@catladder/pipeline 0.0.0-more-collapse-deeb54d7 → 0.0.0-multiple-gitlab-includes-1a40efc0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (597) hide show
  1. package/README.md +17 -0
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +34 -0
  5. package/dist/bash/bashEscape.js +114 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.d.ts +0 -1
  18. package/dist/build/base/constants.js +4 -3
  19. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  20. package/dist/build/base/createAppBuildJob.js +18 -15
  21. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  22. package/dist/build/base/createArtifactsConfig.js +3 -1
  23. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  24. package/dist/build/base/createBuildJobDefinition.js +58 -0
  25. package/dist/build/base/index.d.ts +7 -4
  26. package/dist/build/base/index.js +17 -6
  27. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  28. package/dist/build/base/writeBuildInfo.js +4 -3
  29. package/dist/build/base/writeDotEnv.d.ts +3 -2
  30. package/dist/build/base/writeDotEnv.js +30 -6
  31. package/dist/build/cache/createJobCache.d.ts +7 -0
  32. package/dist/build/cache/createJobCache.js +115 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  34. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  35. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  36. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  37. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  38. package/dist/build/custom/buildJob.d.ts +2 -2
  39. package/dist/build/custom/buildJob.js +8 -67
  40. package/dist/build/custom/index.d.ts +2 -2
  41. package/dist/build/custom/index.js +3 -1
  42. package/dist/build/custom/testJob.d.ts +4 -4
  43. package/dist/build/custom/testJob.js +25 -21
  44. package/dist/build/docker.d.ts +48 -39
  45. package/dist/build/docker.js +112 -37
  46. package/dist/build/index.d.ts +14 -7
  47. package/dist/build/index.js +44 -16
  48. package/dist/build/node/buildJob.d.ts +6 -2
  49. package/dist/build/node/buildJob.js +39 -48
  50. package/dist/build/node/cache.d.ts +4 -5
  51. package/dist/build/node/cache.js +18 -23
  52. package/dist/build/node/constants.d.ts +0 -1
  53. package/dist/build/node/constants.js +5 -4
  54. package/dist/build/node/index.d.ts +4 -4
  55. package/dist/build/node/index.js +3 -1
  56. package/dist/build/node/meteor.d.ts +2 -2
  57. package/dist/build/node/meteor.js +10 -12
  58. package/dist/build/node/testJob.d.ts +3 -2
  59. package/dist/build/node/testJob.js +29 -19
  60. package/dist/build/node/yarn.d.ts +3 -2
  61. package/dist/build/node/yarn.js +13 -13
  62. package/dist/build/rails/build.d.ts +2 -2
  63. package/dist/build/rails/build.js +24 -8
  64. package/dist/build/rails/index.d.ts +2 -2
  65. package/dist/build/rails/index.js +3 -1
  66. package/dist/build/rails/test.d.ts +2 -2
  67. package/dist/build/rails/test.js +20 -12
  68. package/dist/build/sbom.d.ts +2 -2
  69. package/dist/build/sbom.js +9 -6
  70. package/dist/build/types.d.ts +152 -47
  71. package/dist/build/types.js +10 -2
  72. package/dist/catladder-gitlab.js +129 -49
  73. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  74. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  75. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  76. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  77. package/dist/config/configruedEnvs.js +3 -1
  78. package/dist/config/index.js +13 -7
  79. package/dist/config/readConfig.d.ts +2 -2
  80. package/dist/config/readConfig.js +191 -40
  81. package/dist/constants.js +5 -3
  82. package/dist/context/createAllComponentsContext.d.ts +12 -0
  83. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  84. package/dist/context/createComponentContext.d.ts +11 -0
  85. package/dist/context/createComponentContext.js +255 -0
  86. package/dist/context/createWorkspaceContext.d.ts +16 -0
  87. package/dist/context/createWorkspaceContext.js +173 -0
  88. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  89. package/dist/context/getBuildInfoVariables.js +55 -0
  90. package/dist/context/getEnvConfig.js +5 -2
  91. package/dist/context/getEnvType.js +3 -1
  92. package/dist/context/getEnvironment.d.ts +3 -3
  93. package/dist/context/getEnvironment.js +11 -12
  94. package/dist/context/getEnvironmentContext.d.ts +7 -3
  95. package/dist/context/getEnvironmentContext.js +21 -11
  96. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  97. package/dist/context/getEnvironmentVariables.js +81 -49
  98. package/dist/context/getLabels.d.ts +2 -2
  99. package/dist/context/getLabels.js +9 -7
  100. package/dist/context/getReviewSlug.d.ts +4 -0
  101. package/dist/context/getReviewSlug.js +21 -0
  102. package/dist/context/index.d.ts +2 -4
  103. package/dist/context/index.js +15 -162
  104. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  105. package/dist/context/transformJobOnlyVars.js +4 -2
  106. package/dist/context/utils/envVars.d.ts +1 -1
  107. package/dist/context/utils/envVars.js +5 -2
  108. package/dist/defaults/index.js +3 -1
  109. package/dist/deploy/base/deploy.d.ts +3 -3
  110. package/dist/deploy/base/deploy.js +38 -22
  111. package/dist/deploy/base/index.d.ts +3 -5
  112. package/dist/deploy/base/index.js +3 -1
  113. package/dist/deploy/base/rollback.d.ts +3 -3
  114. package/dist/deploy/base/rollback.js +13 -9
  115. package/dist/deploy/base/stop.d.ts +3 -3
  116. package/dist/deploy/base/stop.js +16 -11
  117. package/dist/deploy/base/types.d.ts +1 -1
  118. package/dist/deploy/base/types.js +3 -1
  119. package/dist/deploy/base/variables.d.ts +0 -1
  120. package/dist/deploy/base/variables.js +4 -3
  121. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +19 -0
  122. package/dist/deploy/cloudRun/artifactsRegistry.js +125 -0
  123. package/dist/deploy/cloudRun/cleanup.d.ts +2 -0
  124. package/dist/deploy/cloudRun/cleanup.js +53 -0
  125. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -0
  126. package/dist/deploy/cloudRun/cloudRunRevisions.js +62 -0
  127. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +7 -0
  128. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +207 -0
  129. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +4 -0
  130. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +96 -0
  131. package/dist/deploy/cloudRun/createJobs/common.d.ts +18 -0
  132. package/dist/deploy/cloudRun/createJobs/common.js +93 -0
  133. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  134. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  135. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +62 -0
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -0
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +54 -0
  139. package/dist/deploy/cloudRun/createJobs/index.d.ts +3 -0
  140. package/dist/deploy/cloudRun/createJobs/index.js +57 -0
  141. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  142. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  143. package/dist/deploy/cloudRun/index.d.ts +2 -2
  144. package/dist/deploy/cloudRun/index.js +17 -10
  145. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +3 -1
  146. package/dist/deploy/cloudRun/utils/createArgsString.js +25 -17
  147. package/dist/deploy/cloudRun/utils/database.d.ts +6 -4
  148. package/dist/deploy/cloudRun/utils/database.js +28 -15
  149. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  150. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +4 -2
  151. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -0
  152. package/dist/deploy/cloudRun/utils/getServiceName.js +10 -0
  153. package/dist/deploy/cloudRun/utils/jobName.d.ts +2 -1
  154. package/dist/deploy/cloudRun/utils/jobName.js +4 -2
  155. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.d.ts +9 -0
  156. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +18 -0
  157. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  158. package/dist/deploy/cloudSql/utils.js +7 -2
  159. package/dist/deploy/custom/deployJob.d.ts +2 -2
  160. package/dist/deploy/custom/deployJob.js +10 -9
  161. package/dist/deploy/custom/index.d.ts +2 -2
  162. package/dist/deploy/custom/index.js +3 -1
  163. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  164. package/dist/deploy/dockerTag/deployJob.js +38 -7
  165. package/dist/deploy/dockerTag/index.d.ts +2 -2
  166. package/dist/deploy/dockerTag/index.js +3 -1
  167. package/dist/deploy/index.d.ts +10 -9
  168. package/dist/deploy/index.js +13 -7
  169. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  170. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  171. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  172. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  173. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  174. package/dist/deploy/kubernetes/deployJob.js +23 -22
  175. package/dist/deploy/kubernetes/index.d.ts +2 -2
  176. package/dist/deploy/kubernetes/index.js +52 -15
  177. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  178. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  179. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  180. package/dist/deploy/kubernetes/kubeValues.js +16 -18
  181. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  182. package/dist/deploy/kubernetes/mongodb.js +14 -12
  183. package/dist/deploy/sbom.d.ts +4 -4
  184. package/dist/deploy/sbom.js +7 -4
  185. package/dist/deploy/types/base.d.ts +5 -5
  186. package/dist/deploy/types/base.js +3 -1
  187. package/dist/deploy/types/custom.d.ts +3 -7
  188. package/dist/deploy/types/custom.js +3 -1
  189. package/dist/deploy/types/dockerTag.d.ts +3 -1
  190. package/dist/deploy/types/dockerTag.js +3 -1
  191. package/dist/deploy/types/googleCloudRun.d.ts +127 -24
  192. package/dist/deploy/types/googleCloudRun.js +3 -1
  193. package/dist/deploy/types/index.d.ts +6 -6
  194. package/dist/deploy/types/index.js +14 -8
  195. package/dist/deploy/types/kubernetes.d.ts +25 -54
  196. package/dist/deploy/types/kubernetes.js +3 -1
  197. package/dist/deploy/utils.d.ts +2 -2
  198. package/dist/deploy/utils.js +5 -2
  199. package/dist/globalScriptFunctions/index.d.ts +14 -0
  200. package/dist/globalScriptFunctions/index.js +37 -0
  201. package/dist/index.d.ts +5 -2
  202. package/dist/index.js +18 -9
  203. package/dist/packageInfos.d.ts +4 -0
  204. package/dist/packageInfos.js +20 -0
  205. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  206. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  207. package/dist/pipeline/createAllJobs.d.ts +16 -6
  208. package/dist/pipeline/createAllJobs.js +99 -27
  209. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  210. package/dist/pipeline/createJobsForComponent.js +9 -149
  211. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  212. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  213. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  214. package/dist/pipeline/createMainPipeline.js +283 -0
  215. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  216. package/dist/pipeline/generatePipelineFiles.js +304 -0
  217. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  218. package/dist/pipeline/getPipelineStages.js +56 -0
  219. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  220. package/dist/pipeline/gitlab/createGitlabJobs.js +258 -74
  221. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  222. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  223. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  224. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  225. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  226. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  227. package/dist/pipeline/index.d.ts +3 -2
  228. package/dist/pipeline/index.js +16 -9
  229. package/dist/pipeline/packageManager.d.ts +3 -2
  230. package/dist/pipeline/packageManager.js +50 -24
  231. package/dist/pipeline/yarn/yarnUtils.d.ts +3 -2
  232. package/dist/pipeline/yarn/yarnUtils.js +65 -17
  233. package/dist/rules/index.d.ts +7 -2
  234. package/dist/rules/index.js +34 -16
  235. package/dist/runner/index.d.ts +1 -1
  236. package/dist/runner/index.js +3 -1
  237. package/dist/tsconfig.tsbuildinfo +1 -1
  238. package/dist/types/config.d.ts +44 -29
  239. package/dist/types/config.js +5 -2
  240. package/dist/types/context.d.ts +124 -40
  241. package/dist/types/context.js +12 -1
  242. package/dist/types/environmentContext.d.ts +15 -12
  243. package/dist/types/environmentContext.js +3 -1
  244. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  245. package/dist/types/gitlab-ci-yml.js +3 -2
  246. package/dist/types/gitlab-types.d.ts +8 -8
  247. package/dist/types/gitlab-types.js +3 -1
  248. package/dist/types/index.d.ts +1 -0
  249. package/dist/types/index.js +14 -7
  250. package/dist/types/jobDefinition.d.ts +11 -0
  251. package/dist/types/jobDefinition.js +5 -0
  252. package/dist/types/jobs.d.ts +30 -15
  253. package/dist/types/jobs.js +3 -1
  254. package/dist/types/pipeline.d.ts +3 -3
  255. package/dist/types/pipeline.js +3 -1
  256. package/dist/types/utils.d.ts +1 -1
  257. package/dist/types/utils.js +3 -1
  258. package/dist/utils/gitlab.js +7 -2
  259. package/dist/utils/index.d.ts +2 -1
  260. package/dist/utils/index.js +10 -3
  261. package/dist/utils/jsonParse.d.ts +1 -0
  262. package/dist/utils/jsonParse.js +14 -0
  263. package/dist/utils/removeUndefined.d.ts +1 -0
  264. package/dist/utils/removeUndefined.js +36 -0
  265. package/dist/utils/writeFiles.d.ts +11 -0
  266. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  267. package/dist/variables/VariableValue.d.ts +3 -0
  268. package/dist/variables/VariableValue.js +5 -0
  269. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  270. package/dist/variables/VariableValueContainingReferences.js +97 -0
  271. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  272. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  273. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  274. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  275. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  276. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  277. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  278. package/dist/variables/__tests__/variableValue.test.js +36 -0
  279. package/dist/variables/resolveAllReferences.d.ts +3 -0
  280. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -47
  281. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  282. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  283. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  284. package/dist/variables/resolveReferencesOnce.js +22 -0
  285. package/examples/.test-gen-ignore +1 -0
  286. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1418 -0
  287. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1418 -0
  288. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1418 -0
  289. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1434 -0
  290. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1418 -0
  291. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1526 -0
  292. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1418 -0
  293. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1436 -0
  294. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1418 -0
  295. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1418 -0
  296. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1418 -0
  297. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1418 -0
  298. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1490 -0
  299. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1302 -0
  300. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1418 -0
  301. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2998 -0
  302. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1733 -0
  303. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1426 -0
  304. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1285 -0
  305. package/examples/__snapshots__/custom-build-job.test.ts.snap +1174 -0
  306. package/examples/__snapshots__/custom-deploy.test.ts.snap +1168 -0
  307. package/examples/__snapshots__/custom-envs.test.ts.snap +798 -0
  308. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1182 -0
  309. package/examples/__snapshots__/git-submodule.test.ts.snap +1419 -0
  310. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1759 -0
  311. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1779 -0
  312. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3357 -0
  313. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1883 -0
  314. package/examples/__snapshots__/local-dot-env.test.ts.snap +1342 -0
  315. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1836 -0
  316. package/examples/__snapshots__/multiline-var.test.ts.snap +5679 -0
  317. package/examples/__snapshots__/native-app.test.ts.snap +2206 -0
  318. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1418 -0
  319. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1426 -0
  320. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1487 -0
  321. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1471 -0
  322. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4739 -0
  323. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1368 -0
  324. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2338 -0
  325. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2330 -0
  326. package/examples/__utils__/helpers.ts +9 -12
  327. package/examples/cloud-run-http2.test.ts +11 -0
  328. package/examples/cloud-run-http2.ts +29 -0
  329. package/examples/cloud-run-memory-limit.test.ts +11 -0
  330. package/examples/cloud-run-memory-limit.ts +10 -5
  331. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  332. package/examples/cloud-run-meteor-with-worker.ts +37 -0
  333. package/examples/cloud-run-nextjs.test.ts +11 -0
  334. package/examples/cloud-run-nextjs.ts +28 -0
  335. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  336. package/examples/cloud-run-no-cpu-throttling.ts +6 -4
  337. package/examples/cloud-run-no-service.test.ts +11 -0
  338. package/examples/cloud-run-no-service.ts +33 -0
  339. package/examples/cloud-run-non-public.test.ts +11 -0
  340. package/examples/cloud-run-non-public.ts +5 -4
  341. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  342. package/examples/cloud-run-post-stop-job.ts +42 -0
  343. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  344. package/examples/cloud-run-service-custom-vpc-connector.ts +30 -0
  345. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  346. package/examples/cloud-run-service-custom-vpc.ts +31 -0
  347. package/examples/cloud-run-service-gen2.test.ts +11 -0
  348. package/examples/cloud-run-service-gen2.ts +29 -0
  349. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  350. package/examples/cloud-run-service-increase-timout.ts +29 -0
  351. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  352. package/examples/cloud-run-service-with-volumes.ts +56 -0
  353. package/examples/cloud-run-storybook.test.ts +11 -0
  354. package/examples/cloud-run-storybook.ts +33 -0
  355. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  356. package/examples/cloud-run-with-ngnix.ts +29 -0
  357. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  358. package/examples/cloud-run-with-sql-reuse-db.ts +5 -4
  359. package/examples/cloud-run-with-sql.test.ts +11 -0
  360. package/examples/cloud-run-with-sql.ts +6 -20
  361. package/examples/cloud-run-with-worker.test.ts +11 -0
  362. package/examples/cloud-run-with-worker.ts +37 -0
  363. package/examples/custom-build-job-with-tests.test.ts +11 -0
  364. package/examples/custom-build-job-with-tests.ts +5 -4
  365. package/examples/custom-build-job.test.ts +11 -0
  366. package/examples/custom-build-job.ts +5 -4
  367. package/examples/custom-deploy.test.ts +11 -0
  368. package/examples/custom-deploy.ts +12 -4
  369. package/examples/custom-envs.test.ts +11 -0
  370. package/examples/custom-envs.ts +5 -4
  371. package/examples/custom-sbom-java.test.ts +11 -0
  372. package/examples/custom-sbom-java.ts +10 -6
  373. package/examples/git-submodule.test.ts +11 -0
  374. package/examples/git-submodule.ts +30 -0
  375. package/examples/kubernetes-application-customization.test.ts +11 -0
  376. package/examples/kubernetes-application-customization.ts +7 -4
  377. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  378. package/examples/kubernetes-with-cloud-sql.ts +7 -4
  379. package/examples/kubernetes-with-jobs.test.ts +11 -0
  380. package/examples/kubernetes-with-jobs.ts +7 -4
  381. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  382. package/examples/kubernetes-with-mongodb.ts +7 -4
  383. package/examples/local-dot-env.test.ts +11 -0
  384. package/examples/local-dot-env.ts +27 -0
  385. package/examples/meteor-kubernetes.test.ts +11 -0
  386. package/examples/meteor-kubernetes.ts +4 -5
  387. package/examples/multiline-var.test.ts +11 -0
  388. package/examples/multiline-var.ts +107 -0
  389. package/examples/native-app.test.ts +11 -0
  390. package/examples/native-app.ts +22 -17
  391. package/examples/node-build-with-custom-image.test.ts +11 -0
  392. package/examples/node-build-with-custom-image.ts +5 -4
  393. package/examples/node-build-with-docker-additions.test.ts +11 -0
  394. package/examples/node-build-with-docker-additions.ts +29 -0
  395. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  396. package/examples/rails-k8s-with-worker.test.ts +11 -0
  397. package/examples/rails-k8s-with-worker.ts +14 -11
  398. package/examples/referencing-other-vars.test.ts +11 -0
  399. package/examples/referencing-other-vars.ts +83 -0
  400. package/examples/wait-for-other-deploy.test.ts +11 -0
  401. package/examples/wait-for-other-deploy.ts +5 -4
  402. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  403. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  404. package/examples/workspace-api-www.test.ts +11 -0
  405. package/examples/workspace-api-www.ts +46 -0
  406. package/package.json +75 -26
  407. package/scripts/generate-examples-test.ts +84 -0
  408. package/scripts/generate-gitlab-ci-types.ts +2 -2
  409. package/scripts/tsconfig.json +7 -0
  410. package/src/bash/BashExpression.ts +78 -0
  411. package/src/bash/bashEscape.ts +158 -0
  412. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  413. package/src/bash/bashYaml.ts +80 -0
  414. package/src/bash/getInjectVarsScript.ts +21 -0
  415. package/src/bash/index.ts +2 -0
  416. package/src/build/artifacts/createBuildJobArtifact.ts +61 -0
  417. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  418. package/src/build/base/constants.ts +2 -2
  419. package/src/build/base/createAppBuildJob.ts +40 -24
  420. package/src/build/base/createArtifactsConfig.ts +2 -2
  421. package/src/build/base/createBuildJobDefinition.ts +37 -0
  422. package/src/build/base/index.ts +37 -8
  423. package/src/build/base/writeBuildInfo.ts +3 -3
  424. package/src/build/base/writeDotEnv.ts +25 -6
  425. package/src/build/cache/createJobCache.ts +83 -0
  426. package/src/build/cache/getAllCacheConfigsFromConfig.ts +28 -0
  427. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  428. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  429. package/src/build/custom/buildJob.ts +11 -37
  430. package/src/build/custom/index.ts +2 -2
  431. package/src/build/custom/testJob.ts +24 -22
  432. package/src/build/docker.ts +145 -49
  433. package/src/build/index.ts +42 -10
  434. package/src/build/node/buildJob.ts +65 -62
  435. package/src/build/node/cache.ts +30 -35
  436. package/src/build/node/constants.ts +2 -3
  437. package/src/build/node/index.ts +8 -4
  438. package/src/build/node/meteor.ts +16 -24
  439. package/src/build/node/testJob.ts +47 -26
  440. package/src/build/node/yarn.ts +32 -16
  441. package/src/build/rails/build.ts +21 -9
  442. package/src/build/rails/index.ts +2 -2
  443. package/src/build/rails/test.ts +22 -12
  444. package/src/build/sbom.ts +15 -10
  445. package/src/build/types.ts +190 -47
  446. package/src/catladder-gitlab.ts +7 -56
  447. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  448. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  449. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  450. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  451. package/src/config/configruedEnvs.ts +6 -6
  452. package/src/config/readConfig.ts +15 -22
  453. package/src/constants.ts +5 -2
  454. package/src/context/createAllComponentsContext.ts +31 -0
  455. package/src/context/createComponentContext.ts +134 -0
  456. package/src/context/createWorkspaceContext.ts +56 -0
  457. package/src/context/getBuildInfoVariables.ts +36 -0
  458. package/src/context/getEnvConfig.ts +3 -3
  459. package/src/context/getEnvType.ts +1 -1
  460. package/src/context/getEnvironment.ts +8 -24
  461. package/src/context/getEnvironmentContext.ts +25 -29
  462. package/src/context/getEnvironmentVariables.ts +104 -76
  463. package/src/context/getLabels.ts +5 -5
  464. package/src/context/getReviewSlug.ts +27 -0
  465. package/src/context/index.ts +1 -65
  466. package/src/context/transformJobOnlyVars.ts +6 -3
  467. package/src/context/utils/envVars.ts +5 -4
  468. package/src/deploy/base/deploy.ts +63 -47
  469. package/src/deploy/base/index.ts +11 -6
  470. package/src/deploy/base/rollback.ts +11 -16
  471. package/src/deploy/base/stop.ts +11 -15
  472. package/src/deploy/base/variables.ts +1 -2
  473. package/src/deploy/cloudRun/artifactsRegistry.ts +126 -0
  474. package/src/deploy/cloudRun/cleanup.ts +30 -0
  475. package/src/deploy/cloudRun/cloudRunRevisions.ts +65 -0
  476. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +227 -0
  477. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +86 -0
  478. package/src/deploy/cloudRun/createJobs/common.ts +59 -0
  479. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  480. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +71 -0
  481. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +34 -0
  482. package/src/deploy/cloudRun/createJobs/index.ts +51 -0
  483. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  484. package/src/deploy/cloudRun/index.ts +85 -59
  485. package/src/deploy/cloudRun/utils/createArgsString.ts +21 -13
  486. package/src/deploy/cloudRun/utils/database.ts +31 -9
  487. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +9 -11
  488. package/src/deploy/cloudRun/utils/getServiceName.ts +3 -0
  489. package/src/deploy/cloudRun/utils/jobName.ts +7 -2
  490. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +12 -0
  491. package/src/deploy/cloudSql/utils.ts +13 -10
  492. package/src/deploy/custom/deployJob.ts +15 -10
  493. package/src/deploy/custom/index.ts +2 -2
  494. package/src/deploy/dockerTag/deployJob.ts +7 -8
  495. package/src/deploy/dockerTag/index.ts +8 -7
  496. package/src/deploy/index.ts +15 -12
  497. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  498. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  499. package/src/deploy/kubernetes/deployJob.ts +30 -21
  500. package/src/deploy/kubernetes/index.ts +43 -35
  501. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  502. package/src/deploy/kubernetes/kubeValues.ts +15 -19
  503. package/src/deploy/kubernetes/mongodb.ts +15 -15
  504. package/src/deploy/sbom.ts +18 -10
  505. package/src/deploy/types/base.ts +3 -3
  506. package/src/deploy/types/custom.ts +3 -7
  507. package/src/deploy/types/dockerTag.ts +2 -0
  508. package/src/deploy/types/googleCloudRun.ts +133 -10
  509. package/src/deploy/types/index.ts +2 -2
  510. package/src/deploy/types/kubernetes.ts +5 -36
  511. package/src/deploy/utils.ts +5 -5
  512. package/src/globalScriptFunctions/index.ts +30 -0
  513. package/src/index.ts +4 -1
  514. package/src/packageInfos.ts +14 -0
  515. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  516. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  517. package/src/pipeline/createAllJobs.ts +67 -33
  518. package/src/pipeline/createJobsForComponent.ts +10 -38
  519. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  520. package/src/pipeline/createMainPipeline.ts +119 -0
  521. package/src/pipeline/generatePipelineFiles.ts +100 -0
  522. package/src/pipeline/getPipelineStages.ts +23 -0
  523. package/src/pipeline/gitlab/createGitlabJobs.ts +388 -108
  524. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  525. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  526. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  527. package/src/pipeline/index.ts +2 -1
  528. package/src/pipeline/packageManager.ts +44 -26
  529. package/src/pipeline/yarn/yarnUtils.ts +39 -10
  530. package/src/rules/index.ts +36 -9
  531. package/src/runner/index.ts +0 -1
  532. package/src/types/config.ts +43 -16
  533. package/src/types/context.ts +165 -37
  534. package/src/types/environmentContext.ts +18 -13
  535. package/src/types/gitlab-ci-yml.ts +0 -1
  536. package/src/types/gitlab-types.ts +10 -7
  537. package/src/types/index.ts +1 -0
  538. package/src/types/jobDefinition.ts +34 -0
  539. package/src/types/jobs.ts +31 -15
  540. package/src/types/utils.ts +4 -4
  541. package/src/utils/gitlab.ts +20 -3
  542. package/src/utils/index.ts +6 -3
  543. package/src/utils/jsonParse.ts +7 -0
  544. package/src/utils/removeUndefined.ts +4 -0
  545. package/src/utils/writeFiles.ts +52 -0
  546. package/src/variables/VariableValue.ts +6 -0
  547. package/src/variables/VariableValueContainingReferences.ts +89 -0
  548. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  549. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  550. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  551. package/src/variables/__tests__/variableValue.test.ts +73 -0
  552. package/src/variables/resolveAllReferences.ts +46 -0
  553. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  554. package/src/variables/resolveReferencesOnce.ts +29 -0
  555. package/bin/catladder-gitlab-dev.js +0 -3
  556. package/bin/catladder-gitlab.js +0 -3
  557. package/dist/bundles/catladder-gitlab/index.js +0 -33838
  558. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  559. package/dist/context/resolveReferences.d.ts +0 -4
  560. package/dist/context/resolveReferences.js +0 -254
  561. package/dist/deploy/cloudRun/deployJob.d.ts +0 -3
  562. package/dist/deploy/cloudRun/deployJob.js +0 -248
  563. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  564. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  565. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  566. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  567. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  568. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1780
  569. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1780
  570. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1780
  571. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3532
  572. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3543
  573. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1656
  574. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1362
  575. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1556
  576. package/examples/__snapshots__/custom-envs.ts.snap +0 -1050
  577. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1370
  578. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2468
  579. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2428
  580. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2440
  581. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4453
  582. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2632
  583. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2557
  584. package/examples/__snapshots__/native-app.ts.snap +0 -2878
  585. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1780
  586. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4189
  587. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -1922
  588. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  589. package/scripts/bundle +0 -2
  590. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  591. package/src/context/resolveReferences.ts +0 -70
  592. package/src/deploy/cloudRun/deployJob.ts +0 -301
  593. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  594. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  595. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  596. package/src/pipeline/createChildPipeline.ts +0 -45
  597. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
@@ -1,2428 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "api ↩️ Rollback ⚠️ | dev ": {
9
- "environment": {
10
- "action": "access",
11
- "name": "dev/api",
12
- "url": "https://api.dev.test-app.pan.panter.cloud",
13
- },
14
- "image": "path/to/docker/kubernetes:the-version",
15
- "interruptible": true,
16
- "needs": [],
17
- "retry": {
18
- "max": 2,
19
- "when": [
20
- "runner_system_failure",
21
- "stuck_or_timeout_failure",
22
- ],
23
- },
24
- "rules": [
25
- {
26
- "allow_failure": true,
27
- "when": "manual",
28
- },
29
- ],
30
- "script": [
31
- "kubectl config set-cluster "kube-pan-test-app-dev-api" --server="$CL_dev_api_KUBE_URL" --certificate-authority <(echo $CL_dev_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
32
- "kubectl config set-credentials "kube-pan-test-app-dev-api" --token="$CL_dev_api_KUBE_TOKEN"",
33
- "kubectl config set-context "kube-pan-test-app-dev-api" --cluster="kube-pan-test-app-dev-api" --user="kube-pan-test-app-dev-api" --namespace="pan-test-app-dev"",
34
- "kubectl config use-context "kube-pan-test-app-dev-api"",
35
- "kubernetesRollback",
36
- ],
37
- "stage": "rollback dev",
38
- "variables": {
39
- "APP_DIR": "api",
40
- "BUILD_ID": "some-id",
41
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
42
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
43
- "BUILD_INFO_ID": "some-id",
44
- "COMPONENT_NAME": "api",
45
- "ENV_SHORT": "dev",
46
- "ENV_TYPE": "dev",
47
- "GIT_STRATEGY": "none",
48
- "HELM_ARGS": "",
49
- "HELM_EXPERIMENTAL_OCI": "1",
50
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
51
- "HOST": "api.dev.test-app.pan.panter.cloud",
52
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
53
- "KUBERNETES_CPU_LIMIT": "1",
54
- "KUBERNETES_CPU_REQUEST": "0.5",
55
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
56
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
57
- "KUBE_APP_NAME": "api",
58
- "KUBE_APP_NAME_PREFIX": "",
59
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
60
- "KUBE_NAMESPACE": "pan-test-app-dev",
61
- "KUBE_VALUES": "env:
62
- secret:
63
- POSTGRESQL_PASSWORD: '$CL_dev_api_POSTGRESQL_PASSWORD'
64
- cloudsqlProxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
65
- public:
66
- ENV_SHORT: 'dev'
67
- APP_DIR: 'api'
68
- ENV_TYPE: 'dev'
69
- BUILD_INFO_ID: 'some-id'
70
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
71
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
72
- HOST: 'api.dev.test-app.pan.panter.cloud'
73
- ROOT_URL: 'https://api.dev.test-app.pan.panter.cloud'
74
- KUBE_NAMESPACE: 'pan-test-app-dev'
75
- KUBE_APP_NAME: 'api'
76
- KUBE_APP_NAME_PREFIX: ''
77
- HOST_CANONICAL: 'api.dev.test-app.pan.panter.cloud'
78
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
79
- application:
80
- host: 'api.dev.test-app.pan.panter.cloud'
81
- command: 'yarn start'
82
- livenessProbe:
83
- httpGet:
84
- path: '__health'
85
- readinessProbe:
86
- httpGet:
87
- path: '__health'
88
- startupProbe:
89
- httpGet:
90
- path: '__health'
91
- cloudsql:
92
- enabled: true
93
- dbUser: 'postgres'
94
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-dev'
95
- proxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
96
- fullDbName: 'api'
97
- ",
98
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
99
- "RELEASE_NAME": "pan-test-app-dev-api",
100
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
101
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
102
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
103
- },
104
- },
105
- "api 👮 lint": {
106
- "cache": [
107
- {
108
- "key": "api-yarn",
109
- "paths": [
110
- "api/.yarn",
111
- ],
112
- "policy": "pull-push",
113
- },
114
- {
115
- "key": "api-node-modules",
116
- "paths": [
117
- "api/node_modules",
118
- ],
119
- "policy": "pull-push",
120
- },
121
- ],
122
- "image": "path/to/docker/jobs-default:the-version",
123
- "interruptible": true,
124
- "needs": [],
125
- "retry": {
126
- "max": 2,
127
- "when": [
128
- "runner_system_failure",
129
- "stuck_or_timeout_failure",
130
- ],
131
- },
132
- "script": [
133
- "cd api",
134
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
135
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
136
- "yarn install --immutable",
137
- "yarn lint",
138
- ],
139
- "stage": "test",
140
- "variables": {
141
- "APP_PATH": "api",
142
- "KUBERNETES_CPU_LIMIT": "2",
143
- "KUBERNETES_CPU_REQUEST": "0.5",
144
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
145
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
146
- },
147
- },
148
- "api 🔨 app | dev ": {
149
- "artifacts": {
150
- "expire_in": "1 day",
151
- "paths": [
152
- "api/__build_info.json",
153
- "api/dist",
154
- "api/.next",
155
- ],
156
- "reports": {
157
- "junit": undefined,
158
- },
159
- },
160
- "cache": [
161
- {
162
- "key": "api-yarn",
163
- "paths": [
164
- "api/.yarn",
165
- ],
166
- "policy": "pull-push",
167
- },
168
- {
169
- "key": "api-node-modules",
170
- "paths": [
171
- "api/node_modules",
172
- ],
173
- "policy": "pull-push",
174
- },
175
- {
176
- "key": "api-next-cache",
177
- "paths": [
178
- "api/.next/cache/",
179
- ],
180
- "policy": "pull-push",
181
- },
182
- ],
183
- "image": "path/to/docker/jobs-default:the-version",
184
- "interruptible": true,
185
- "needs": [],
186
- "retry": {
187
- "max": 2,
188
- "when": [
189
- "runner_system_failure",
190
- "stuck_or_timeout_failure",
191
- ],
192
- },
193
- "script": [
194
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
195
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
196
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
197
- "cd api",
198
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
199
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
200
- "yarn install --immutable",
201
- "yarn build",
202
- ],
203
- "stage": "build",
204
- "variables": {
205
- "APP_DIR": "api",
206
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
207
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
208
- "BUILD_INFO_ID": "some-id",
209
- "ENV_SHORT": "dev",
210
- "ENV_TYPE": "dev",
211
- "HOST": "api.dev.test-app.pan.panter.cloud",
212
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
213
- "KUBERNETES_CPU_LIMIT": "2",
214
- "KUBERNETES_CPU_REQUEST": "0.5",
215
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
216
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
217
- "KUBE_APP_NAME": "api",
218
- "KUBE_APP_NAME_PREFIX": "",
219
- "KUBE_NAMESPACE": "pan-test-app-dev",
220
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
221
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
222
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
223
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
224
- },
225
- },
226
- "api 🔨 docker | dev ": {
227
- "cache": [
228
- {
229
- "key": "api-yarn",
230
- "paths": [
231
- "api/.yarn",
232
- ],
233
- "policy": "pull",
234
- },
235
- ],
236
- "image": "path/to/docker/docker-build:the-version",
237
- "interruptible": true,
238
- "needs": [
239
- "api 🔨 app | dev ",
240
- ],
241
- "retry": {
242
- "max": 2,
243
- "when": [
244
- "runner_system_failure",
245
- "stuck_or_timeout_failure",
246
- ],
247
- },
248
- "script": [
249
- "ensureNodeDockerfile",
250
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
251
- "docker version",
252
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
253
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
254
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
255
- "docker push $DOCKER_CACHE_IMAGE",
256
- ],
257
- "services": [
258
- {
259
- "command": [
260
- "--tls=false",
261
- ],
262
- "name": "docker:20-dind",
263
- },
264
- ],
265
- "stage": "build",
266
- "variables": {
267
- "APP_DIR": "api",
268
- "DOCKERFILE_ADDITIONS": undefined,
269
- "DOCKERFILE_ADDITIONS_END": undefined,
270
- "DOCKER_BUILDKIT": "1",
271
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
272
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
273
- RUN yarn plugin import workspace-tools
274
- RUN yarn workspaces focus --production && yarn rebuild",
275
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
276
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
277
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
278
- COPY --chown=node:node .yarn /app/.yarn",
279
- "DOCKER_DIR": ".",
280
- "DOCKER_DRIVER": "overlay2",
281
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
282
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
283
- "DOCKER_IMAGE_NAME": "dev/api",
284
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
285
- "DOCKER_REGISTRY": "$CI_REGISTRY",
286
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
287
- "DOCKER_TLS_CERTDIR": "",
288
- "KUBERNETES_CPU_LIMIT": "1",
289
- "KUBERNETES_CPU_REQUEST": "0.5",
290
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
291
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
292
- },
293
- },
294
- "api 🚀 Deploy | dev ": {
295
- "allow_failure": false,
296
- "environment": {
297
- "auto_stop_in": "4 weeks",
298
- "name": "dev/api",
299
- "on_stop": "api 🛑 Stop ⚠️ | dev ",
300
- "url": "https://api.dev.test-app.pan.panter.cloud",
301
- },
302
- "image": "path/to/docker/kubernetes:the-version",
303
- "interruptible": true,
304
- "needs": [
305
- {
306
- "artifacts": false,
307
- "job": "api 👮 lint",
308
- },
309
- {
310
- "artifacts": false,
311
- "job": "api 🔨 app | dev ",
312
- },
313
- {
314
- "artifacts": false,
315
- "job": "api 🔨 docker | dev ",
316
- },
317
- {
318
- "artifacts": false,
319
- "job": "api 🧪 test",
320
- },
321
- {
322
- "artifacts": true,
323
- "job": "api 🧾 sbom | dev ",
324
- },
325
- {
326
- "artifacts": false,
327
- "job": "api 🛡 audit",
328
- },
329
- ],
330
- "retry": {
331
- "max": 2,
332
- "when": [
333
- "runner_system_failure",
334
- "stuck_or_timeout_failure",
335
- ],
336
- },
337
- "rules": [
338
- {
339
- "when": "on_success",
340
- },
341
- ],
342
- "script": [
343
- "kubectl config set-cluster "kube-pan-test-app-dev-api" --server="$CL_dev_api_KUBE_URL" --certificate-authority <(echo $CL_dev_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
344
- "kubectl config set-credentials "kube-pan-test-app-dev-api" --token="$CL_dev_api_KUBE_TOKEN"",
345
- "kubectl config set-context "kube-pan-test-app-dev-api" --cluster="kube-pan-test-app-dev-api" --user="kube-pan-test-app-dev-api" --namespace="pan-test-app-dev"",
346
- "kubectl config use-context "kube-pan-test-app-dev-api"",
347
- "kubernetesCreateSecret",
348
- "kubernetesDeploy",
349
- "echo Uploading SBOM to Dependency Track",
350
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.dev.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
351
- "echo deployment successful 😻",
352
- ],
353
- "stage": "deploy dev",
354
- "variables": {
355
- "APP_DIR": "api",
356
- "BUILD_ID": "some-id",
357
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
358
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
359
- "BUILD_INFO_ID": "some-id",
360
- "COMPONENT_NAME": "api",
361
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
362
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
363
- "DOCKER_IMAGE_NAME": "dev/api",
364
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
365
- "DOCKER_REGISTRY": "$CI_REGISTRY",
366
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
367
- "ENV_SHORT": "dev",
368
- "ENV_TYPE": "dev",
369
- "HELM_ARGS": "",
370
- "HELM_EXPERIMENTAL_OCI": "1",
371
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
372
- "HOST": "api.dev.test-app.pan.panter.cloud",
373
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
374
- "KUBERNETES_CPU_LIMIT": "1",
375
- "KUBERNETES_CPU_REQUEST": "0.5",
376
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
377
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
378
- "KUBE_APP_NAME": "api",
379
- "KUBE_APP_NAME_PREFIX": "",
380
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
381
- "KUBE_NAMESPACE": "pan-test-app-dev",
382
- "KUBE_VALUES": "env:
383
- secret:
384
- POSTGRESQL_PASSWORD: '$CL_dev_api_POSTGRESQL_PASSWORD'
385
- cloudsqlProxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
386
- public:
387
- ENV_SHORT: 'dev'
388
- APP_DIR: 'api'
389
- ENV_TYPE: 'dev'
390
- BUILD_INFO_ID: 'some-id'
391
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
392
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
393
- HOST: 'api.dev.test-app.pan.panter.cloud'
394
- ROOT_URL: 'https://api.dev.test-app.pan.panter.cloud'
395
- KUBE_NAMESPACE: 'pan-test-app-dev'
396
- KUBE_APP_NAME: 'api'
397
- KUBE_APP_NAME_PREFIX: ''
398
- HOST_CANONICAL: 'api.dev.test-app.pan.panter.cloud'
399
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
400
- application:
401
- host: 'api.dev.test-app.pan.panter.cloud'
402
- command: 'yarn start'
403
- livenessProbe:
404
- httpGet:
405
- path: '__health'
406
- readinessProbe:
407
- httpGet:
408
- path: '__health'
409
- startupProbe:
410
- httpGet:
411
- path: '__health'
412
- cloudsql:
413
- enabled: true
414
- dbUser: 'postgres'
415
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-dev'
416
- proxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
417
- fullDbName: 'api'
418
- ",
419
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
420
- "RELEASE_NAME": "pan-test-app-dev-api",
421
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
422
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
423
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
424
- },
425
- },
426
- "api 🛑 Stop ⚠️ | dev ": {
427
- "environment": {
428
- "action": "stop",
429
- "name": "dev/api",
430
- "url": "https://api.dev.test-app.pan.panter.cloud",
431
- },
432
- "image": "path/to/docker/kubernetes:the-version",
433
- "interruptible": true,
434
- "needs": [],
435
- "retry": {
436
- "max": 2,
437
- "when": [
438
- "runner_system_failure",
439
- "stuck_or_timeout_failure",
440
- ],
441
- },
442
- "rules": [
443
- {
444
- "allow_failure": true,
445
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
446
- "when": "on_success",
447
- },
448
- {
449
- "allow_failure": true,
450
- "when": "manual",
451
- },
452
- ],
453
- "script": [
454
- "kubectl config set-cluster "kube-pan-test-app-dev-api" --server="$CL_dev_api_KUBE_URL" --certificate-authority <(echo $CL_dev_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
455
- "kubectl config set-credentials "kube-pan-test-app-dev-api" --token="$CL_dev_api_KUBE_TOKEN"",
456
- "kubectl config set-context "kube-pan-test-app-dev-api" --cluster="kube-pan-test-app-dev-api" --user="kube-pan-test-app-dev-api" --namespace="pan-test-app-dev"",
457
- "kubectl config use-context "kube-pan-test-app-dev-api"",
458
- "kubernetesDelete",
459
- "echo Disabling component in Dependency Track",
460
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.dev.test-app.pan.panter.cloud" || true",
461
- ],
462
- "stage": "stop dev",
463
- "variables": {
464
- "APP_DIR": "api",
465
- "BUILD_ID": "some-id",
466
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
467
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
468
- "BUILD_INFO_ID": "some-id",
469
- "COMPONENT_NAME": "api",
470
- "ENV_SHORT": "dev",
471
- "ENV_TYPE": "dev",
472
- "GIT_STRATEGY": "none",
473
- "HELM_ARGS": "",
474
- "HELM_EXPERIMENTAL_OCI": "1",
475
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
476
- "HOST": "api.dev.test-app.pan.panter.cloud",
477
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
478
- "KUBERNETES_CPU_LIMIT": "1",
479
- "KUBERNETES_CPU_REQUEST": "0.5",
480
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
481
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
482
- "KUBE_APP_NAME": "api",
483
- "KUBE_APP_NAME_PREFIX": "",
484
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
485
- "KUBE_NAMESPACE": "pan-test-app-dev",
486
- "KUBE_VALUES": "env:
487
- secret:
488
- POSTGRESQL_PASSWORD: '$CL_dev_api_POSTGRESQL_PASSWORD'
489
- cloudsqlProxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
490
- public:
491
- ENV_SHORT: 'dev'
492
- APP_DIR: 'api'
493
- ENV_TYPE: 'dev'
494
- BUILD_INFO_ID: 'some-id'
495
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
496
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
497
- HOST: 'api.dev.test-app.pan.panter.cloud'
498
- ROOT_URL: 'https://api.dev.test-app.pan.panter.cloud'
499
- KUBE_NAMESPACE: 'pan-test-app-dev'
500
- KUBE_APP_NAME: 'api'
501
- KUBE_APP_NAME_PREFIX: ''
502
- HOST_CANONICAL: 'api.dev.test-app.pan.panter.cloud'
503
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
504
- application:
505
- host: 'api.dev.test-app.pan.panter.cloud'
506
- command: 'yarn start'
507
- livenessProbe:
508
- httpGet:
509
- path: '__health'
510
- readinessProbe:
511
- httpGet:
512
- path: '__health'
513
- startupProbe:
514
- httpGet:
515
- path: '__health'
516
- cloudsql:
517
- enabled: true
518
- dbUser: 'postgres'
519
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-dev'
520
- proxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
521
- fullDbName: 'api'
522
- ",
523
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
524
- "RELEASE_NAME": "pan-test-app-dev-api",
525
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
526
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
527
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
528
- },
529
- },
530
- "api 🛡 audit": {
531
- "allow_failure": true,
532
- "image": "path/to/docker/jobs-default:the-version",
533
- "interruptible": true,
534
- "needs": [],
535
- "retry": {
536
- "max": 2,
537
- "when": [
538
- "runner_system_failure",
539
- "stuck_or_timeout_failure",
540
- ],
541
- },
542
- "script": [
543
- "cd api",
544
- "yarn npm audit --environment production",
545
- ],
546
- "stage": "test",
547
- "variables": {
548
- "APP_PATH": "api",
549
- "KUBERNETES_CPU_LIMIT": "2",
550
- "KUBERNETES_CPU_REQUEST": "0.5",
551
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
552
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
553
- },
554
- },
555
- "api 🧪 test": {
556
- "cache": [
557
- {
558
- "key": "api-yarn",
559
- "paths": [
560
- "api/.yarn",
561
- ],
562
- "policy": "pull-push",
563
- },
564
- {
565
- "key": "api-node-modules",
566
- "paths": [
567
- "api/node_modules",
568
- ],
569
- "policy": "pull-push",
570
- },
571
- ],
572
- "image": "path/to/docker/jobs-testing-chrome:the-version",
573
- "interruptible": true,
574
- "needs": [],
575
- "retry": {
576
- "max": 2,
577
- "when": [
578
- "runner_system_failure",
579
- "stuck_or_timeout_failure",
580
- ],
581
- },
582
- "script": [
583
- "cd api",
584
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
585
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
586
- "yarn install --immutable",
587
- "yarn test",
588
- ],
589
- "stage": "test",
590
- "variables": {
591
- "APP_PATH": "api",
592
- "KUBERNETES_CPU_LIMIT": "2",
593
- "KUBERNETES_CPU_REQUEST": "0.5",
594
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
595
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
596
- },
597
- },
598
- "api 🧾 sbom | dev ": {
599
- "allow_failure": true,
600
- "artifacts": {
601
- "paths": [
602
- "__sbom.json",
603
- ],
604
- },
605
- "image": "aquasec/trivy:0.38.3",
606
- "interruptible": true,
607
- "needs": [],
608
- "retry": {
609
- "max": 2,
610
- "when": [
611
- "runner_system_failure",
612
- "stuck_or_timeout_failure",
613
- ],
614
- },
615
- "script": [
616
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
617
- ],
618
- "stage": "build",
619
- "variables": {},
620
- },
621
- },
622
- "stages": [
623
- "setup",
624
- "setup dev",
625
- "setup review",
626
- "setup stage",
627
- "setup prod",
628
- "setup local",
629
- "test",
630
- "test dev",
631
- "test review",
632
- "test stage",
633
- "test prod",
634
- "test local",
635
- "build",
636
- "build dev",
637
- "build review",
638
- "build stage",
639
- "build prod",
640
- "build local",
641
- "deploy",
642
- "deploy dev",
643
- "deploy review",
644
- "deploy stage",
645
- "deploy prod",
646
- "deploy local",
647
- "verify",
648
- "verify dev",
649
- "verify review",
650
- "verify stage",
651
- "verify prod",
652
- "verify local",
653
- "rollback",
654
- "rollback dev",
655
- "rollback review",
656
- "rollback stage",
657
- "rollback prod",
658
- "rollback local",
659
- "stop",
660
- "stop dev",
661
- "stop review",
662
- "stop stage",
663
- "stop prod",
664
- "stop local",
665
- ],
666
- "variables": {
667
- "FF_USE_FASTZIP": "true",
668
- },
669
- "workflow": {
670
- "rules": [
671
- {
672
- "if": "$CI_COMMIT_TAG",
673
- },
674
- {
675
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
676
- "when": "never",
677
- },
678
- {
679
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
680
- },
681
- {
682
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
683
- },
684
- {
685
- "if": "$CI_MERGE_REQUEST_ID",
686
- },
687
- ],
688
- },
689
- },
690
- "mr": {
691
- "image": "path/to/docker/jobs-default:the-version",
692
- "jobs": {
693
- "api ↩️ Rollback ⚠️ | review ": {
694
- "environment": {
695
- "action": "access",
696
- "name": "review/some-commit/api",
697
- "url": "https://api.mr1234.review.test-app.pan.panter.cloud",
698
- },
699
- "image": "path/to/docker/kubernetes:the-version",
700
- "interruptible": true,
701
- "needs": [],
702
- "retry": {
703
- "max": 2,
704
- "when": [
705
- "runner_system_failure",
706
- "stuck_or_timeout_failure",
707
- ],
708
- },
709
- "rules": [
710
- {
711
- "allow_failure": true,
712
- "when": "manual",
713
- },
714
- ],
715
- "script": [
716
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-api" --server="$CL_review_api_KUBE_URL" --certificate-authority <(echo $CL_review_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
717
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-api" --token="$CL_review_api_KUBE_TOKEN"",
718
- "kubectl config set-context "kube-pan-test-app-review-mr1234-api" --cluster="kube-pan-test-app-review-mr1234-api" --user="kube-pan-test-app-review-mr1234-api" --namespace="pan-test-app-review"",
719
- "kubectl config use-context "kube-pan-test-app-review-mr1234-api"",
720
- "kubernetesRollback",
721
- ],
722
- "stage": "rollback review",
723
- "variables": {
724
- "APP_DIR": "api",
725
- "BUILD_ID": "some-id",
726
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
727
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
728
- "BUILD_INFO_ID": "some-id",
729
- "COMPONENT_NAME": "api",
730
- "ENV_SHORT": "review",
731
- "ENV_TYPE": "review",
732
- "GIT_STRATEGY": "none",
733
- "HELM_ARGS": "",
734
- "HELM_EXPERIMENTAL_OCI": "1",
735
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
736
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
737
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
738
- "KUBERNETES_CPU_LIMIT": "1",
739
- "KUBERNETES_CPU_REQUEST": "0.5",
740
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
741
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
742
- "KUBE_APP_NAME": "mr1234-api",
743
- "KUBE_APP_NAME_PREFIX": "mr1234-",
744
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
745
- "KUBE_NAMESPACE": "pan-test-app-review",
746
- "KUBE_VALUES": "env:
747
- secret:
748
- POSTGRESQL_PASSWORD: '$CL_review_api_POSTGRESQL_PASSWORD'
749
- cloudsqlProxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
750
- public:
751
- ENV_SHORT: 'review'
752
- APP_DIR: 'api'
753
- ENV_TYPE: 'review'
754
- BUILD_INFO_ID: 'some-id'
755
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
756
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
757
- HOST: 'api.mr1234.review.test-app.pan.panter.cloud'
758
- ROOT_URL: 'https://api.mr1234.review.test-app.pan.panter.cloud'
759
- KUBE_NAMESPACE: 'pan-test-app-review'
760
- KUBE_APP_NAME: 'mr1234-api'
761
- KUBE_APP_NAME_PREFIX: 'mr1234-'
762
- HOST_CANONICAL: 'api.mr1234.review.test-app.pan.panter.cloud'
763
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
764
- application:
765
- host: 'api.mr1234.review.test-app.pan.panter.cloud'
766
- command: 'yarn start'
767
- livenessProbe:
768
- httpGet:
769
- path: '__health'
770
- readinessProbe:
771
- httpGet:
772
- path: '__health'
773
- startupProbe:
774
- httpGet:
775
- path: '__health'
776
- cloudsql:
777
- enabled: true
778
- dbUser: 'postgres'
779
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-review'
780
- proxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
781
- fullDbName: 'mr1234-api'
782
- ",
783
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
784
- "RELEASE_NAME": "pan-test-app-review-mr1234-api",
785
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
786
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
787
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
788
- },
789
- },
790
- "api 👮 lint": {
791
- "cache": [
792
- {
793
- "key": "api-yarn",
794
- "paths": [
795
- "api/.yarn",
796
- ],
797
- "policy": "pull-push",
798
- },
799
- {
800
- "key": "api-node-modules",
801
- "paths": [
802
- "api/node_modules",
803
- ],
804
- "policy": "pull-push",
805
- },
806
- ],
807
- "image": "path/to/docker/jobs-default:the-version",
808
- "interruptible": true,
809
- "needs": [],
810
- "retry": {
811
- "max": 2,
812
- "when": [
813
- "runner_system_failure",
814
- "stuck_or_timeout_failure",
815
- ],
816
- },
817
- "script": [
818
- "cd api",
819
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
820
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
821
- "yarn install --immutable",
822
- "yarn lint",
823
- ],
824
- "stage": "test",
825
- "variables": {
826
- "APP_PATH": "api",
827
- "KUBERNETES_CPU_LIMIT": "2",
828
- "KUBERNETES_CPU_REQUEST": "0.5",
829
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
830
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
831
- },
832
- },
833
- "api 🔨 app | review ": {
834
- "artifacts": {
835
- "expire_in": "1 day",
836
- "paths": [
837
- "api/__build_info.json",
838
- "api/dist",
839
- "api/.next",
840
- ],
841
- "reports": {
842
- "junit": undefined,
843
- },
844
- },
845
- "cache": [
846
- {
847
- "key": "api-yarn",
848
- "paths": [
849
- "api/.yarn",
850
- ],
851
- "policy": "pull-push",
852
- },
853
- {
854
- "key": "api-node-modules",
855
- "paths": [
856
- "api/node_modules",
857
- ],
858
- "policy": "pull-push",
859
- },
860
- {
861
- "key": "api-next-cache",
862
- "paths": [
863
- "api/.next/cache/",
864
- ],
865
- "policy": "pull-push",
866
- },
867
- ],
868
- "image": "path/to/docker/jobs-default:the-version",
869
- "interruptible": true,
870
- "needs": [],
871
- "retry": {
872
- "max": 2,
873
- "when": [
874
- "runner_system_failure",
875
- "stuck_or_timeout_failure",
876
- ],
877
- },
878
- "script": [
879
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
880
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
881
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
882
- "cd api",
883
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
884
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
885
- "yarn install --immutable",
886
- "yarn build",
887
- ],
888
- "stage": "build",
889
- "variables": {
890
- "APP_DIR": "api",
891
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
892
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
893
- "BUILD_INFO_ID": "some-id",
894
- "ENV_SHORT": "review",
895
- "ENV_TYPE": "review",
896
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
897
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
898
- "KUBERNETES_CPU_LIMIT": "2",
899
- "KUBERNETES_CPU_REQUEST": "0.5",
900
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
901
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
902
- "KUBE_APP_NAME": "mr1234-api",
903
- "KUBE_APP_NAME_PREFIX": "mr1234-",
904
- "KUBE_NAMESPACE": "pan-test-app-review",
905
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
906
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
907
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
908
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
909
- },
910
- },
911
- "api 🔨 docker | review ": {
912
- "cache": [
913
- {
914
- "key": "api-yarn",
915
- "paths": [
916
- "api/.yarn",
917
- ],
918
- "policy": "pull",
919
- },
920
- ],
921
- "image": "path/to/docker/docker-build:the-version",
922
- "interruptible": true,
923
- "needs": [
924
- "api 🔨 app | review ",
925
- ],
926
- "retry": {
927
- "max": 2,
928
- "when": [
929
- "runner_system_failure",
930
- "stuck_or_timeout_failure",
931
- ],
932
- },
933
- "script": [
934
- "ensureNodeDockerfile",
935
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
936
- "docker version",
937
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
938
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
939
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
940
- "docker push $DOCKER_CACHE_IMAGE",
941
- ],
942
- "services": [
943
- {
944
- "command": [
945
- "--tls=false",
946
- ],
947
- "name": "docker:20-dind",
948
- },
949
- ],
950
- "stage": "build",
951
- "variables": {
952
- "APP_DIR": "api",
953
- "DOCKERFILE_ADDITIONS": undefined,
954
- "DOCKERFILE_ADDITIONS_END": undefined,
955
- "DOCKER_BUILDKIT": "1",
956
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
957
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
958
- RUN yarn plugin import workspace-tools
959
- RUN yarn workspaces focus --production && yarn rebuild",
960
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
961
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
962
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
963
- COPY --chown=node:node .yarn /app/.yarn",
964
- "DOCKER_DIR": ".",
965
- "DOCKER_DRIVER": "overlay2",
966
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
967
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
968
- "DOCKER_IMAGE_NAME": "review/api",
969
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
970
- "DOCKER_REGISTRY": "$CI_REGISTRY",
971
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
972
- "DOCKER_TLS_CERTDIR": "",
973
- "KUBERNETES_CPU_LIMIT": "1",
974
- "KUBERNETES_CPU_REQUEST": "0.5",
975
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
976
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
977
- },
978
- },
979
- "api 🚀 Deploy | review ": {
980
- "allow_failure": false,
981
- "environment": {
982
- "auto_stop_in": "2 week",
983
- "name": "review/some-commit/api",
984
- "on_stop": "api 🛑 Stop ⚠️ | review ",
985
- "url": "https://api.mr1234.review.test-app.pan.panter.cloud",
986
- },
987
- "image": "path/to/docker/kubernetes:the-version",
988
- "interruptible": true,
989
- "needs": [
990
- {
991
- "artifacts": false,
992
- "job": "api 👮 lint",
993
- },
994
- {
995
- "artifacts": false,
996
- "job": "api 🔨 app | review ",
997
- },
998
- {
999
- "artifacts": false,
1000
- "job": "api 🔨 docker | review ",
1001
- },
1002
- {
1003
- "artifacts": false,
1004
- "job": "api 🧪 test",
1005
- },
1006
- {
1007
- "artifacts": true,
1008
- "job": "api 🧾 sbom | review ",
1009
- },
1010
- {
1011
- "artifacts": false,
1012
- "job": "api 🛡 audit",
1013
- },
1014
- ],
1015
- "retry": {
1016
- "max": 2,
1017
- "when": [
1018
- "runner_system_failure",
1019
- "stuck_or_timeout_failure",
1020
- ],
1021
- },
1022
- "rules": [
1023
- {
1024
- "when": "on_success",
1025
- },
1026
- ],
1027
- "script": [
1028
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-api" --server="$CL_review_api_KUBE_URL" --certificate-authority <(echo $CL_review_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1029
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-api" --token="$CL_review_api_KUBE_TOKEN"",
1030
- "kubectl config set-context "kube-pan-test-app-review-mr1234-api" --cluster="kube-pan-test-app-review-mr1234-api" --user="kube-pan-test-app-review-mr1234-api" --namespace="pan-test-app-review"",
1031
- "kubectl config use-context "kube-pan-test-app-review-mr1234-api"",
1032
- "kubernetesCreateSecret",
1033
- "kubernetesDeploy",
1034
- "echo Uploading SBOM to Dependency Track",
1035
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.mr1234.review.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
1036
- "echo deployment successful 😻",
1037
- ],
1038
- "stage": "deploy review",
1039
- "variables": {
1040
- "APP_DIR": "api",
1041
- "BUILD_ID": "some-id",
1042
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1043
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1044
- "BUILD_INFO_ID": "some-id",
1045
- "COMPONENT_NAME": "api",
1046
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1047
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1048
- "DOCKER_IMAGE_NAME": "review/api",
1049
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1050
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1051
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1052
- "ENV_SHORT": "review",
1053
- "ENV_TYPE": "review",
1054
- "HELM_ARGS": "",
1055
- "HELM_EXPERIMENTAL_OCI": "1",
1056
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1057
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
1058
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
1059
- "KUBERNETES_CPU_LIMIT": "1",
1060
- "KUBERNETES_CPU_REQUEST": "0.5",
1061
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1062
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1063
- "KUBE_APP_NAME": "mr1234-api",
1064
- "KUBE_APP_NAME_PREFIX": "mr1234-",
1065
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1066
- "KUBE_NAMESPACE": "pan-test-app-review",
1067
- "KUBE_VALUES": "env:
1068
- secret:
1069
- POSTGRESQL_PASSWORD: '$CL_review_api_POSTGRESQL_PASSWORD'
1070
- cloudsqlProxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1071
- public:
1072
- ENV_SHORT: 'review'
1073
- APP_DIR: 'api'
1074
- ENV_TYPE: 'review'
1075
- BUILD_INFO_ID: 'some-id'
1076
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1077
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1078
- HOST: 'api.mr1234.review.test-app.pan.panter.cloud'
1079
- ROOT_URL: 'https://api.mr1234.review.test-app.pan.panter.cloud'
1080
- KUBE_NAMESPACE: 'pan-test-app-review'
1081
- KUBE_APP_NAME: 'mr1234-api'
1082
- KUBE_APP_NAME_PREFIX: 'mr1234-'
1083
- HOST_CANONICAL: 'api.mr1234.review.test-app.pan.panter.cloud'
1084
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1085
- application:
1086
- host: 'api.mr1234.review.test-app.pan.panter.cloud'
1087
- command: 'yarn start'
1088
- livenessProbe:
1089
- httpGet:
1090
- path: '__health'
1091
- readinessProbe:
1092
- httpGet:
1093
- path: '__health'
1094
- startupProbe:
1095
- httpGet:
1096
- path: '__health'
1097
- cloudsql:
1098
- enabled: true
1099
- dbUser: 'postgres'
1100
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-review'
1101
- proxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1102
- fullDbName: 'mr1234-api'
1103
- ",
1104
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
1105
- "RELEASE_NAME": "pan-test-app-review-mr1234-api",
1106
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
1107
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1108
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
1109
- },
1110
- },
1111
- "api 🛑 Stop ⚠️ | review ": {
1112
- "environment": {
1113
- "action": "stop",
1114
- "name": "review/some-commit/api",
1115
- "url": "https://api.mr1234.review.test-app.pan.panter.cloud",
1116
- },
1117
- "image": "path/to/docker/kubernetes:the-version",
1118
- "interruptible": true,
1119
- "needs": [],
1120
- "retry": {
1121
- "max": 2,
1122
- "when": [
1123
- "runner_system_failure",
1124
- "stuck_or_timeout_failure",
1125
- ],
1126
- },
1127
- "rules": [
1128
- {
1129
- "allow_failure": true,
1130
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1131
- "when": "on_success",
1132
- },
1133
- {
1134
- "allow_failure": true,
1135
- "when": "manual",
1136
- },
1137
- ],
1138
- "script": [
1139
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-api" --server="$CL_review_api_KUBE_URL" --certificate-authority <(echo $CL_review_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1140
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-api" --token="$CL_review_api_KUBE_TOKEN"",
1141
- "kubectl config set-context "kube-pan-test-app-review-mr1234-api" --cluster="kube-pan-test-app-review-mr1234-api" --user="kube-pan-test-app-review-mr1234-api" --namespace="pan-test-app-review"",
1142
- "kubectl config use-context "kube-pan-test-app-review-mr1234-api"",
1143
- "kubernetesDelete",
1144
- "echo Disabling component in Dependency Track",
1145
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.mr1234.review.test-app.pan.panter.cloud" || true",
1146
- ],
1147
- "stage": "stop review",
1148
- "variables": {
1149
- "APP_DIR": "api",
1150
- "BUILD_ID": "some-id",
1151
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1152
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1153
- "BUILD_INFO_ID": "some-id",
1154
- "COMPONENT_NAME": "api",
1155
- "ENV_SHORT": "review",
1156
- "ENV_TYPE": "review",
1157
- "GIT_STRATEGY": "none",
1158
- "HELM_ARGS": "",
1159
- "HELM_EXPERIMENTAL_OCI": "1",
1160
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1161
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
1162
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
1163
- "KUBERNETES_CPU_LIMIT": "1",
1164
- "KUBERNETES_CPU_REQUEST": "0.5",
1165
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1166
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1167
- "KUBE_APP_NAME": "mr1234-api",
1168
- "KUBE_APP_NAME_PREFIX": "mr1234-",
1169
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1170
- "KUBE_NAMESPACE": "pan-test-app-review",
1171
- "KUBE_VALUES": "env:
1172
- secret:
1173
- POSTGRESQL_PASSWORD: '$CL_review_api_POSTGRESQL_PASSWORD'
1174
- cloudsqlProxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1175
- public:
1176
- ENV_SHORT: 'review'
1177
- APP_DIR: 'api'
1178
- ENV_TYPE: 'review'
1179
- BUILD_INFO_ID: 'some-id'
1180
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1181
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1182
- HOST: 'api.mr1234.review.test-app.pan.panter.cloud'
1183
- ROOT_URL: 'https://api.mr1234.review.test-app.pan.panter.cloud'
1184
- KUBE_NAMESPACE: 'pan-test-app-review'
1185
- KUBE_APP_NAME: 'mr1234-api'
1186
- KUBE_APP_NAME_PREFIX: 'mr1234-'
1187
- HOST_CANONICAL: 'api.mr1234.review.test-app.pan.panter.cloud'
1188
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1189
- application:
1190
- host: 'api.mr1234.review.test-app.pan.panter.cloud'
1191
- command: 'yarn start'
1192
- livenessProbe:
1193
- httpGet:
1194
- path: '__health'
1195
- readinessProbe:
1196
- httpGet:
1197
- path: '__health'
1198
- startupProbe:
1199
- httpGet:
1200
- path: '__health'
1201
- cloudsql:
1202
- enabled: true
1203
- dbUser: 'postgres'
1204
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-review'
1205
- proxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1206
- fullDbName: 'mr1234-api'
1207
- ",
1208
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
1209
- "RELEASE_NAME": "pan-test-app-review-mr1234-api",
1210
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
1211
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1212
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
1213
- },
1214
- },
1215
- "api 🛡 audit": {
1216
- "allow_failure": true,
1217
- "image": "path/to/docker/jobs-default:the-version",
1218
- "interruptible": true,
1219
- "needs": [],
1220
- "retry": {
1221
- "max": 2,
1222
- "when": [
1223
- "runner_system_failure",
1224
- "stuck_or_timeout_failure",
1225
- ],
1226
- },
1227
- "script": [
1228
- "cd api",
1229
- "yarn npm audit --environment production",
1230
- ],
1231
- "stage": "test",
1232
- "variables": {
1233
- "APP_PATH": "api",
1234
- "KUBERNETES_CPU_LIMIT": "2",
1235
- "KUBERNETES_CPU_REQUEST": "0.5",
1236
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1237
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1238
- },
1239
- },
1240
- "api 🧪 test": {
1241
- "cache": [
1242
- {
1243
- "key": "api-yarn",
1244
- "paths": [
1245
- "api/.yarn",
1246
- ],
1247
- "policy": "pull-push",
1248
- },
1249
- {
1250
- "key": "api-node-modules",
1251
- "paths": [
1252
- "api/node_modules",
1253
- ],
1254
- "policy": "pull-push",
1255
- },
1256
- ],
1257
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1258
- "interruptible": true,
1259
- "needs": [],
1260
- "retry": {
1261
- "max": 2,
1262
- "when": [
1263
- "runner_system_failure",
1264
- "stuck_or_timeout_failure",
1265
- ],
1266
- },
1267
- "script": [
1268
- "cd api",
1269
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1270
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1271
- "yarn install --immutable",
1272
- "yarn test",
1273
- ],
1274
- "stage": "test",
1275
- "variables": {
1276
- "APP_PATH": "api",
1277
- "KUBERNETES_CPU_LIMIT": "2",
1278
- "KUBERNETES_CPU_REQUEST": "0.5",
1279
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1280
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1281
- },
1282
- },
1283
- "api 🧾 sbom | review ": {
1284
- "allow_failure": true,
1285
- "artifacts": {
1286
- "paths": [
1287
- "__sbom.json",
1288
- ],
1289
- },
1290
- "image": "aquasec/trivy:0.38.3",
1291
- "interruptible": true,
1292
- "needs": [],
1293
- "retry": {
1294
- "max": 2,
1295
- "when": [
1296
- "runner_system_failure",
1297
- "stuck_or_timeout_failure",
1298
- ],
1299
- },
1300
- "script": [
1301
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
1302
- ],
1303
- "stage": "build",
1304
- "variables": {},
1305
- },
1306
- },
1307
- "stages": [
1308
- "setup",
1309
- "setup dev",
1310
- "setup review",
1311
- "setup stage",
1312
- "setup prod",
1313
- "setup local",
1314
- "test",
1315
- "test dev",
1316
- "test review",
1317
- "test stage",
1318
- "test prod",
1319
- "test local",
1320
- "build",
1321
- "build dev",
1322
- "build review",
1323
- "build stage",
1324
- "build prod",
1325
- "build local",
1326
- "deploy",
1327
- "deploy dev",
1328
- "deploy review",
1329
- "deploy stage",
1330
- "deploy prod",
1331
- "deploy local",
1332
- "verify",
1333
- "verify dev",
1334
- "verify review",
1335
- "verify stage",
1336
- "verify prod",
1337
- "verify local",
1338
- "rollback",
1339
- "rollback dev",
1340
- "rollback review",
1341
- "rollback stage",
1342
- "rollback prod",
1343
- "rollback local",
1344
- "stop",
1345
- "stop dev",
1346
- "stop review",
1347
- "stop stage",
1348
- "stop prod",
1349
- "stop local",
1350
- ],
1351
- "variables": {
1352
- "FF_USE_FASTZIP": "true",
1353
- },
1354
- "workflow": {
1355
- "rules": [
1356
- {
1357
- "if": "$CI_COMMIT_TAG",
1358
- },
1359
- {
1360
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1361
- "when": "never",
1362
- },
1363
- {
1364
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1365
- },
1366
- {
1367
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1368
- },
1369
- {
1370
- "if": "$CI_MERGE_REQUEST_ID",
1371
- },
1372
- ],
1373
- },
1374
- },
1375
- "taggedRelease": {
1376
- "image": "path/to/docker/jobs-default:the-version",
1377
- "jobs": {
1378
- "api ↩️ Rollback ⚠️ | prod ": {
1379
- "environment": {
1380
- "action": "access",
1381
- "name": "prod/api",
1382
- "url": "https://api.prod.test-app.pan.panter.cloud",
1383
- },
1384
- "image": "path/to/docker/kubernetes:the-version",
1385
- "interruptible": true,
1386
- "needs": [],
1387
- "retry": {
1388
- "max": 2,
1389
- "when": [
1390
- "runner_system_failure",
1391
- "stuck_or_timeout_failure",
1392
- ],
1393
- },
1394
- "rules": [
1395
- {
1396
- "allow_failure": true,
1397
- "when": "manual",
1398
- },
1399
- ],
1400
- "script": [
1401
- "kubectl config set-cluster "kube-pan-test-app-prod-api" --server="$CL_prod_api_KUBE_URL" --certificate-authority <(echo $CL_prod_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1402
- "kubectl config set-credentials "kube-pan-test-app-prod-api" --token="$CL_prod_api_KUBE_TOKEN"",
1403
- "kubectl config set-context "kube-pan-test-app-prod-api" --cluster="kube-pan-test-app-prod-api" --user="kube-pan-test-app-prod-api" --namespace="pan-test-app-prod"",
1404
- "kubectl config use-context "kube-pan-test-app-prod-api"",
1405
- "kubernetesRollback",
1406
- ],
1407
- "stage": "rollback prod",
1408
- "variables": {
1409
- "APP_DIR": "api",
1410
- "BUILD_ID": "some-id",
1411
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1412
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1413
- "BUILD_INFO_ID": "some-id",
1414
- "COMPONENT_NAME": "api",
1415
- "ENV_SHORT": "prod",
1416
- "ENV_TYPE": "prod",
1417
- "GIT_STRATEGY": "none",
1418
- "HELM_ARGS": "",
1419
- "HELM_EXPERIMENTAL_OCI": "1",
1420
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1421
- "HOST": "api.prod.test-app.pan.panter.cloud",
1422
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
1423
- "KUBERNETES_CPU_LIMIT": "1",
1424
- "KUBERNETES_CPU_REQUEST": "0.5",
1425
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1426
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1427
- "KUBE_APP_NAME": "api",
1428
- "KUBE_APP_NAME_PREFIX": "",
1429
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1430
- "KUBE_NAMESPACE": "pan-test-app-prod",
1431
- "KUBE_VALUES": "env:
1432
- secret:
1433
- POSTGRESQL_PASSWORD: '$CL_prod_api_POSTGRESQL_PASSWORD'
1434
- cloudsqlProxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1435
- public:
1436
- ENV_SHORT: 'prod'
1437
- APP_DIR: 'api'
1438
- ENV_TYPE: 'prod'
1439
- BUILD_INFO_ID: 'some-id'
1440
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1441
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1442
- HOST: 'api.prod.test-app.pan.panter.cloud'
1443
- ROOT_URL: 'https://api.prod.test-app.pan.panter.cloud'
1444
- KUBE_NAMESPACE: 'pan-test-app-prod'
1445
- KUBE_APP_NAME: 'api'
1446
- KUBE_APP_NAME_PREFIX: ''
1447
- HOST_CANONICAL: 'api.prod.test-app.pan.panter.cloud'
1448
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1449
- application:
1450
- host: 'api.prod.test-app.pan.panter.cloud'
1451
- command: 'yarn start'
1452
- livenessProbe:
1453
- httpGet:
1454
- path: '__health'
1455
- readinessProbe:
1456
- httpGet:
1457
- path: '__health'
1458
- startupProbe:
1459
- httpGet:
1460
- path: '__health'
1461
- cloudsql:
1462
- enabled: true
1463
- dbUser: 'postgres'
1464
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-prod'
1465
- proxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1466
- fullDbName: 'api'
1467
- ",
1468
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
1469
- "RELEASE_NAME": "pan-test-app-prod-api",
1470
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
1471
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1472
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
1473
- },
1474
- },
1475
- "api ↩️ Rollback ⚠️ | stage ": {
1476
- "environment": {
1477
- "action": "access",
1478
- "name": "stage/api",
1479
- "url": "https://api.stage.test-app.pan.panter.cloud",
1480
- },
1481
- "image": "path/to/docker/kubernetes:the-version",
1482
- "interruptible": true,
1483
- "needs": [],
1484
- "retry": {
1485
- "max": 2,
1486
- "when": [
1487
- "runner_system_failure",
1488
- "stuck_or_timeout_failure",
1489
- ],
1490
- },
1491
- "rules": [
1492
- {
1493
- "allow_failure": true,
1494
- "when": "manual",
1495
- },
1496
- ],
1497
- "script": [
1498
- "kubectl config set-cluster "kube-pan-test-app-stage-api" --server="$CL_stage_api_KUBE_URL" --certificate-authority <(echo $CL_stage_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1499
- "kubectl config set-credentials "kube-pan-test-app-stage-api" --token="$CL_stage_api_KUBE_TOKEN"",
1500
- "kubectl config set-context "kube-pan-test-app-stage-api" --cluster="kube-pan-test-app-stage-api" --user="kube-pan-test-app-stage-api" --namespace="pan-test-app-stage"",
1501
- "kubectl config use-context "kube-pan-test-app-stage-api"",
1502
- "kubernetesRollback",
1503
- ],
1504
- "stage": "rollback stage",
1505
- "variables": {
1506
- "APP_DIR": "api",
1507
- "BUILD_ID": "some-id",
1508
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1509
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1510
- "BUILD_INFO_ID": "some-id",
1511
- "COMPONENT_NAME": "api",
1512
- "ENV_SHORT": "stage",
1513
- "ENV_TYPE": "stage",
1514
- "GIT_STRATEGY": "none",
1515
- "HELM_ARGS": "",
1516
- "HELM_EXPERIMENTAL_OCI": "1",
1517
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1518
- "HOST": "api.stage.test-app.pan.panter.cloud",
1519
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
1520
- "KUBERNETES_CPU_LIMIT": "1",
1521
- "KUBERNETES_CPU_REQUEST": "0.5",
1522
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1523
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1524
- "KUBE_APP_NAME": "api",
1525
- "KUBE_APP_NAME_PREFIX": "",
1526
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1527
- "KUBE_NAMESPACE": "pan-test-app-stage",
1528
- "KUBE_VALUES": "env:
1529
- secret:
1530
- POSTGRESQL_PASSWORD: '$CL_stage_api_POSTGRESQL_PASSWORD'
1531
- cloudsqlProxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
1532
- public:
1533
- ENV_SHORT: 'stage'
1534
- APP_DIR: 'api'
1535
- ENV_TYPE: 'stage'
1536
- BUILD_INFO_ID: 'some-id'
1537
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1538
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1539
- HOST: 'api.stage.test-app.pan.panter.cloud'
1540
- ROOT_URL: 'https://api.stage.test-app.pan.panter.cloud'
1541
- KUBE_NAMESPACE: 'pan-test-app-stage'
1542
- KUBE_APP_NAME: 'api'
1543
- KUBE_APP_NAME_PREFIX: ''
1544
- HOST_CANONICAL: 'api.stage.test-app.pan.panter.cloud'
1545
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1546
- application:
1547
- host: 'api.stage.test-app.pan.panter.cloud'
1548
- command: 'yarn start'
1549
- livenessProbe:
1550
- httpGet:
1551
- path: '__health'
1552
- readinessProbe:
1553
- httpGet:
1554
- path: '__health'
1555
- startupProbe:
1556
- httpGet:
1557
- path: '__health'
1558
- cloudsql:
1559
- enabled: true
1560
- dbUser: 'postgres'
1561
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-stage'
1562
- proxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
1563
- fullDbName: 'api'
1564
- ",
1565
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
1566
- "RELEASE_NAME": "pan-test-app-stage-api",
1567
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
1568
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1569
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
1570
- },
1571
- },
1572
- "api 🔨 app | prod ": {
1573
- "artifacts": {
1574
- "expire_in": "1 day",
1575
- "paths": [
1576
- "api/__build_info.json",
1577
- "api/dist",
1578
- "api/.next",
1579
- ],
1580
- "reports": {
1581
- "junit": undefined,
1582
- },
1583
- },
1584
- "cache": [
1585
- {
1586
- "key": "api-yarn",
1587
- "paths": [
1588
- "api/.yarn",
1589
- ],
1590
- "policy": "pull-push",
1591
- },
1592
- {
1593
- "key": "api-node-modules",
1594
- "paths": [
1595
- "api/node_modules",
1596
- ],
1597
- "policy": "pull-push",
1598
- },
1599
- {
1600
- "key": "api-next-cache",
1601
- "paths": [
1602
- "api/.next/cache/",
1603
- ],
1604
- "policy": "pull-push",
1605
- },
1606
- ],
1607
- "image": "path/to/docker/jobs-default:the-version",
1608
- "interruptible": true,
1609
- "needs": [],
1610
- "retry": {
1611
- "max": 2,
1612
- "when": [
1613
- "runner_system_failure",
1614
- "stuck_or_timeout_failure",
1615
- ],
1616
- },
1617
- "script": [
1618
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1619
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1620
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1621
- "cd api",
1622
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1623
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1624
- "yarn install --immutable",
1625
- "yarn build",
1626
- ],
1627
- "stage": "build",
1628
- "variables": {
1629
- "APP_DIR": "api",
1630
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1631
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1632
- "BUILD_INFO_ID": "some-id",
1633
- "ENV_SHORT": "prod",
1634
- "ENV_TYPE": "prod",
1635
- "HOST": "api.prod.test-app.pan.panter.cloud",
1636
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
1637
- "KUBERNETES_CPU_LIMIT": "2",
1638
- "KUBERNETES_CPU_REQUEST": "0.5",
1639
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1640
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1641
- "KUBE_APP_NAME": "api",
1642
- "KUBE_APP_NAME_PREFIX": "",
1643
- "KUBE_NAMESPACE": "pan-test-app-prod",
1644
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
1645
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
1646
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1647
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
1648
- },
1649
- },
1650
- "api 🔨 app | stage ": {
1651
- "artifacts": {
1652
- "expire_in": "1 day",
1653
- "paths": [
1654
- "api/__build_info.json",
1655
- "api/dist",
1656
- "api/.next",
1657
- ],
1658
- "reports": {
1659
- "junit": undefined,
1660
- },
1661
- },
1662
- "cache": [
1663
- {
1664
- "key": "api-yarn",
1665
- "paths": [
1666
- "api/.yarn",
1667
- ],
1668
- "policy": "pull-push",
1669
- },
1670
- {
1671
- "key": "api-node-modules",
1672
- "paths": [
1673
- "api/node_modules",
1674
- ],
1675
- "policy": "pull-push",
1676
- },
1677
- {
1678
- "key": "api-next-cache",
1679
- "paths": [
1680
- "api/.next/cache/",
1681
- ],
1682
- "policy": "pull-push",
1683
- },
1684
- ],
1685
- "image": "path/to/docker/jobs-default:the-version",
1686
- "interruptible": true,
1687
- "needs": [],
1688
- "retry": {
1689
- "max": 2,
1690
- "when": [
1691
- "runner_system_failure",
1692
- "stuck_or_timeout_failure",
1693
- ],
1694
- },
1695
- "script": [
1696
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1697
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1698
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1699
- "cd api",
1700
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1701
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1702
- "yarn install --immutable",
1703
- "yarn build",
1704
- ],
1705
- "stage": "build",
1706
- "variables": {
1707
- "APP_DIR": "api",
1708
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1709
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1710
- "BUILD_INFO_ID": "some-id",
1711
- "ENV_SHORT": "stage",
1712
- "ENV_TYPE": "stage",
1713
- "HOST": "api.stage.test-app.pan.panter.cloud",
1714
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
1715
- "KUBERNETES_CPU_LIMIT": "2",
1716
- "KUBERNETES_CPU_REQUEST": "0.5",
1717
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1718
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1719
- "KUBE_APP_NAME": "api",
1720
- "KUBE_APP_NAME_PREFIX": "",
1721
- "KUBE_NAMESPACE": "pan-test-app-stage",
1722
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
1723
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
1724
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1725
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
1726
- },
1727
- },
1728
- "api 🔨 docker | prod ": {
1729
- "cache": [
1730
- {
1731
- "key": "api-yarn",
1732
- "paths": [
1733
- "api/.yarn",
1734
- ],
1735
- "policy": "pull",
1736
- },
1737
- ],
1738
- "image": "path/to/docker/docker-build:the-version",
1739
- "interruptible": true,
1740
- "needs": [
1741
- "api 🔨 app | prod ",
1742
- ],
1743
- "retry": {
1744
- "max": 2,
1745
- "when": [
1746
- "runner_system_failure",
1747
- "stuck_or_timeout_failure",
1748
- ],
1749
- },
1750
- "script": [
1751
- "ensureNodeDockerfile",
1752
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1753
- "docker version",
1754
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1755
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1756
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1757
- "docker push $DOCKER_CACHE_IMAGE",
1758
- ],
1759
- "services": [
1760
- {
1761
- "command": [
1762
- "--tls=false",
1763
- ],
1764
- "name": "docker:20-dind",
1765
- },
1766
- ],
1767
- "stage": "build",
1768
- "variables": {
1769
- "APP_DIR": "api",
1770
- "DOCKERFILE_ADDITIONS": undefined,
1771
- "DOCKERFILE_ADDITIONS_END": undefined,
1772
- "DOCKER_BUILDKIT": "1",
1773
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1774
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1775
- RUN yarn plugin import workspace-tools
1776
- RUN yarn workspaces focus --production && yarn rebuild",
1777
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1778
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1779
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1780
- COPY --chown=node:node .yarn /app/.yarn",
1781
- "DOCKER_DIR": ".",
1782
- "DOCKER_DRIVER": "overlay2",
1783
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1784
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1785
- "DOCKER_IMAGE_NAME": "prod/api",
1786
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1787
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1788
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1789
- "DOCKER_TLS_CERTDIR": "",
1790
- "KUBERNETES_CPU_LIMIT": "1",
1791
- "KUBERNETES_CPU_REQUEST": "0.5",
1792
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1793
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1794
- },
1795
- },
1796
- "api 🔨 docker | stage ": {
1797
- "cache": [
1798
- {
1799
- "key": "api-yarn",
1800
- "paths": [
1801
- "api/.yarn",
1802
- ],
1803
- "policy": "pull",
1804
- },
1805
- ],
1806
- "image": "path/to/docker/docker-build:the-version",
1807
- "interruptible": true,
1808
- "needs": [
1809
- "api 🔨 app | stage ",
1810
- ],
1811
- "retry": {
1812
- "max": 2,
1813
- "when": [
1814
- "runner_system_failure",
1815
- "stuck_or_timeout_failure",
1816
- ],
1817
- },
1818
- "script": [
1819
- "ensureNodeDockerfile",
1820
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1821
- "docker version",
1822
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1823
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1824
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1825
- "docker push $DOCKER_CACHE_IMAGE",
1826
- ],
1827
- "services": [
1828
- {
1829
- "command": [
1830
- "--tls=false",
1831
- ],
1832
- "name": "docker:20-dind",
1833
- },
1834
- ],
1835
- "stage": "build",
1836
- "variables": {
1837
- "APP_DIR": "api",
1838
- "DOCKERFILE_ADDITIONS": undefined,
1839
- "DOCKERFILE_ADDITIONS_END": undefined,
1840
- "DOCKER_BUILDKIT": "1",
1841
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1842
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1843
- RUN yarn plugin import workspace-tools
1844
- RUN yarn workspaces focus --production && yarn rebuild",
1845
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1846
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1847
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1848
- COPY --chown=node:node .yarn /app/.yarn",
1849
- "DOCKER_DIR": ".",
1850
- "DOCKER_DRIVER": "overlay2",
1851
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1852
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1853
- "DOCKER_IMAGE_NAME": "stage/api",
1854
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1855
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1856
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1857
- "DOCKER_TLS_CERTDIR": "",
1858
- "KUBERNETES_CPU_LIMIT": "1",
1859
- "KUBERNETES_CPU_REQUEST": "0.5",
1860
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1861
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1862
- },
1863
- },
1864
- "api 🚀 Deploy | prod ": {
1865
- "allow_failure": true,
1866
- "environment": {
1867
- "auto_stop_in": undefined,
1868
- "name": "prod/api",
1869
- "on_stop": "api 🛑 Stop ⚠️ | prod ",
1870
- "url": "https://api.prod.test-app.pan.panter.cloud",
1871
- },
1872
- "image": "path/to/docker/kubernetes:the-version",
1873
- "interruptible": true,
1874
- "needs": [
1875
- {
1876
- "artifacts": false,
1877
- "job": "api 🔨 app | prod ",
1878
- },
1879
- {
1880
- "artifacts": false,
1881
- "job": "api 🔨 docker | prod ",
1882
- },
1883
- {
1884
- "artifacts": true,
1885
- "job": "api 🧾 sbom | prod ",
1886
- },
1887
- ],
1888
- "retry": {
1889
- "max": 2,
1890
- "when": [
1891
- "runner_system_failure",
1892
- "stuck_or_timeout_failure",
1893
- ],
1894
- },
1895
- "rules": [
1896
- {
1897
- "when": "manual",
1898
- },
1899
- ],
1900
- "script": [
1901
- "kubectl config set-cluster "kube-pan-test-app-prod-api" --server="$CL_prod_api_KUBE_URL" --certificate-authority <(echo $CL_prod_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1902
- "kubectl config set-credentials "kube-pan-test-app-prod-api" --token="$CL_prod_api_KUBE_TOKEN"",
1903
- "kubectl config set-context "kube-pan-test-app-prod-api" --cluster="kube-pan-test-app-prod-api" --user="kube-pan-test-app-prod-api" --namespace="pan-test-app-prod"",
1904
- "kubectl config use-context "kube-pan-test-app-prod-api"",
1905
- "kubernetesCreateSecret",
1906
- "kubernetesDeploy",
1907
- "echo Uploading SBOM to Dependency Track",
1908
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.prod.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
1909
- "echo deployment successful 😻",
1910
- ],
1911
- "stage": "deploy prod",
1912
- "variables": {
1913
- "APP_DIR": "api",
1914
- "BUILD_ID": "some-id",
1915
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1916
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1917
- "BUILD_INFO_ID": "some-id",
1918
- "COMPONENT_NAME": "api",
1919
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1920
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1921
- "DOCKER_IMAGE_NAME": "prod/api",
1922
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1923
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1924
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1925
- "ENV_SHORT": "prod",
1926
- "ENV_TYPE": "prod",
1927
- "HELM_ARGS": "",
1928
- "HELM_EXPERIMENTAL_OCI": "1",
1929
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1930
- "HOST": "api.prod.test-app.pan.panter.cloud",
1931
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
1932
- "KUBERNETES_CPU_LIMIT": "1",
1933
- "KUBERNETES_CPU_REQUEST": "0.5",
1934
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1935
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1936
- "KUBE_APP_NAME": "api",
1937
- "KUBE_APP_NAME_PREFIX": "",
1938
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1939
- "KUBE_NAMESPACE": "pan-test-app-prod",
1940
- "KUBE_VALUES": "env:
1941
- secret:
1942
- POSTGRESQL_PASSWORD: '$CL_prod_api_POSTGRESQL_PASSWORD'
1943
- cloudsqlProxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1944
- public:
1945
- ENV_SHORT: 'prod'
1946
- APP_DIR: 'api'
1947
- ENV_TYPE: 'prod'
1948
- BUILD_INFO_ID: 'some-id'
1949
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1950
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1951
- HOST: 'api.prod.test-app.pan.panter.cloud'
1952
- ROOT_URL: 'https://api.prod.test-app.pan.panter.cloud'
1953
- KUBE_NAMESPACE: 'pan-test-app-prod'
1954
- KUBE_APP_NAME: 'api'
1955
- KUBE_APP_NAME_PREFIX: ''
1956
- HOST_CANONICAL: 'api.prod.test-app.pan.panter.cloud'
1957
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1958
- application:
1959
- host: 'api.prod.test-app.pan.panter.cloud'
1960
- command: 'yarn start'
1961
- livenessProbe:
1962
- httpGet:
1963
- path: '__health'
1964
- readinessProbe:
1965
- httpGet:
1966
- path: '__health'
1967
- startupProbe:
1968
- httpGet:
1969
- path: '__health'
1970
- cloudsql:
1971
- enabled: true
1972
- dbUser: 'postgres'
1973
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-prod'
1974
- proxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1975
- fullDbName: 'api'
1976
- ",
1977
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
1978
- "RELEASE_NAME": "pan-test-app-prod-api",
1979
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
1980
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1981
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
1982
- },
1983
- },
1984
- "api 🚀 Deploy | stage ": {
1985
- "allow_failure": false,
1986
- "environment": {
1987
- "auto_stop_in": undefined,
1988
- "name": "stage/api",
1989
- "on_stop": "api 🛑 Stop ⚠️ | stage ",
1990
- "url": "https://api.stage.test-app.pan.panter.cloud",
1991
- },
1992
- "image": "path/to/docker/kubernetes:the-version",
1993
- "interruptible": true,
1994
- "needs": [
1995
- {
1996
- "artifacts": false,
1997
- "job": "api 🔨 app | stage ",
1998
- },
1999
- {
2000
- "artifacts": false,
2001
- "job": "api 🔨 docker | stage ",
2002
- },
2003
- {
2004
- "artifacts": true,
2005
- "job": "api 🧾 sbom | stage ",
2006
- },
2007
- ],
2008
- "retry": {
2009
- "max": 2,
2010
- "when": [
2011
- "runner_system_failure",
2012
- "stuck_or_timeout_failure",
2013
- ],
2014
- },
2015
- "rules": [
2016
- {
2017
- "when": "on_success",
2018
- },
2019
- ],
2020
- "script": [
2021
- "kubectl config set-cluster "kube-pan-test-app-stage-api" --server="$CL_stage_api_KUBE_URL" --certificate-authority <(echo $CL_stage_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2022
- "kubectl config set-credentials "kube-pan-test-app-stage-api" --token="$CL_stage_api_KUBE_TOKEN"",
2023
- "kubectl config set-context "kube-pan-test-app-stage-api" --cluster="kube-pan-test-app-stage-api" --user="kube-pan-test-app-stage-api" --namespace="pan-test-app-stage"",
2024
- "kubectl config use-context "kube-pan-test-app-stage-api"",
2025
- "kubernetesCreateSecret",
2026
- "kubernetesDeploy",
2027
- "echo Uploading SBOM to Dependency Track",
2028
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.stage.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
2029
- "echo deployment successful 😻",
2030
- ],
2031
- "stage": "deploy stage",
2032
- "variables": {
2033
- "APP_DIR": "api",
2034
- "BUILD_ID": "some-id",
2035
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2036
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2037
- "BUILD_INFO_ID": "some-id",
2038
- "COMPONENT_NAME": "api",
2039
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
2040
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2041
- "DOCKER_IMAGE_NAME": "stage/api",
2042
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2043
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2044
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2045
- "ENV_SHORT": "stage",
2046
- "ENV_TYPE": "stage",
2047
- "HELM_ARGS": "",
2048
- "HELM_EXPERIMENTAL_OCI": "1",
2049
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2050
- "HOST": "api.stage.test-app.pan.panter.cloud",
2051
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
2052
- "KUBERNETES_CPU_LIMIT": "1",
2053
- "KUBERNETES_CPU_REQUEST": "0.5",
2054
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2055
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2056
- "KUBE_APP_NAME": "api",
2057
- "KUBE_APP_NAME_PREFIX": "",
2058
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
2059
- "KUBE_NAMESPACE": "pan-test-app-stage",
2060
- "KUBE_VALUES": "env:
2061
- secret:
2062
- POSTGRESQL_PASSWORD: '$CL_stage_api_POSTGRESQL_PASSWORD'
2063
- cloudsqlProxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2064
- public:
2065
- ENV_SHORT: 'stage'
2066
- APP_DIR: 'api'
2067
- ENV_TYPE: 'stage'
2068
- BUILD_INFO_ID: 'some-id'
2069
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2070
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2071
- HOST: 'api.stage.test-app.pan.panter.cloud'
2072
- ROOT_URL: 'https://api.stage.test-app.pan.panter.cloud'
2073
- KUBE_NAMESPACE: 'pan-test-app-stage'
2074
- KUBE_APP_NAME: 'api'
2075
- KUBE_APP_NAME_PREFIX: ''
2076
- HOST_CANONICAL: 'api.stage.test-app.pan.panter.cloud'
2077
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
2078
- application:
2079
- host: 'api.stage.test-app.pan.panter.cloud'
2080
- command: 'yarn start'
2081
- livenessProbe:
2082
- httpGet:
2083
- path: '__health'
2084
- readinessProbe:
2085
- httpGet:
2086
- path: '__health'
2087
- startupProbe:
2088
- httpGet:
2089
- path: '__health'
2090
- cloudsql:
2091
- enabled: true
2092
- dbUser: 'postgres'
2093
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-stage'
2094
- proxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2095
- fullDbName: 'api'
2096
- ",
2097
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
2098
- "RELEASE_NAME": "pan-test-app-stage-api",
2099
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
2100
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
2101
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
2102
- },
2103
- },
2104
- "api 🛑 Stop ⚠️ | prod ": {
2105
- "environment": {
2106
- "action": "stop",
2107
- "name": "prod/api",
2108
- "url": "https://api.prod.test-app.pan.panter.cloud",
2109
- },
2110
- "image": "path/to/docker/kubernetes:the-version",
2111
- "interruptible": true,
2112
- "needs": [],
2113
- "retry": {
2114
- "max": 2,
2115
- "when": [
2116
- "runner_system_failure",
2117
- "stuck_or_timeout_failure",
2118
- ],
2119
- },
2120
- "rules": [
2121
- {
2122
- "allow_failure": true,
2123
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2124
- "when": "on_success",
2125
- },
2126
- {
2127
- "allow_failure": true,
2128
- "when": "manual",
2129
- },
2130
- ],
2131
- "script": [
2132
- "kubectl config set-cluster "kube-pan-test-app-prod-api" --server="$CL_prod_api_KUBE_URL" --certificate-authority <(echo $CL_prod_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2133
- "kubectl config set-credentials "kube-pan-test-app-prod-api" --token="$CL_prod_api_KUBE_TOKEN"",
2134
- "kubectl config set-context "kube-pan-test-app-prod-api" --cluster="kube-pan-test-app-prod-api" --user="kube-pan-test-app-prod-api" --namespace="pan-test-app-prod"",
2135
- "kubectl config use-context "kube-pan-test-app-prod-api"",
2136
- "kubernetesDelete",
2137
- "echo Disabling component in Dependency Track",
2138
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.prod.test-app.pan.panter.cloud" || true",
2139
- ],
2140
- "stage": "stop prod",
2141
- "variables": {
2142
- "APP_DIR": "api",
2143
- "BUILD_ID": "some-id",
2144
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2145
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2146
- "BUILD_INFO_ID": "some-id",
2147
- "COMPONENT_NAME": "api",
2148
- "ENV_SHORT": "prod",
2149
- "ENV_TYPE": "prod",
2150
- "GIT_STRATEGY": "none",
2151
- "HELM_ARGS": "",
2152
- "HELM_EXPERIMENTAL_OCI": "1",
2153
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2154
- "HOST": "api.prod.test-app.pan.panter.cloud",
2155
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
2156
- "KUBERNETES_CPU_LIMIT": "1",
2157
- "KUBERNETES_CPU_REQUEST": "0.5",
2158
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2159
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2160
- "KUBE_APP_NAME": "api",
2161
- "KUBE_APP_NAME_PREFIX": "",
2162
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
2163
- "KUBE_NAMESPACE": "pan-test-app-prod",
2164
- "KUBE_VALUES": "env:
2165
- secret:
2166
- POSTGRESQL_PASSWORD: '$CL_prod_api_POSTGRESQL_PASSWORD'
2167
- cloudsqlProxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
2168
- public:
2169
- ENV_SHORT: 'prod'
2170
- APP_DIR: 'api'
2171
- ENV_TYPE: 'prod'
2172
- BUILD_INFO_ID: 'some-id'
2173
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2174
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2175
- HOST: 'api.prod.test-app.pan.panter.cloud'
2176
- ROOT_URL: 'https://api.prod.test-app.pan.panter.cloud'
2177
- KUBE_NAMESPACE: 'pan-test-app-prod'
2178
- KUBE_APP_NAME: 'api'
2179
- KUBE_APP_NAME_PREFIX: ''
2180
- HOST_CANONICAL: 'api.prod.test-app.pan.panter.cloud'
2181
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
2182
- application:
2183
- host: 'api.prod.test-app.pan.panter.cloud'
2184
- command: 'yarn start'
2185
- livenessProbe:
2186
- httpGet:
2187
- path: '__health'
2188
- readinessProbe:
2189
- httpGet:
2190
- path: '__health'
2191
- startupProbe:
2192
- httpGet:
2193
- path: '__health'
2194
- cloudsql:
2195
- enabled: true
2196
- dbUser: 'postgres'
2197
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-prod'
2198
- proxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
2199
- fullDbName: 'api'
2200
- ",
2201
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
2202
- "RELEASE_NAME": "pan-test-app-prod-api",
2203
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
2204
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
2205
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
2206
- },
2207
- },
2208
- "api 🛑 Stop ⚠️ | stage ": {
2209
- "environment": {
2210
- "action": "stop",
2211
- "name": "stage/api",
2212
- "url": "https://api.stage.test-app.pan.panter.cloud",
2213
- },
2214
- "image": "path/to/docker/kubernetes:the-version",
2215
- "interruptible": true,
2216
- "needs": [],
2217
- "retry": {
2218
- "max": 2,
2219
- "when": [
2220
- "runner_system_failure",
2221
- "stuck_or_timeout_failure",
2222
- ],
2223
- },
2224
- "rules": [
2225
- {
2226
- "allow_failure": true,
2227
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2228
- "when": "on_success",
2229
- },
2230
- {
2231
- "allow_failure": true,
2232
- "when": "manual",
2233
- },
2234
- ],
2235
- "script": [
2236
- "kubectl config set-cluster "kube-pan-test-app-stage-api" --server="$CL_stage_api_KUBE_URL" --certificate-authority <(echo $CL_stage_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2237
- "kubectl config set-credentials "kube-pan-test-app-stage-api" --token="$CL_stage_api_KUBE_TOKEN"",
2238
- "kubectl config set-context "kube-pan-test-app-stage-api" --cluster="kube-pan-test-app-stage-api" --user="kube-pan-test-app-stage-api" --namespace="pan-test-app-stage"",
2239
- "kubectl config use-context "kube-pan-test-app-stage-api"",
2240
- "kubernetesDelete",
2241
- "echo Disabling component in Dependency Track",
2242
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.stage.test-app.pan.panter.cloud" || true",
2243
- ],
2244
- "stage": "stop stage",
2245
- "variables": {
2246
- "APP_DIR": "api",
2247
- "BUILD_ID": "some-id",
2248
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2249
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2250
- "BUILD_INFO_ID": "some-id",
2251
- "COMPONENT_NAME": "api",
2252
- "ENV_SHORT": "stage",
2253
- "ENV_TYPE": "stage",
2254
- "GIT_STRATEGY": "none",
2255
- "HELM_ARGS": "",
2256
- "HELM_EXPERIMENTAL_OCI": "1",
2257
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2258
- "HOST": "api.stage.test-app.pan.panter.cloud",
2259
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
2260
- "KUBERNETES_CPU_LIMIT": "1",
2261
- "KUBERNETES_CPU_REQUEST": "0.5",
2262
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2263
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2264
- "KUBE_APP_NAME": "api",
2265
- "KUBE_APP_NAME_PREFIX": "",
2266
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
2267
- "KUBE_NAMESPACE": "pan-test-app-stage",
2268
- "KUBE_VALUES": "env:
2269
- secret:
2270
- POSTGRESQL_PASSWORD: '$CL_stage_api_POSTGRESQL_PASSWORD'
2271
- cloudsqlProxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2272
- public:
2273
- ENV_SHORT: 'stage'
2274
- APP_DIR: 'api'
2275
- ENV_TYPE: 'stage'
2276
- BUILD_INFO_ID: 'some-id'
2277
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2278
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2279
- HOST: 'api.stage.test-app.pan.panter.cloud'
2280
- ROOT_URL: 'https://api.stage.test-app.pan.panter.cloud'
2281
- KUBE_NAMESPACE: 'pan-test-app-stage'
2282
- KUBE_APP_NAME: 'api'
2283
- KUBE_APP_NAME_PREFIX: ''
2284
- HOST_CANONICAL: 'api.stage.test-app.pan.panter.cloud'
2285
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
2286
- application:
2287
- host: 'api.stage.test-app.pan.panter.cloud'
2288
- command: 'yarn start'
2289
- livenessProbe:
2290
- httpGet:
2291
- path: '__health'
2292
- readinessProbe:
2293
- httpGet:
2294
- path: '__health'
2295
- startupProbe:
2296
- httpGet:
2297
- path: '__health'
2298
- cloudsql:
2299
- enabled: true
2300
- dbUser: 'postgres'
2301
- instanceConnectionName: 'skynet-164509:europe-west6:pan-test-app-stage'
2302
- proxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2303
- fullDbName: 'api'
2304
- ",
2305
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
2306
- "RELEASE_NAME": "pan-test-app-stage-api",
2307
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
2308
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
2309
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
2310
- },
2311
- },
2312
- "api 🧾 sbom | prod ": {
2313
- "allow_failure": true,
2314
- "artifacts": {
2315
- "paths": [
2316
- "__sbom.json",
2317
- ],
2318
- },
2319
- "image": "aquasec/trivy:0.38.3",
2320
- "interruptible": true,
2321
- "needs": [],
2322
- "retry": {
2323
- "max": 2,
2324
- "when": [
2325
- "runner_system_failure",
2326
- "stuck_or_timeout_failure",
2327
- ],
2328
- },
2329
- "script": [
2330
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2331
- ],
2332
- "stage": "build",
2333
- "variables": {},
2334
- },
2335
- "api 🧾 sbom | stage ": {
2336
- "allow_failure": true,
2337
- "artifacts": {
2338
- "paths": [
2339
- "__sbom.json",
2340
- ],
2341
- },
2342
- "image": "aquasec/trivy:0.38.3",
2343
- "interruptible": true,
2344
- "needs": [],
2345
- "retry": {
2346
- "max": 2,
2347
- "when": [
2348
- "runner_system_failure",
2349
- "stuck_or_timeout_failure",
2350
- ],
2351
- },
2352
- "script": [
2353
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2354
- ],
2355
- "stage": "build",
2356
- "variables": {},
2357
- },
2358
- },
2359
- "stages": [
2360
- "setup",
2361
- "setup dev",
2362
- "setup review",
2363
- "setup stage",
2364
- "setup prod",
2365
- "setup local",
2366
- "test",
2367
- "test dev",
2368
- "test review",
2369
- "test stage",
2370
- "test prod",
2371
- "test local",
2372
- "build",
2373
- "build dev",
2374
- "build review",
2375
- "build stage",
2376
- "build prod",
2377
- "build local",
2378
- "deploy",
2379
- "deploy dev",
2380
- "deploy review",
2381
- "deploy stage",
2382
- "deploy prod",
2383
- "deploy local",
2384
- "verify",
2385
- "verify dev",
2386
- "verify review",
2387
- "verify stage",
2388
- "verify prod",
2389
- "verify local",
2390
- "rollback",
2391
- "rollback dev",
2392
- "rollback review",
2393
- "rollback stage",
2394
- "rollback prod",
2395
- "rollback local",
2396
- "stop",
2397
- "stop dev",
2398
- "stop review",
2399
- "stop stage",
2400
- "stop prod",
2401
- "stop local",
2402
- ],
2403
- "variables": {
2404
- "FF_USE_FASTZIP": "true",
2405
- },
2406
- "workflow": {
2407
- "rules": [
2408
- {
2409
- "if": "$CI_COMMIT_TAG",
2410
- },
2411
- {
2412
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2413
- "when": "never",
2414
- },
2415
- {
2416
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2417
- },
2418
- {
2419
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2420
- },
2421
- {
2422
- "if": "$CI_MERGE_REQUEST_ID",
2423
- },
2424
- ],
2425
- },
2426
- },
2427
- }
2428
- `;