- "variables": {},
3208
- },
3209
- },
3210
- "stages": [
3211
- "setup",
3212
- "setup dev",
3213
- "setup review",
3214
- "setup stage",
3215
- "setup prod",
3216
- "setup local",
3217
- "test",
3218
- "test dev",
3219
- "test review",
3220
- "test stage",
3221
- "test prod",
3222
- "test local",
3223
- "build",
3224
- "build dev",
3225
- "build review",
3226
- "build stage",
3227
- "build prod",
3228
- "build local",
3229
- "deploy",
3230
- "deploy dev",
3231
- "deploy review",
3232
- "deploy stage",
3233
- "deploy prod",
3234
- "deploy local",
3235
- "verify",
3236
- "verify dev",
3237
- "verify review",
3238
- "verify stage",
3239
- "verify prod",
3240
- "verify local",
3241
- "rollback",
3242
- "rollback dev",
3243
- "rollback review",
3244
- "rollback stage",
3245
- "rollback prod",
3246
- "rollback local",
3247
- "stop",
3248
- "stop dev",
3249
- "stop review",
3250
- "stop stage",
3251
- "stop prod",
3252
- "stop local",
3253
- ],
3254
- "variables": {
3255
- "FF_USE_FASTZIP": "true",
3256
- },
3257
- "workflow": {
3258
- "rules": [
3259
- {
3260
- "if": "$CI_COMMIT_TAG",
3261
- },
3262
- {
3263
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
3264
- "when": "never",
3265
- },
3266
- {
3267
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
3268
- },
3269
- {
3270
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
3271
- },
3272
- {
3273
- "if": "$CI_MERGE_REQUEST_ID",
3274
- },
3275
- ],
3276
- },
3277
- },
3278
- "taggedRelease": {
3279
- "image": "path/to/docker/jobs-default:the-version",
3280
- "jobs": {
3281
- "app ↩️ Rollback ⚠️ | prod ": {
3282
- "environment": {
3283
- "action": "access",
3284
- "name": "prod/app",
3285
- "url": "https://my-fancy-website.com",
3286
- },
3287
- "image": "path/to/docker/kubernetes:the-version",
3288
- "interruptible": true,
3289
- "needs": [],
3290
- "retry": {
3291
- "max": 2,
3292
- "when": [
3293
- "runner_system_failure",
3294
- "stuck_or_timeout_failure",
3295
- ],
3296
- },
3297
- "rules": [
3298
- {
3299
- "allow_failure": true,
3300
- "when": "manual",
3301
- },
3302
- ],
3303
- "script": [
3304
- "kubectl config set-cluster "kube-pan-test-app-prod-app" --server="$CL_prod_app_KUBE_URL" --certificate-authority <(echo $CL_prod_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3305
- "kubectl config set-credentials "kube-pan-test-app-prod-app" --token="$CL_prod_app_KUBE_TOKEN"",
3306
- "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
3307
- "kubectl config use-context "kube-pan-test-app-prod-app"",
3308
- "kubernetesRollback",
3309
- ],
3310
- "stage": "rollback prod",
3311
- "variables": {
3312
- "APP_DIR": ".",
3313
- "BUILD_ID": "some-id",
3314
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3315
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3316
- "BUILD_INFO_ID": "some-id",
3317
- "COMPONENT_NAME": "app",
3318
- "ENV_SHORT": "prod",
3319
- "ENV_TYPE": "prod",
3320
- "GIT_STRATEGY": "none",
3321
- "HELM_ARGS": "",
3322
- "HELM_EXPERIMENTAL_OCI": "1",
3323
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
3324
- "HOST_CANONICAL": "app.prod.test-app.pan.panter.cloud",
3325
- "KUBERNETES_CPU_LIMIT": "1",
3326
- "KUBERNETES_CPU_REQUEST": "0.5",
3327
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3328
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3329
- "KUBE_APP_NAME": "app",
3330
- "KUBE_APP_NAME_PREFIX": "",
3331
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
3332
- "KUBE_NAMESPACE": "pan-test-app-prod",
3333
- "KUBE_VALUES": "env:
3334
- secret:
3335
- SECRET_KEY_BASE: '$CL_prod_app_SECRET_KEY_BASE'
3336
- POSTGRESQL_PASSWORD: '$CL_prod_app_POSTGRESQL_PASSWORD'
3337
- cloudsqlProxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
3338
- public:
3339
- ENV_SHORT: 'prod'
3340
- APP_DIR: '.'
3341
- ENV_TYPE: 'prod'
3342
- BUILD_INFO_ID: 'some-id'
3343
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3344
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3345
- ROOT_URL: 'https://my-fancy-website.com'
3346
- KUBE_NAMESPACE: 'pan-test-app-prod'
3347
- KUBE_APP_NAME: 'app'
3348
- KUBE_APP_NAME_PREFIX: ''
3349
- HOST_CANONICAL: 'app.prod.test-app.pan.panter.cloud'
3350
- RAILS_ENV: 'production'
3351
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
3352
- application:
3353
- host: 'my-fancy-website.com'
3354
- command: '/cnb/process/web'
3355
- livenessProbe:
3356
- httpGet:
3357
- path: '__health'
3358
- readinessProbe:
3359
- httpGet:
3360
- path: '__health'
3361
- startupProbe:
3362
- httpGet:
3363
- path: '__health'
3364
- worker:
3365
- enabled: true
3366
- command: 'launcher bundle exec rake jobs:work'
3367
- cloudsql:
3368
- enabled: true
3369
- dbUser: 'postgres'
3370
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-prod'
3371
- proxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
3372
- fullDbName: 'app'
3373
- projectId: 'some-project-id'
3374
- jobs:
3375
- db-migrate:
3376
- hook: 'post-install,post-upgrade'
3377
- command: 'launcher bundle exec rake db:migrate'
3378
- ",
3379
- "POSTGRESQL_PASSWORD": "$CL_prod_app_POSTGRESQL_PASSWORD",
3380
- "RAILS_ENV": "production",
3381
- "RELEASE_NAME": "pan-test-app-prod-app",
3382
- "ROOT_URL": "https://my-fancy-website.com",
3383
- "SECRET_KEY_BASE": "$CL_prod_app_SECRET_KEY_BASE",
3384
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3385
- "cloudsqlProxyCredentials": "$CL_prod_app_cloudsqlProxyCredentials",
3386
- },
3387
- },
3388
- "app ↩️ Rollback ⚠️ | stage ": {
3389
- "environment": {
3390
- "action": "access",
3391
- "name": "stage/app",
3392
- "url": "https://app.stage.test-app.pan.panter.cloud",
3393
- },
3394
- "image": "path/to/docker/kubernetes:the-version",
3395
- "interruptible": true,
3396
- "needs": [],
3397
- "retry": {
3398
- "max": 2,
3399
- "when": [
3400
- "runner_system_failure",
3401
- "stuck_or_timeout_failure",
3402
- ],
3403
- },
3404
- "rules": [
3405
- {
3406
- "allow_failure": true,
3407
- "when": "manual",
3408
- },
3409
- ],
3410
- "script": [
3411
- "kubectl config set-cluster "kube-pan-test-app-stage-app" --server="$CL_stage_app_KUBE_URL" --certificate-authority <(echo $CL_stage_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3412
- "kubectl config set-credentials "kube-pan-test-app-stage-app" --token="$CL_stage_app_KUBE_TOKEN"",
3413
- "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
3414
- "kubectl config use-context "kube-pan-test-app-stage-app"",
3415
- "kubernetesRollback",
3416
- ],
3417
- "stage": "rollback stage",
3418
- "variables": {
3419
- "APP_DIR": ".",
3420
- "BUILD_ID": "some-id",
3421
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3422
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3423
- "BUILD_INFO_ID": "some-id",
3424
- "COMPONENT_NAME": "app",
3425
- "ENV_SHORT": "stage",
3426
- "ENV_TYPE": "stage",
3427
- "GIT_STRATEGY": "none",
3428
- "HELM_ARGS": "",
3429
- "HELM_EXPERIMENTAL_OCI": "1",
3430
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
3431
- "HOST_CANONICAL": "app.stage.test-app.pan.panter.cloud",
3432
- "KUBERNETES_CPU_LIMIT": "1",
3433
- "KUBERNETES_CPU_REQUEST": "0.5",
3434
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3435
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3436
- "KUBE_APP_NAME": "app",
3437
- "KUBE_APP_NAME_PREFIX": "",
3438
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
3439
- "KUBE_NAMESPACE": "pan-test-app-stage",
3440
- "KUBE_VALUES": "env:
3441
- secret:
3442
- SECRET_KEY_BASE: '$CL_stage_app_SECRET_KEY_BASE'
3443
- POSTGRESQL_PASSWORD: '$CL_stage_app_POSTGRESQL_PASSWORD'
3444
- cloudsqlProxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
3445
- public:
3446
- ENV_SHORT: 'stage'
3447
- APP_DIR: '.'
3448
- ENV_TYPE: 'stage'
3449
- BUILD_INFO_ID: 'some-id'
3450
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3451
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3452
- ROOT_URL: 'https://app.stage.test-app.pan.panter.cloud'
3453
- KUBE_NAMESPACE: 'pan-test-app-stage'
3454
- KUBE_APP_NAME: 'app'
3455
- KUBE_APP_NAME_PREFIX: ''
3456
- HOST_CANONICAL: 'app.stage.test-app.pan.panter.cloud'
3457
- RAILS_ENV: 'production'
3458
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
3459
- application:
3460
- host: 'app.stage.test-app.pan.panter.cloud'
3461
- command: '/cnb/process/web'
3462
- livenessProbe:
3463
- httpGet:
3464
- path: '__health'
3465
- readinessProbe:
3466
- httpGet:
3467
- path: '__health'
3468
- startupProbe:
3469
- httpGet:
3470
- path: '__health'
3471
- worker:
3472
- enabled: true
3473
- command: 'launcher bundle exec rake jobs:work'
3474
- cloudsql:
3475
- enabled: true
3476
- dbUser: 'postgres'
3477
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-stage'
3478
- proxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
3479
- fullDbName: 'app'
3480
- projectId: 'some-project-id'
3481
- jobs:
3482
- db-migrate:
3483
- hook: 'post-install,post-upgrade'
3484
- command: 'launcher bundle exec rake db:migrate'
3485
- ",
3486
- "POSTGRESQL_PASSWORD": "$CL_stage_app_POSTGRESQL_PASSWORD",
3487
- "RAILS_ENV": "production",
3488
- "RELEASE_NAME": "pan-test-app-stage-app",
3489
- "ROOT_URL": "https://app.stage.test-app.pan.panter.cloud",
3490
- "SECRET_KEY_BASE": "$CL_stage_app_SECRET_KEY_BASE",
3491
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3492
- "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
3493
- },
3494
- },
3495
- "app 🔨 docker | prod ": {
3496
- "image": "path/to/docker/docker-build:the-version",
3497
- "interruptible": true,
3498
- "needs": [],
3499
- "retry": {
3500
- "max": 2,
3501
- "when": [
3502
- "runner_system_failure",
3503
- "stuck_or_timeout_failure",
3504
- ],
3505
- },
3506
- "script": [
3507
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
3508
- "docker version",
3509
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3510
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3511
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3512
- "docker push $DOCKER_CACHE_IMAGE",
3513
- ],
3514
- "services": [
3515
- {
3516
- "command": [
3517
- "--tls=false",
3518
- ],
3519
- "name": "docker:20-dind",
3520
- },
3521
- ],
3522
- "stage": "build",
3523
- "variables": {
3524
- "APP_DIR": ".",
3525
- "DOCKERFILE_ADDITIONS": undefined,
3526
- "DOCKERFILE_ADDITIONS_END": undefined,
3527
- "DOCKER_BUILDKIT": "1",
3528
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
3529
- "DOCKER_DIR": ".",
3530
- "DOCKER_DRIVER": "overlay2",
3531
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3532
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3533
- "DOCKER_IMAGE_NAME": "prod/app",
3534
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3535
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3536
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3537
- "DOCKER_TLS_CERTDIR": "",
3538
- "KUBERNETES_CPU_LIMIT": "1",
3539
- "KUBERNETES_CPU_REQUEST": "0.5",
3540
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3541
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3542
- },
3543
- },
3544
- "app 🔨 docker | stage ": {
3545
- "image": "path/to/docker/docker-build:the-version",
3546
- "interruptible": true,
3547
- "needs": [],
3548
- "retry": {
3549
- "max": 2,
3550
- "when": [
3551
- "runner_system_failure",
3552
- "stuck_or_timeout_failure",
3553
- ],
3554
- },
3555
- "script": [
3556
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
3557
- "docker version",
3558
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3559
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3560
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3561
- "docker push $DOCKER_CACHE_IMAGE",
3562
- ],
3563
- "services": [
3564
- {
3565
- "command": [
3566
- "--tls=false",
3567
- ],
3568
- "name": "docker:20-dind",
3569
- },
3570
- ],
3571
- "stage": "build",
3572
- "variables": {
3573
- "APP_DIR": ".",
3574
- "DOCKERFILE_ADDITIONS": undefined,
3575
- "DOCKERFILE_ADDITIONS_END": undefined,
3576
- "DOCKER_BUILDKIT": "1",
3577
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
3578
- "DOCKER_DIR": ".",
3579
- "DOCKER_DRIVER": "overlay2",
3580
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3581
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3582
- "DOCKER_IMAGE_NAME": "stage/app",
3583
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3584
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3585
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3586
- "DOCKER_TLS_CERTDIR": "",
3587
- "KUBERNETES_CPU_LIMIT": "1",
3588
- "KUBERNETES_CPU_REQUEST": "0.5",
3589
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3590
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3591
- },
3592
- },
3593
- "app 🚀 Deploy | prod ": {
3594
- "allow_failure": true,
3595
- "environment": {
3596
- "auto_stop_in": undefined,
3597
- "name": "prod/app",
3598
- "on_stop": "app 🛑 Stop ⚠️ | prod ",
3599
- "url": "https://my-fancy-website.com",
3600
- },
3601
- "image": "path/to/docker/kubernetes:the-version",
3602
- "interruptible": true,
3603
- "needs": [
3604
- {
3605
- "artifacts": false,
3606
- "job": "app 🔨 docker | prod ",
3607
- },
3608
- {
3609
- "artifacts": true,
3610
- "job": "app 🧾 sbom | prod ",
3611
- },
3612
- ],
3613
- "retry": {
3614
- "max": 2,
3615
- "when": [
3616
- "runner_system_failure",
3617
- "stuck_or_timeout_failure",
3618
- ],
3619
- },
3620
- "rules": [
3621
- {
3622
- "when": "manual",
3623
- },
3624
- ],
3625
- "script": [
3626
- "kubectl config set-cluster "kube-pan-test-app-prod-app" --server="$CL_prod_app_KUBE_URL" --certificate-authority <(echo $CL_prod_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3627
- "kubectl config set-credentials "kube-pan-test-app-prod-app" --token="$CL_prod_app_KUBE_TOKEN"",
3628
- "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
3629
- "kubectl config use-context "kube-pan-test-app-prod-app"",
3630
- "kubernetesCreateSecret",
3631
- "kubernetesDeploy",
3632
- "echo Uploading SBOM to Dependency Track",
3633
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://my-fancy-website.com" "__sbom.json" vex.json || true",
3634
- "echo deployment successful 😻",
3635
- ],
3636
- "stage": "deploy prod",
3637
- "variables": {
3638
- "APP_DIR": ".",
3639
- "BUILD_ID": "some-id",
3640
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3641
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3642
- "BUILD_INFO_ID": "some-id",
3643
- "COMPONENT_NAME": "app",
3644
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
3645
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3646
- "DOCKER_IMAGE_NAME": "prod/app",
3647
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3648
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3649
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3650
- "ENV_SHORT": "prod",
3651
- "ENV_TYPE": "prod",
3652
- "HELM_ARGS": "",
3653
- "HELM_EXPERIMENTAL_OCI": "1",
3654
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
3655
- "HOST_CANONICAL": "app.prod.test-app.pan.panter.cloud",
3656
- "KUBERNETES_CPU_LIMIT": "1",
3657
- "KUBERNETES_CPU_REQUEST": "0.5",
3658
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3659
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3660
- "KUBE_APP_NAME": "app",
3661
- "KUBE_APP_NAME_PREFIX": "",
3662
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
3663
- "KUBE_NAMESPACE": "pan-test-app-prod",
3664
- "KUBE_VALUES": "env:
3665
- secret:
3666
- SECRET_KEY_BASE: '$CL_prod_app_SECRET_KEY_BASE'
3667
- POSTGRESQL_PASSWORD: '$CL_prod_app_POSTGRESQL_PASSWORD'
3668
- cloudsqlProxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
3669
- public:
3670
- ENV_SHORT: 'prod'
3671
- APP_DIR: '.'
3672
- ENV_TYPE: 'prod'
3673
- BUILD_INFO_ID: 'some-id'
3674
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3675
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3676
- ROOT_URL: 'https://my-fancy-website.com'
3677
- KUBE_NAMESPACE: 'pan-test-app-prod'
3678
- KUBE_APP_NAME: 'app'
3679
- KUBE_APP_NAME_PREFIX: ''
3680
- HOST_CANONICAL: 'app.prod.test-app.pan.panter.cloud'
3681
- RAILS_ENV: 'production'
3682
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
3683
- application:
3684
- host: 'my-fancy-website.com'
3685
- command: '/cnb/process/web'
3686
- livenessProbe:
3687
- httpGet:
3688
- path: '__health'
3689
- readinessProbe:
3690
- httpGet:
3691
- path: '__health'
3692
- startupProbe:
3693
- httpGet:
3694
- path: '__health'
3695
- worker:
3696
- enabled: true
3697
- command: 'launcher bundle exec rake jobs:work'
3698
- cloudsql:
3699
- enabled: true
3700
- dbUser: 'postgres'
3701
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-prod'
3702
- proxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
3703
- fullDbName: 'app'
3704
- projectId: 'some-project-id'
3705
- jobs:
3706
- db-migrate:
3707
- hook: 'post-install,post-upgrade'
3708
- command: 'launcher bundle exec rake db:migrate'
3709
- ",
3710
- "POSTGRESQL_PASSWORD": "$CL_prod_app_POSTGRESQL_PASSWORD",
3711
- "RAILS_ENV": "production",
3712
- "RELEASE_NAME": "pan-test-app-prod-app",
3713
- "ROOT_URL": "https://my-fancy-website.com",
3714
- "SECRET_KEY_BASE": "$CL_prod_app_SECRET_KEY_BASE",
3715
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3716
- "cloudsqlProxyCredentials": "$CL_prod_app_cloudsqlProxyCredentials",
3717
- },
3718
- },
3719
- "app 🚀 Deploy | stage ": {
3720
- "allow_failure": false,
3721
- "environment": {
3722
- "auto_stop_in": undefined,
3723
- "name": "stage/app",
3724
- "on_stop": "app 🛑 Stop ⚠️ | stage ",
3725
- "url": "https://app.stage.test-app.pan.panter.cloud",
3726
- },
3727
- "image": "path/to/docker/kubernetes:the-version",
3728
- "interruptible": true,
3729
- "needs": [
3730
- {
3731
- "artifacts": false,
3732
- "job": "app 🔨 docker | stage ",
3733
- },
3734
- {
3735
- "artifacts": true,
3736
- "job": "app 🧾 sbom | stage ",
3737
- },
3738
- ],
3739
- "retry": {
3740
- "max": 2,
3741
- "when": [
3742
- "runner_system_failure",
3743
- "stuck_or_timeout_failure",
3744
- ],
3745
- },
3746
- "rules": [
3747
- {
3748
- "when": "on_success",
3749
- },
3750
- ],
3751
- "script": [
3752
- "kubectl config set-cluster "kube-pan-test-app-stage-app" --server="$CL_stage_app_KUBE_URL" --certificate-authority <(echo $CL_stage_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3753
- "kubectl config set-credentials "kube-pan-test-app-stage-app" --token="$CL_stage_app_KUBE_TOKEN"",
3754
- "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
3755
- "kubectl config use-context "kube-pan-test-app-stage-app"",
3756
- "kubernetesCreateSecret",
3757
- "kubernetesDeploy",
3758
- "echo Uploading SBOM to Dependency Track",
3759
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.stage.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
3760
- "echo deployment successful 😻",
3761
- ],
3762
- "stage": "deploy stage",
3763
- "variables": {
3764
- "APP_DIR": ".",
3765
- "BUILD_ID": "some-id",
3766
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3767
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3768
- "BUILD_INFO_ID": "some-id",
3769
- "COMPONENT_NAME": "app",
3770
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/app",
3771
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3772
- "DOCKER_IMAGE_NAME": "stage/app",
3773
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3774
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3775
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3776
- "ENV_SHORT": "stage",
3777
- "ENV_TYPE": "stage",
3778
- "HELM_ARGS": "",
3779
- "HELM_EXPERIMENTAL_OCI": "1",
3780
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
3781
- "HOST_CANONICAL": "app.stage.test-app.pan.panter.cloud",
3782
- "KUBERNETES_CPU_LIMIT": "1",
3783
- "KUBERNETES_CPU_REQUEST": "0.5",
3784
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3785
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3786
- "KUBE_APP_NAME": "app",
3787
- "KUBE_APP_NAME_PREFIX": "",
3788
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
3789
- "KUBE_NAMESPACE": "pan-test-app-stage",
3790
- "KUBE_VALUES": "env:
3791
- secret:
3792
- SECRET_KEY_BASE: '$CL_stage_app_SECRET_KEY_BASE'
3793
- POSTGRESQL_PASSWORD: '$CL_stage_app_POSTGRESQL_PASSWORD'
3794
- cloudsqlProxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
3795
- public:
3796
- ENV_SHORT: 'stage'
3797
- APP_DIR: '.'
3798
- ENV_TYPE: 'stage'
3799
- BUILD_INFO_ID: 'some-id'
3800
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3801
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3802
- ROOT_URL: 'https://app.stage.test-app.pan.panter.cloud'
3803
- KUBE_NAMESPACE: 'pan-test-app-stage'
3804
- KUBE_APP_NAME: 'app'
3805
- KUBE_APP_NAME_PREFIX: ''
3806
- HOST_CANONICAL: 'app.stage.test-app.pan.panter.cloud'
3807
- RAILS_ENV: 'production'
3808
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
3809
- application:
3810
- host: 'app.stage.test-app.pan.panter.cloud'
3811
- command: '/cnb/process/web'
3812
- livenessProbe:
3813
- httpGet:
3814
- path: '__health'
3815
- readinessProbe:
3816
- httpGet:
3817
- path: '__health'
3818
- startupProbe:
3819
- httpGet:
3820
- path: '__health'
3821
- worker:
3822
- enabled: true
3823
- command: 'launcher bundle exec rake jobs:work'
3824
- cloudsql:
3825
- enabled: true
3826
- dbUser: 'postgres'
3827
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-stage'
3828
- proxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
3829
- fullDbName: 'app'
3830
- projectId: 'some-project-id'
3831
- jobs:
3832
- db-migrate:
3833
- hook: 'post-install,post-upgrade'
3834
- command: 'launcher bundle exec rake db:migrate'
3835
- ",
3836
- "POSTGRESQL_PASSWORD": "$CL_stage_app_POSTGRESQL_PASSWORD",
3837
- "RAILS_ENV": "production",
3838
- "RELEASE_NAME": "pan-test-app-stage-app",
3839
- "ROOT_URL": "https://app.stage.test-app.pan.panter.cloud",
3840
- "SECRET_KEY_BASE": "$CL_stage_app_SECRET_KEY_BASE",
3841
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3842
- "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
3843
- },
3844
- },
3845
- "app 🛑 Stop ⚠️ | prod ": {
3846
- "environment": {
3847
- "action": "stop",
3848
- "name": "prod/app",
3849
- "url": "https://my-fancy-website.com",
3850
- },
3851
- "image": "path/to/docker/kubernetes:the-version",
3852
- "interruptible": true,
3853
- "needs": [],
3854
- "retry": {
3855
- "max": 2,
3856
- "when": [
3857
- "runner_system_failure",
3858
- "stuck_or_timeout_failure",
3859
- ],
3860
- },
3861
- "rules": [
3862
- {
3863
- "allow_failure": true,
3864
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3865
- "when": "on_success",
3866
- },
3867
- {
3868
- "allow_failure": true,
3869
- "when": "manual",
3870
- },
3871
- ],
3872
- "script": [
3873
- "kubectl config set-cluster "kube-pan-test-app-prod-app" --server="$CL_prod_app_KUBE_URL" --certificate-authority <(echo $CL_prod_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3874
- "kubectl config set-credentials "kube-pan-test-app-prod-app" --token="$CL_prod_app_KUBE_TOKEN"",
3875
- "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
3876
- "kubectl config use-context "kube-pan-test-app-prod-app"",
3877
- "kubernetesDelete",
3878
- "echo Disabling component in Dependency Track",
3879
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://my-fancy-website.com" || true",
3880
- ],
3881
- "stage": "stop prod",
3882
- "variables": {
3883
- "APP_DIR": ".",
3884
- "BUILD_ID": "some-id",
3885
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3886
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3887
- "BUILD_INFO_ID": "some-id",
3888
- "COMPONENT_NAME": "app",
3889
- "ENV_SHORT": "prod",
3890
- "ENV_TYPE": "prod",
3891
- "GIT_STRATEGY": "none",
3892
- "HELM_ARGS": "",
3893
- "HELM_EXPERIMENTAL_OCI": "1",
3894
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
3895
- "HOST_CANONICAL": "app.prod.test-app.pan.panter.cloud",
3896
- "KUBERNETES_CPU_LIMIT": "1",
3897
- "KUBERNETES_CPU_REQUEST": "0.5",
3898
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3899
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3900
- "KUBE_APP_NAME": "app",
3901
- "KUBE_APP_NAME_PREFIX": "",
3902
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
3903
- "KUBE_NAMESPACE": "pan-test-app-prod",
3904
- "KUBE_VALUES": "env:
3905
- secret:
3906
- SECRET_KEY_BASE: '$CL_prod_app_SECRET_KEY_BASE'
3907
- POSTGRESQL_PASSWORD: '$CL_prod_app_POSTGRESQL_PASSWORD'
3908
- cloudsqlProxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
3909
- public:
3910
- ENV_SHORT: 'prod'
3911
- APP_DIR: '.'
3912
- ENV_TYPE: 'prod'
3913
- BUILD_INFO_ID: 'some-id'
3914
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3915
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3916
- ROOT_URL: 'https://my-fancy-website.com'
3917
- KUBE_NAMESPACE: 'pan-test-app-prod'
3918
- KUBE_APP_NAME: 'app'
3919
- KUBE_APP_NAME_PREFIX: ''
3920
- HOST_CANONICAL: 'app.prod.test-app.pan.panter.cloud'
3921
- RAILS_ENV: 'production'
3922
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
3923
- application:
3924
- host: 'my-fancy-website.com'
3925
- command: '/cnb/process/web'
3926
- livenessProbe:
3927
- httpGet:
3928
- path: '__health'
3929
- readinessProbe:
3930
- httpGet:
3931
- path: '__health'
3932
- startupProbe:
3933
- httpGet:
3934
- path: '__health'
3935
- worker:
3936
- enabled: true
3937
- command: 'launcher bundle exec rake jobs:work'
3938
- cloudsql:
3939
- enabled: true
3940
- dbUser: 'postgres'
3941
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-prod'
3942
- proxyCredentials: '$CL_prod_app_cloudsqlProxyCredentials'
3943
- fullDbName: 'app'
3944
- projectId: 'some-project-id'
3945
- jobs:
3946
- db-migrate:
3947
- hook: 'post-install,post-upgrade'
3948
- command: 'launcher bundle exec rake db:migrate'
3949
- ",
3950
- "POSTGRESQL_PASSWORD": "$CL_prod_app_POSTGRESQL_PASSWORD",
3951
- "RAILS_ENV": "production",
3952
- "RELEASE_NAME": "pan-test-app-prod-app",
3953
- "ROOT_URL": "https://my-fancy-website.com",
3954
- "SECRET_KEY_BASE": "$CL_prod_app_SECRET_KEY_BASE",
3955
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
3956
- "cloudsqlProxyCredentials": "$CL_prod_app_cloudsqlProxyCredentials",
3957
- },
3958
- },
3959
- "app 🛑 Stop ⚠️ | stage ": {
3960
- "environment": {
3961
- "action": "stop",
3962
- "name": "stage/app",
3963
- "url": "https://app.stage.test-app.pan.panter.cloud",
3964
- },
3965
- "image": "path/to/docker/kubernetes:the-version",
3966
- "interruptible": true,
3967
- "needs": [],
3968
- "retry": {
3969
- "max": 2,
3970
- "when": [
3971
- "runner_system_failure",
3972
- "stuck_or_timeout_failure",
3973
- ],
3974
- },
3975
- "rules": [
3976
- {
3977
- "allow_failure": true,
3978
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3979
- "when": "on_success",
3980
- },
3981
- {
3982
- "allow_failure": true,
3983
- "when": "manual",
3984
- },
3985
- ],
3986
- "script": [
3987
- "kubectl config set-cluster "kube-pan-test-app-stage-app" --server="$CL_stage_app_KUBE_URL" --certificate-authority <(echo $CL_stage_app_KUBE_CA_PEM | base64 -d) --embed-certs=true",
3988
- "kubectl config set-credentials "kube-pan-test-app-stage-app" --token="$CL_stage_app_KUBE_TOKEN"",
3989
- "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
3990
- "kubectl config use-context "kube-pan-test-app-stage-app"",
3991
- "kubernetesDelete",
3992
- "echo Disabling component in Dependency Track",
3993
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.stage.test-app.pan.panter.cloud" || true",
3994
- ],
3995
- "stage": "stop stage",
3996
- "variables": {
3997
- "APP_DIR": ".",
3998
- "BUILD_ID": "some-id",
3999
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
4000
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
4001
- "BUILD_INFO_ID": "some-id",
4002
- "COMPONENT_NAME": "app",
4003
- "ENV_SHORT": "stage",
4004
- "ENV_TYPE": "stage",
4005
- "GIT_STRATEGY": "none",
4006
- "HELM_ARGS": "",
4007
- "HELM_EXPERIMENTAL_OCI": "1",
4008
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
4009
- "HOST_CANONICAL": "app.stage.test-app.pan.panter.cloud",
4010
- "KUBERNETES_CPU_LIMIT": "1",
4011
- "KUBERNETES_CPU_REQUEST": "0.5",
4012
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
4013
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
4014
- "KUBE_APP_NAME": "app",
4015
- "KUBE_APP_NAME_PREFIX": "",
4016
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-app",
4017
- "KUBE_NAMESPACE": "pan-test-app-stage",
4018
- "KUBE_VALUES": "env:
4019
- secret:
4020
- SECRET_KEY_BASE: '$CL_stage_app_SECRET_KEY_BASE'
4021
- POSTGRESQL_PASSWORD: '$CL_stage_app_POSTGRESQL_PASSWORD'
4022
- cloudsqlProxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
4023
- public:
4024
- ENV_SHORT: 'stage'
4025
- APP_DIR: '.'
4026
- ENV_TYPE: 'stage'
4027
- BUILD_INFO_ID: 'some-id'
4028
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
4029
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
4030
- ROOT_URL: 'https://app.stage.test-app.pan.panter.cloud'
4031
- KUBE_NAMESPACE: 'pan-test-app-stage'
4032
- KUBE_APP_NAME: 'app'
4033
- KUBE_APP_NAME_PREFIX: ''
4034
- HOST_CANONICAL: 'app.stage.test-app.pan.panter.cloud'
4035
- RAILS_ENV: 'production'
4036
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]'
4037
- application:
4038
- host: 'app.stage.test-app.pan.panter.cloud'
4039
- command: '/cnb/process/web'
4040
- livenessProbe:
4041
- httpGet:
4042
- path: '__health'
4043
- readinessProbe:
4044
- httpGet:
4045
- path: '__health'
4046
- startupProbe:
4047
- httpGet:
4048
- path: '__health'
4049
- worker:
4050
- enabled: true
4051
- command: 'launcher bundle exec rake jobs:work'
4052
- cloudsql:
4053
- enabled: true
4054
- dbUser: 'postgres'
4055
- instanceConnectionName: 'some-project-id:europe-west6:pan-test-app-stage'
4056
- proxyCredentials: '$CL_stage_app_cloudsqlProxyCredentials'
4057
- fullDbName: 'app'
4058
- projectId: 'some-project-id'
4059
- jobs:
4060
- db-migrate:
4061
- hook: 'post-install,post-upgrade'
4062
- command: 'launcher bundle exec rake db:migrate'
4063
- ",
4064
- "POSTGRESQL_PASSWORD": "$CL_stage_app_POSTGRESQL_PASSWORD",
4065
- "RAILS_ENV": "production",
4066
- "RELEASE_NAME": "pan-test-app-stage-app",
4067
- "ROOT_URL": "https://app.stage.test-app.pan.panter.cloud",
4068
- "SECRET_KEY_BASE": "$CL_stage_app_SECRET_KEY_BASE",
4069
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","SECRET_KEY_BASE","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials","RAILS_ENV"]",
4070
- "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
4071
- },
4072
- },
4073
- "app 🧾 sbom | prod ": {
4074
- "allow_failure": true,
4075
- "artifacts": {
4076
- "paths": [
4077
- "__sbom.json",
4078
- ],
4079
- },
4080
- "image": "aquasec/trivy:0.38.3",
4081
- "interruptible": true,
4082
- "needs": [],
4083
- "retry": {
4084
- "max": 2,
4085
- "when": [
4086
- "runner_system_failure",
4087
- "stuck_or_timeout_failure",
4088
- ],
4089
- },
4090
- "script": [
4091
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
4092
- ],
4093
- "stage": "build",
4094
- "variables": {},
4095
- },
4096
- "app 🧾 sbom | stage ": {
4097
- "allow_failure": true,
4098
- "artifacts": {
4099
- "paths": [
4100
- "__sbom.json",
4101
- ],
4102
- },
4103
- "image": "aquasec/trivy:0.38.3",
4104
- "interruptible": true,
4105
- "needs": [],
4106
- "retry": {
4107
- "max": 2,
4108
- "when": [
4109
- "runner_system_failure",
4110
- "stuck_or_timeout_failure",
4111
- ],
4112
- },
4113
- "script": [
4114
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
4115
- ],
4116
- "stage": "build",
4117
- "variables": {},
4118
- },
4119
- },
4120
- "stages": [
4121
- "setup",
4122
- "setup dev",
4123
- "setup review",
4124
- "setup stage",
4125
- "setup prod",
4126
- "setup local",
4127
- "test",
4128
- "test dev",
4129
- "test review",
4130
- "test stage",
4131
- "test prod",
4132
- "test local",
4133
- "build",
4134
- "build dev",
4135
- "build review",
4136
- "build stage",
4137
- "build prod",
4138
- "build local",
4139
- "deploy",
4140
- "deploy dev",
4141
- "deploy review",
4142
- "deploy stage",
4143
- "deploy prod",
4144
- "deploy local",
4145
- "verify",
4146
- "verify dev",
4147
- "verify review",
4148
- "verify stage",
4149
- "verify prod",
4150
- "verify local",
4151
- "rollback",
4152
- "rollback dev",
4153
- "rollback review",
4154
- "rollback stage",
4155
- "rollback prod",
4156
- "rollback local",
4157
- "stop",
4158
- "stop dev",
4159
- "stop review",
4160
- "stop stage",
4161
- "stop prod",
4162
- "stop local",
4163
- ],
4164
- "variables": {
4165
- "FF_USE_FASTZIP": "true",
4166
- },
4167
- "workflow": {
4168
- "rules": [
4169
- {
4170
- "if": "$CI_COMMIT_TAG",
4171
- },
4172
- {
4173
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
4174
- "when": "never",
4175
- },
4176
- {
4177
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
4178
- },
4179
- {
4180
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
4181
- },
4182
- {
4183
- "if": "$CI_MERGE_REQUEST_ID",
4184
- },
4185
- ],
4186
- },
4187
- },
4188
- }
4189
- `;