@catladder/pipeline 0.0.0-more-collapse-deeb54d7 → 0.0.0-multiple-gitlab-includes-3df5566d

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (597) hide show
  1. package/README.md +17 -0
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +34 -0
  5. package/dist/bash/bashEscape.js +114 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.d.ts +0 -1
  18. package/dist/build/base/constants.js +4 -3
  19. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  20. package/dist/build/base/createAppBuildJob.js +18 -15
  21. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  22. package/dist/build/base/createArtifactsConfig.js +3 -1
  23. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  24. package/dist/build/base/createBuildJobDefinition.js +58 -0
  25. package/dist/build/base/index.d.ts +7 -4
  26. package/dist/build/base/index.js +17 -6
  27. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  28. package/dist/build/base/writeBuildInfo.js +4 -3
  29. package/dist/build/base/writeDotEnv.d.ts +3 -2
  30. package/dist/build/base/writeDotEnv.js +30 -6
  31. package/dist/build/cache/createJobCache.d.ts +7 -0
  32. package/dist/build/cache/createJobCache.js +115 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  34. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  35. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  36. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  37. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  38. package/dist/build/custom/buildJob.d.ts +2 -2
  39. package/dist/build/custom/buildJob.js +8 -67
  40. package/dist/build/custom/index.d.ts +2 -2
  41. package/dist/build/custom/index.js +3 -1
  42. package/dist/build/custom/testJob.d.ts +4 -4
  43. package/dist/build/custom/testJob.js +25 -21
  44. package/dist/build/docker.d.ts +48 -39
  45. package/dist/build/docker.js +112 -37
  46. package/dist/build/index.d.ts +14 -7
  47. package/dist/build/index.js +44 -16
  48. package/dist/build/node/buildJob.d.ts +6 -2
  49. package/dist/build/node/buildJob.js +39 -48
  50. package/dist/build/node/cache.d.ts +4 -5
  51. package/dist/build/node/cache.js +18 -23
  52. package/dist/build/node/constants.d.ts +0 -1
  53. package/dist/build/node/constants.js +5 -4
  54. package/dist/build/node/index.d.ts +4 -4
  55. package/dist/build/node/index.js +3 -1
  56. package/dist/build/node/meteor.d.ts +2 -2
  57. package/dist/build/node/meteor.js +10 -12
  58. package/dist/build/node/testJob.d.ts +3 -2
  59. package/dist/build/node/testJob.js +29 -19
  60. package/dist/build/node/yarn.d.ts +3 -2
  61. package/dist/build/node/yarn.js +13 -13
  62. package/dist/build/rails/build.d.ts +2 -2
  63. package/dist/build/rails/build.js +24 -8
  64. package/dist/build/rails/index.d.ts +2 -2
  65. package/dist/build/rails/index.js +3 -1
  66. package/dist/build/rails/test.d.ts +2 -2
  67. package/dist/build/rails/test.js +20 -12
  68. package/dist/build/sbom.d.ts +2 -2
  69. package/dist/build/sbom.js +9 -6
  70. package/dist/build/types.d.ts +152 -47
  71. package/dist/build/types.js +10 -2
  72. package/dist/catladder-gitlab.js +129 -49
  73. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  74. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  75. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  76. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  77. package/dist/config/configruedEnvs.js +3 -1
  78. package/dist/config/index.js +13 -7
  79. package/dist/config/readConfig.d.ts +2 -2
  80. package/dist/config/readConfig.js +191 -40
  81. package/dist/constants.js +5 -3
  82. package/dist/context/createAllComponentsContext.d.ts +12 -0
  83. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  84. package/dist/context/createComponentContext.d.ts +11 -0
  85. package/dist/context/createComponentContext.js +255 -0
  86. package/dist/context/createWorkspaceContext.d.ts +16 -0
  87. package/dist/context/createWorkspaceContext.js +173 -0
  88. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  89. package/dist/context/getBuildInfoVariables.js +55 -0
  90. package/dist/context/getEnvConfig.js +5 -2
  91. package/dist/context/getEnvType.js +3 -1
  92. package/dist/context/getEnvironment.d.ts +3 -3
  93. package/dist/context/getEnvironment.js +11 -12
  94. package/dist/context/getEnvironmentContext.d.ts +7 -3
  95. package/dist/context/getEnvironmentContext.js +21 -11
  96. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  97. package/dist/context/getEnvironmentVariables.js +81 -49
  98. package/dist/context/getLabels.d.ts +2 -2
  99. package/dist/context/getLabels.js +9 -7
  100. package/dist/context/getReviewSlug.d.ts +4 -0
  101. package/dist/context/getReviewSlug.js +21 -0
  102. package/dist/context/index.d.ts +2 -4
  103. package/dist/context/index.js +15 -162
  104. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  105. package/dist/context/transformJobOnlyVars.js +4 -2
  106. package/dist/context/utils/envVars.d.ts +1 -1
  107. package/dist/context/utils/envVars.js +5 -2
  108. package/dist/defaults/index.js +3 -1
  109. package/dist/deploy/base/deploy.d.ts +3 -3
  110. package/dist/deploy/base/deploy.js +38 -22
  111. package/dist/deploy/base/index.d.ts +3 -5
  112. package/dist/deploy/base/index.js +3 -1
  113. package/dist/deploy/base/rollback.d.ts +3 -3
  114. package/dist/deploy/base/rollback.js +13 -9
  115. package/dist/deploy/base/stop.d.ts +3 -3
  116. package/dist/deploy/base/stop.js +16 -11
  117. package/dist/deploy/base/types.d.ts +1 -1
  118. package/dist/deploy/base/types.js +3 -1
  119. package/dist/deploy/base/variables.d.ts +0 -1
  120. package/dist/deploy/base/variables.js +4 -3
  121. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +19 -0
  122. package/dist/deploy/cloudRun/artifactsRegistry.js +125 -0
  123. package/dist/deploy/cloudRun/cleanup.d.ts +2 -0
  124. package/dist/deploy/cloudRun/cleanup.js +53 -0
  125. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -0
  126. package/dist/deploy/cloudRun/cloudRunRevisions.js +62 -0
  127. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +7 -0
  128. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +207 -0
  129. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +4 -0
  130. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +96 -0
  131. package/dist/deploy/cloudRun/createJobs/common.d.ts +18 -0
  132. package/dist/deploy/cloudRun/createJobs/common.js +93 -0
  133. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  134. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  135. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +62 -0
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -0
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +54 -0
  139. package/dist/deploy/cloudRun/createJobs/index.d.ts +3 -0
  140. package/dist/deploy/cloudRun/createJobs/index.js +57 -0
  141. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  142. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  143. package/dist/deploy/cloudRun/index.d.ts +2 -2
  144. package/dist/deploy/cloudRun/index.js +17 -10
  145. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +3 -1
  146. package/dist/deploy/cloudRun/utils/createArgsString.js +25 -17
  147. package/dist/deploy/cloudRun/utils/database.d.ts +6 -4
  148. package/dist/deploy/cloudRun/utils/database.js +28 -15
  149. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  150. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +4 -2
  151. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -0
  152. package/dist/deploy/cloudRun/utils/getServiceName.js +10 -0
  153. package/dist/deploy/cloudRun/utils/jobName.d.ts +2 -1
  154. package/dist/deploy/cloudRun/utils/jobName.js +4 -2
  155. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.d.ts +9 -0
  156. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +18 -0
  157. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  158. package/dist/deploy/cloudSql/utils.js +7 -2
  159. package/dist/deploy/custom/deployJob.d.ts +2 -2
  160. package/dist/deploy/custom/deployJob.js +10 -9
  161. package/dist/deploy/custom/index.d.ts +2 -2
  162. package/dist/deploy/custom/index.js +3 -1
  163. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  164. package/dist/deploy/dockerTag/deployJob.js +38 -7
  165. package/dist/deploy/dockerTag/index.d.ts +2 -2
  166. package/dist/deploy/dockerTag/index.js +3 -1
  167. package/dist/deploy/index.d.ts +10 -9
  168. package/dist/deploy/index.js +13 -7
  169. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  170. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  171. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  172. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  173. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  174. package/dist/deploy/kubernetes/deployJob.js +23 -22
  175. package/dist/deploy/kubernetes/index.d.ts +2 -2
  176. package/dist/deploy/kubernetes/index.js +52 -15
  177. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  178. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  179. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  180. package/dist/deploy/kubernetes/kubeValues.js +16 -18
  181. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  182. package/dist/deploy/kubernetes/mongodb.js +14 -12
  183. package/dist/deploy/sbom.d.ts +4 -4
  184. package/dist/deploy/sbom.js +7 -4
  185. package/dist/deploy/types/base.d.ts +5 -5
  186. package/dist/deploy/types/base.js +3 -1
  187. package/dist/deploy/types/custom.d.ts +3 -7
  188. package/dist/deploy/types/custom.js +3 -1
  189. package/dist/deploy/types/dockerTag.d.ts +3 -1
  190. package/dist/deploy/types/dockerTag.js +3 -1
  191. package/dist/deploy/types/googleCloudRun.d.ts +127 -24
  192. package/dist/deploy/types/googleCloudRun.js +3 -1
  193. package/dist/deploy/types/index.d.ts +6 -6
  194. package/dist/deploy/types/index.js +14 -8
  195. package/dist/deploy/types/kubernetes.d.ts +25 -54
  196. package/dist/deploy/types/kubernetes.js +3 -1
  197. package/dist/deploy/utils.d.ts +2 -2
  198. package/dist/deploy/utils.js +5 -2
  199. package/dist/globalScriptFunctions/index.d.ts +14 -0
  200. package/dist/globalScriptFunctions/index.js +37 -0
  201. package/dist/index.d.ts +5 -2
  202. package/dist/index.js +18 -9
  203. package/dist/packageInfos.d.ts +4 -0
  204. package/dist/packageInfos.js +20 -0
  205. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  206. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  207. package/dist/pipeline/createAllJobs.d.ts +16 -6
  208. package/dist/pipeline/createAllJobs.js +99 -27
  209. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  210. package/dist/pipeline/createJobsForComponent.js +9 -149
  211. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  212. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  213. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  214. package/dist/pipeline/createMainPipeline.js +283 -0
  215. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  216. package/dist/pipeline/generatePipelineFiles.js +304 -0
  217. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  218. package/dist/pipeline/getPipelineStages.js +56 -0
  219. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  220. package/dist/pipeline/gitlab/createGitlabJobs.js +258 -74
  221. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  222. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  223. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  224. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  225. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  226. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  227. package/dist/pipeline/index.d.ts +3 -2
  228. package/dist/pipeline/index.js +16 -9
  229. package/dist/pipeline/packageManager.d.ts +3 -2
  230. package/dist/pipeline/packageManager.js +50 -24
  231. package/dist/pipeline/yarn/yarnUtils.d.ts +3 -2
  232. package/dist/pipeline/yarn/yarnUtils.js +65 -17
  233. package/dist/rules/index.d.ts +7 -2
  234. package/dist/rules/index.js +34 -16
  235. package/dist/runner/index.d.ts +1 -1
  236. package/dist/runner/index.js +3 -1
  237. package/dist/tsconfig.tsbuildinfo +1 -1
  238. package/dist/types/config.d.ts +44 -29
  239. package/dist/types/config.js +5 -2
  240. package/dist/types/context.d.ts +124 -40
  241. package/dist/types/context.js +12 -1
  242. package/dist/types/environmentContext.d.ts +15 -12
  243. package/dist/types/environmentContext.js +3 -1
  244. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  245. package/dist/types/gitlab-ci-yml.js +3 -2
  246. package/dist/types/gitlab-types.d.ts +8 -8
  247. package/dist/types/gitlab-types.js +3 -1
  248. package/dist/types/index.d.ts +1 -0
  249. package/dist/types/index.js +14 -7
  250. package/dist/types/jobDefinition.d.ts +11 -0
  251. package/dist/types/jobDefinition.js +5 -0
  252. package/dist/types/jobs.d.ts +30 -15
  253. package/dist/types/jobs.js +3 -1
  254. package/dist/types/pipeline.d.ts +3 -3
  255. package/dist/types/pipeline.js +3 -1
  256. package/dist/types/utils.d.ts +1 -1
  257. package/dist/types/utils.js +3 -1
  258. package/dist/utils/gitlab.js +7 -2
  259. package/dist/utils/index.d.ts +2 -1
  260. package/dist/utils/index.js +10 -3
  261. package/dist/utils/jsonParse.d.ts +1 -0
  262. package/dist/utils/jsonParse.js +14 -0
  263. package/dist/utils/removeUndefined.d.ts +1 -0
  264. package/dist/utils/removeUndefined.js +36 -0
  265. package/dist/utils/writeFiles.d.ts +11 -0
  266. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  267. package/dist/variables/VariableValue.d.ts +3 -0
  268. package/dist/variables/VariableValue.js +5 -0
  269. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  270. package/dist/variables/VariableValueContainingReferences.js +97 -0
  271. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  272. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  273. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  274. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  275. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  276. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  277. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  278. package/dist/variables/__tests__/variableValue.test.js +36 -0
  279. package/dist/variables/resolveAllReferences.d.ts +3 -0
  280. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -47
  281. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  282. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  283. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  284. package/dist/variables/resolveReferencesOnce.js +22 -0
  285. package/examples/.test-gen-ignore +1 -0
  286. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1418 -0
  287. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1418 -0
  288. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1418 -0
  289. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1434 -0
  290. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1418 -0
  291. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1526 -0
  292. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1418 -0
  293. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1436 -0
  294. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1418 -0
  295. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1418 -0
  296. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1418 -0
  297. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1418 -0
  298. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1490 -0
  299. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1302 -0
  300. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1418 -0
  301. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2998 -0
  302. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1733 -0
  303. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1426 -0
  304. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1285 -0
  305. package/examples/__snapshots__/custom-build-job.test.ts.snap +1174 -0
  306. package/examples/__snapshots__/custom-deploy.test.ts.snap +1168 -0
  307. package/examples/__snapshots__/custom-envs.test.ts.snap +798 -0
  308. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1182 -0
  309. package/examples/__snapshots__/git-submodule.test.ts.snap +1419 -0
  310. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1759 -0
  311. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1779 -0
  312. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3357 -0
  313. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1883 -0
  314. package/examples/__snapshots__/local-dot-env.test.ts.snap +1342 -0
  315. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1836 -0
  316. package/examples/__snapshots__/multiline-var.test.ts.snap +5679 -0
  317. package/examples/__snapshots__/native-app.test.ts.snap +2206 -0
  318. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1418 -0
  319. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1426 -0
  320. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1487 -0
  321. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1471 -0
  322. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4739 -0
  323. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1368 -0
  324. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2338 -0
  325. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2330 -0
  326. package/examples/__utils__/helpers.ts +9 -12
  327. package/examples/cloud-run-http2.test.ts +11 -0
  328. package/examples/cloud-run-http2.ts +29 -0
  329. package/examples/cloud-run-memory-limit.test.ts +11 -0
  330. package/examples/cloud-run-memory-limit.ts +10 -5
  331. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  332. package/examples/cloud-run-meteor-with-worker.ts +37 -0
  333. package/examples/cloud-run-nextjs.test.ts +11 -0
  334. package/examples/cloud-run-nextjs.ts +28 -0
  335. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  336. package/examples/cloud-run-no-cpu-throttling.ts +6 -4
  337. package/examples/cloud-run-no-service.test.ts +11 -0
  338. package/examples/cloud-run-no-service.ts +33 -0
  339. package/examples/cloud-run-non-public.test.ts +11 -0
  340. package/examples/cloud-run-non-public.ts +5 -4
  341. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  342. package/examples/cloud-run-post-stop-job.ts +42 -0
  343. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  344. package/examples/cloud-run-service-custom-vpc-connector.ts +30 -0
  345. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  346. package/examples/cloud-run-service-custom-vpc.ts +31 -0
  347. package/examples/cloud-run-service-gen2.test.ts +11 -0
  348. package/examples/cloud-run-service-gen2.ts +29 -0
  349. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  350. package/examples/cloud-run-service-increase-timout.ts +29 -0
  351. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  352. package/examples/cloud-run-service-with-volumes.ts +56 -0
  353. package/examples/cloud-run-storybook.test.ts +11 -0
  354. package/examples/cloud-run-storybook.ts +33 -0
  355. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  356. package/examples/cloud-run-with-ngnix.ts +29 -0
  357. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  358. package/examples/cloud-run-with-sql-reuse-db.ts +5 -4
  359. package/examples/cloud-run-with-sql.test.ts +11 -0
  360. package/examples/cloud-run-with-sql.ts +6 -20
  361. package/examples/cloud-run-with-worker.test.ts +11 -0
  362. package/examples/cloud-run-with-worker.ts +37 -0
  363. package/examples/custom-build-job-with-tests.test.ts +11 -0
  364. package/examples/custom-build-job-with-tests.ts +5 -4
  365. package/examples/custom-build-job.test.ts +11 -0
  366. package/examples/custom-build-job.ts +5 -4
  367. package/examples/custom-deploy.test.ts +11 -0
  368. package/examples/custom-deploy.ts +12 -4
  369. package/examples/custom-envs.test.ts +11 -0
  370. package/examples/custom-envs.ts +5 -4
  371. package/examples/custom-sbom-java.test.ts +11 -0
  372. package/examples/custom-sbom-java.ts +10 -6
  373. package/examples/git-submodule.test.ts +11 -0
  374. package/examples/git-submodule.ts +30 -0
  375. package/examples/kubernetes-application-customization.test.ts +11 -0
  376. package/examples/kubernetes-application-customization.ts +7 -4
  377. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  378. package/examples/kubernetes-with-cloud-sql.ts +7 -4
  379. package/examples/kubernetes-with-jobs.test.ts +11 -0
  380. package/examples/kubernetes-with-jobs.ts +7 -4
  381. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  382. package/examples/kubernetes-with-mongodb.ts +7 -4
  383. package/examples/local-dot-env.test.ts +11 -0
  384. package/examples/local-dot-env.ts +27 -0
  385. package/examples/meteor-kubernetes.test.ts +11 -0
  386. package/examples/meteor-kubernetes.ts +4 -5
  387. package/examples/multiline-var.test.ts +11 -0
  388. package/examples/multiline-var.ts +107 -0
  389. package/examples/native-app.test.ts +11 -0
  390. package/examples/native-app.ts +22 -17
  391. package/examples/node-build-with-custom-image.test.ts +11 -0
  392. package/examples/node-build-with-custom-image.ts +5 -4
  393. package/examples/node-build-with-docker-additions.test.ts +11 -0
  394. package/examples/node-build-with-docker-additions.ts +29 -0
  395. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  396. package/examples/rails-k8s-with-worker.test.ts +11 -0
  397. package/examples/rails-k8s-with-worker.ts +14 -11
  398. package/examples/referencing-other-vars.test.ts +11 -0
  399. package/examples/referencing-other-vars.ts +83 -0
  400. package/examples/wait-for-other-deploy.test.ts +11 -0
  401. package/examples/wait-for-other-deploy.ts +5 -4
  402. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  403. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  404. package/examples/workspace-api-www.test.ts +11 -0
  405. package/examples/workspace-api-www.ts +46 -0
  406. package/package.json +75 -26
  407. package/scripts/generate-examples-test.ts +84 -0
  408. package/scripts/generate-gitlab-ci-types.ts +2 -2
  409. package/scripts/tsconfig.json +7 -0
  410. package/src/bash/BashExpression.ts +78 -0
  411. package/src/bash/bashEscape.ts +158 -0
  412. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  413. package/src/bash/bashYaml.ts +80 -0
  414. package/src/bash/getInjectVarsScript.ts +21 -0
  415. package/src/bash/index.ts +2 -0
  416. package/src/build/artifacts/createBuildJobArtifact.ts +61 -0
  417. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  418. package/src/build/base/constants.ts +2 -2
  419. package/src/build/base/createAppBuildJob.ts +40 -24
  420. package/src/build/base/createArtifactsConfig.ts +2 -2
  421. package/src/build/base/createBuildJobDefinition.ts +37 -0
  422. package/src/build/base/index.ts +37 -8
  423. package/src/build/base/writeBuildInfo.ts +3 -3
  424. package/src/build/base/writeDotEnv.ts +25 -6
  425. package/src/build/cache/createJobCache.ts +83 -0
  426. package/src/build/cache/getAllCacheConfigsFromConfig.ts +28 -0
  427. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  428. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  429. package/src/build/custom/buildJob.ts +11 -37
  430. package/src/build/custom/index.ts +2 -2
  431. package/src/build/custom/testJob.ts +24 -22
  432. package/src/build/docker.ts +145 -49
  433. package/src/build/index.ts +42 -10
  434. package/src/build/node/buildJob.ts +65 -62
  435. package/src/build/node/cache.ts +30 -35
  436. package/src/build/node/constants.ts +2 -3
  437. package/src/build/node/index.ts +8 -4
  438. package/src/build/node/meteor.ts +16 -24
  439. package/src/build/node/testJob.ts +47 -26
  440. package/src/build/node/yarn.ts +32 -16
  441. package/src/build/rails/build.ts +21 -9
  442. package/src/build/rails/index.ts +2 -2
  443. package/src/build/rails/test.ts +22 -12
  444. package/src/build/sbom.ts +15 -10
  445. package/src/build/types.ts +190 -47
  446. package/src/catladder-gitlab.ts +7 -56
  447. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  448. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  449. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  450. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  451. package/src/config/configruedEnvs.ts +6 -6
  452. package/src/config/readConfig.ts +15 -22
  453. package/src/constants.ts +5 -2
  454. package/src/context/createAllComponentsContext.ts +31 -0
  455. package/src/context/createComponentContext.ts +134 -0
  456. package/src/context/createWorkspaceContext.ts +56 -0
  457. package/src/context/getBuildInfoVariables.ts +36 -0
  458. package/src/context/getEnvConfig.ts +3 -3
  459. package/src/context/getEnvType.ts +1 -1
  460. package/src/context/getEnvironment.ts +8 -24
  461. package/src/context/getEnvironmentContext.ts +25 -29
  462. package/src/context/getEnvironmentVariables.ts +104 -76
  463. package/src/context/getLabels.ts +5 -5
  464. package/src/context/getReviewSlug.ts +27 -0
  465. package/src/context/index.ts +1 -65
  466. package/src/context/transformJobOnlyVars.ts +6 -3
  467. package/src/context/utils/envVars.ts +5 -4
  468. package/src/deploy/base/deploy.ts +63 -47
  469. package/src/deploy/base/index.ts +11 -6
  470. package/src/deploy/base/rollback.ts +11 -16
  471. package/src/deploy/base/stop.ts +11 -15
  472. package/src/deploy/base/variables.ts +1 -2
  473. package/src/deploy/cloudRun/artifactsRegistry.ts +126 -0
  474. package/src/deploy/cloudRun/cleanup.ts +30 -0
  475. package/src/deploy/cloudRun/cloudRunRevisions.ts +65 -0
  476. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +227 -0
  477. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +86 -0
  478. package/src/deploy/cloudRun/createJobs/common.ts +59 -0
  479. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  480. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +71 -0
  481. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +34 -0
  482. package/src/deploy/cloudRun/createJobs/index.ts +51 -0
  483. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  484. package/src/deploy/cloudRun/index.ts +85 -59
  485. package/src/deploy/cloudRun/utils/createArgsString.ts +21 -13
  486. package/src/deploy/cloudRun/utils/database.ts +31 -9
  487. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +9 -11
  488. package/src/deploy/cloudRun/utils/getServiceName.ts +3 -0
  489. package/src/deploy/cloudRun/utils/jobName.ts +7 -2
  490. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +12 -0
  491. package/src/deploy/cloudSql/utils.ts +13 -10
  492. package/src/deploy/custom/deployJob.ts +15 -10
  493. package/src/deploy/custom/index.ts +2 -2
  494. package/src/deploy/dockerTag/deployJob.ts +7 -8
  495. package/src/deploy/dockerTag/index.ts +8 -7
  496. package/src/deploy/index.ts +15 -12
  497. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  498. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  499. package/src/deploy/kubernetes/deployJob.ts +30 -21
  500. package/src/deploy/kubernetes/index.ts +43 -35
  501. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  502. package/src/deploy/kubernetes/kubeValues.ts +15 -19
  503. package/src/deploy/kubernetes/mongodb.ts +15 -15
  504. package/src/deploy/sbom.ts +18 -10
  505. package/src/deploy/types/base.ts +3 -3
  506. package/src/deploy/types/custom.ts +3 -7
  507. package/src/deploy/types/dockerTag.ts +2 -0
  508. package/src/deploy/types/googleCloudRun.ts +133 -10
  509. package/src/deploy/types/index.ts +2 -2
  510. package/src/deploy/types/kubernetes.ts +5 -36
  511. package/src/deploy/utils.ts +5 -5
  512. package/src/globalScriptFunctions/index.ts +30 -0
  513. package/src/index.ts +4 -1
  514. package/src/packageInfos.ts +14 -0
  515. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  516. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  517. package/src/pipeline/createAllJobs.ts +67 -33
  518. package/src/pipeline/createJobsForComponent.ts +10 -38
  519. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  520. package/src/pipeline/createMainPipeline.ts +119 -0
  521. package/src/pipeline/generatePipelineFiles.ts +100 -0
  522. package/src/pipeline/getPipelineStages.ts +23 -0
  523. package/src/pipeline/gitlab/createGitlabJobs.ts +388 -108
  524. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  525. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  526. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  527. package/src/pipeline/index.ts +2 -1
  528. package/src/pipeline/packageManager.ts +44 -26
  529. package/src/pipeline/yarn/yarnUtils.ts +39 -10
  530. package/src/rules/index.ts +36 -9
  531. package/src/runner/index.ts +0 -1
  532. package/src/types/config.ts +43 -16
  533. package/src/types/context.ts +165 -37
  534. package/src/types/environmentContext.ts +18 -13
  535. package/src/types/gitlab-ci-yml.ts +0 -1
  536. package/src/types/gitlab-types.ts +10 -7
  537. package/src/types/index.ts +1 -0
  538. package/src/types/jobDefinition.ts +34 -0
  539. package/src/types/jobs.ts +31 -15
  540. package/src/types/utils.ts +4 -4
  541. package/src/utils/gitlab.ts +20 -3
  542. package/src/utils/index.ts +6 -3
  543. package/src/utils/jsonParse.ts +7 -0
  544. package/src/utils/removeUndefined.ts +4 -0
  545. package/src/utils/writeFiles.ts +52 -0
  546. package/src/variables/VariableValue.ts +6 -0
  547. package/src/variables/VariableValueContainingReferences.ts +89 -0
  548. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  549. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  550. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  551. package/src/variables/__tests__/variableValue.test.ts +73 -0
  552. package/src/variables/resolveAllReferences.ts +46 -0
  553. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  554. package/src/variables/resolveReferencesOnce.ts +29 -0
  555. package/bin/catladder-gitlab-dev.js +0 -3
  556. package/bin/catladder-gitlab.js +0 -3
  557. package/dist/bundles/catladder-gitlab/index.js +0 -33838
  558. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  559. package/dist/context/resolveReferences.d.ts +0 -4
  560. package/dist/context/resolveReferences.js +0 -254
  561. package/dist/deploy/cloudRun/deployJob.d.ts +0 -3
  562. package/dist/deploy/cloudRun/deployJob.js +0 -248
  563. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  564. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  565. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  566. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  567. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  568. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1780
  569. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1780
  570. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1780
  571. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3532
  572. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3543
  573. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1656
  574. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1362
  575. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1556
  576. package/examples/__snapshots__/custom-envs.ts.snap +0 -1050
  577. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1370
  578. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2468
  579. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2428
  580. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2440
  581. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4453
  582. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2632
  583. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2557
  584. package/examples/__snapshots__/native-app.ts.snap +0 -2878
  585. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1780
  586. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4189
  587. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -1922
  588. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  589. package/scripts/bundle +0 -2
  590. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  591. package/src/context/resolveReferences.ts +0 -70
  592. package/src/deploy/cloudRun/deployJob.ts +0 -301
  593. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  594. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  595. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  596. package/src/pipeline/createChildPipeline.ts +0 -45
  597. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
package/examples/__snapshots__/meteor-kubernetes.ts.snap DELETED
@@ -1,2557 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "web ↩️ Rollback ⚠️ | dev ": {
9
- "environment": {
10
- "action": "access",
11
- "name": "dev/web",
12
- "url": "https://web.dev.my-app.pan.panter.cloud",
13
- },
14
- "image": "path/to/docker/kubernetes:the-version",
15
- "interruptible": true,
16
- "needs": [],
17
- "retry": {
18
- "max": 2,
19
- "when": [
20
- "runner_system_failure",
21
- "stuck_or_timeout_failure",
22
- ],
23
- },
24
- "rules": [
25
- {
26
- "allow_failure": true,
27
- "when": "manual",
28
- },
29
- ],
30
- "script": [
31
- "kubectl config set-cluster "kube-pan-my-app-dev-web" --server="$CL_dev_web_KUBE_URL" --certificate-authority <(echo $CL_dev_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
32
- "kubectl config set-credentials "kube-pan-my-app-dev-web" --token="$CL_dev_web_KUBE_TOKEN"",
33
- "kubectl config set-context "kube-pan-my-app-dev-web" --cluster="kube-pan-my-app-dev-web" --user="kube-pan-my-app-dev-web" --namespace="pan-my-app-dev"",
34
- "kubectl config use-context "kube-pan-my-app-dev-web"",
35
- "kubernetesRollback",
36
- ],
37
- "stage": "rollback dev",
38
- "variables": {
39
- "APP_DIR": "app",
40
- "BUILD_ID": "some-id",
41
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
42
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
43
- "BUILD_INFO_ID": "some-id",
44
- "COMPONENT_NAME": "web",
45
- "ENV_SHORT": "dev",
46
- "ENV_TYPE": "dev",
47
- "GIT_STRATEGY": "none",
48
- "HELM_ARGS": "",
49
- "HELM_EXPERIMENTAL_OCI": "1",
50
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
51
- "HOST": "web.dev.my-app.pan.panter.cloud",
52
- "HOST_CANONICAL": "web.dev.my-app.pan.panter.cloud",
53
- "KUBERNETES_CPU_LIMIT": "1",
54
- "KUBERNETES_CPU_REQUEST": "0.5",
55
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
56
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
57
- "KUBE_APP_NAME": "web",
58
- "KUBE_APP_NAME_PREFIX": "",
59
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
60
- "KUBE_NAMESPACE": "pan-my-app-dev",
61
- "KUBE_VALUES": "env:
62
- secret:
63
- MONGODB_ROOT_PASSWORD: '$CL_dev_web_MONGODB_ROOT_PASSWORD'
64
- MONGO_URL: 'mongodb://root:$CL_dev_web_MONGODB_ROOT_PASSWORD@web-mongodb.pan-my-app-dev.svc.cluster.local:27017/app?authSource=admin'
65
- public:
66
- ENV_SHORT: 'dev'
67
- APP_DIR: 'app'
68
- ENV_TYPE: 'dev'
69
- BUILD_INFO_ID: 'some-id'
70
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
71
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
72
- HOST: 'web.dev.my-app.pan.panter.cloud'
73
- ROOT_URL: 'https://web.dev.my-app.pan.panter.cloud'
74
- KUBE_NAMESPACE: 'pan-my-app-dev'
75
- KUBE_APP_NAME: 'web'
76
- KUBE_APP_NAME_PREFIX: ''
77
- HOST_CANONICAL: 'web.dev.my-app.pan.panter.cloud'
78
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
79
- application:
80
- host: 'web.dev.my-app.pan.panter.cloud'
81
- command: 'node main.js'
82
- livenessProbe:
83
- httpGet:
84
- path: '__health'
85
- readinessProbe:
86
- httpGet:
87
- path: '__health'
88
- startupProbe:
89
- httpGet:
90
- path: '__health'
91
- worker:
92
- enabled: true
93
- mongodb:
94
- enabled: true
95
- auth:
96
- enabled: true
97
- rootPassword: '$CL_dev_web_MONGODB_ROOT_PASSWORD'
98
- replicaSetKey: '$CL_dev_web_MONGODB_REPLICASET_KEY'
99
- persistence:
100
- storageClass: 'standard-rwo'
101
- backup:
102
- enabled: false
103
- hostToBackup: 'web-mongodb.pan-my-app-dev.svc.cluster.local:27017'
104
- pvcToBackup: 'web-mongodb'
105
- image: 'mrelite/kubectlmongoshell:v1.0'
106
- schedule: '0 4 * * *'
107
- volumeSnapshotClass: 'snapshotclass'
108
- architecture: 'standalone'
109
- ",
110
- "MONGODB_ROOT_PASSWORD": "$CL_dev_web_MONGODB_ROOT_PASSWORD",
111
- "RELEASE_NAME": "pan-my-app-dev-web",
112
- "ROOT_URL": "https://web.dev.my-app.pan.panter.cloud",
113
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
114
- },
115
- },
116
- "web 👮 lint": {
117
- "cache": [
118
- {
119
- "key": "app-yarn",
120
- "paths": [
121
- "app/.yarn",
122
- ],
123
- "policy": "pull-push",
124
- },
125
- {
126
- "key": "app-node-modules",
127
- "paths": [
128
- "app/node_modules",
129
- ],
130
- "policy": "pull-push",
131
- },
132
- ],
133
- "image": "path/to/docker/jobs-default:the-version",
134
- "interruptible": true,
135
- "needs": [],
136
- "retry": {
137
- "max": 2,
138
- "when": [
139
- "runner_system_failure",
140
- "stuck_or_timeout_failure",
141
- ],
142
- },
143
- "script": [
144
- "cd app",
145
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
146
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
147
- "yarn install --immutable",
148
- "yarn lint",
149
- ],
150
- "stage": "test",
151
- "variables": {
152
- "APP_PATH": "app",
153
- "KUBERNETES_CPU_LIMIT": "2",
154
- "KUBERNETES_CPU_REQUEST": "0.5",
155
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
156
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
157
- },
158
- },
159
- "web 🔨 app | dev ": {
160
- "artifacts": {
161
- "paths": [
162
- "app/__build_info.json",
163
- "app/dist",
164
- ],
165
- "reports": {
166
- "junit": undefined,
167
- },
168
- },
169
- "cache": [
170
- {
171
- "key": "app-yarn",
172
- "paths": [
173
- "app/.yarn",
174
- ],
175
- "policy": "pull-push",
176
- },
177
- {
178
- "key": "app-node-modules",
179
- "paths": [
180
- "app/node_modules",
181
- ],
182
- "policy": "pull-push",
183
- },
184
- {
185
- "key": "webmeteor-build-cache",
186
- "paths": [
187
- "app/.meteor/local/resolver-result-cache.json",
188
- "app/.meteor/local/plugin-cache",
189
- "app/.meteor/local/isopacks",
190
- "app/.meteor/local/bundler-cache/scanner",
191
- ],
192
- "policy": "pull-push",
193
- },
194
- ],
195
- "image": "path/to/docker/jobs-meteor:the-version",
196
- "interruptible": true,
197
- "needs": [],
198
- "retry": {
199
- "max": 2,
200
- "when": [
201
- "runner_system_failure",
202
- "stuck_or_timeout_failure",
203
- ],
204
- },
205
- "script": [
206
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
207
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
208
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
209
- "cd app",
210
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
211
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
212
- "yarn install --immutable",
213
- "echo "add healthcheck package"",
214
- "meteor add panter:healthroute --allow-superuser",
215
- "meteor add qualia:prod-shell --allow-superuser",
216
- "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
217
- "cp ./__build_info.json ./dist/bundle/programs/server",
218
- ],
219
- "stage": "build",
220
- "variables": {
221
- "APP_DIR": "app",
222
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
223
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
224
- "BUILD_INFO_ID": "some-id",
225
- "ENV_SHORT": "dev",
226
- "ENV_TYPE": "dev",
227
- "HOST": "web.dev.my-app.pan.panter.cloud",
228
- "HOST_CANONICAL": "web.dev.my-app.pan.panter.cloud",
229
- "KUBERNETES_CPU_LIMIT": "2",
230
- "KUBERNETES_CPU_REQUEST": "0.5",
231
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
232
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
233
- "KUBE_APP_NAME": "web",
234
- "KUBE_APP_NAME_PREFIX": "",
235
- "KUBE_NAMESPACE": "pan-my-app-dev",
236
- "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
237
- "MONGODB_ROOT_PASSWORD": "$CL_dev_web_MONGODB_ROOT_PASSWORD",
238
- "ROOT_URL": "https://web.dev.my-app.pan.panter.cloud",
239
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
240
- },
241
- },
242
- "web 🔨 docker | dev ": {
243
- "image": "path/to/docker/docker-build:the-version",
244
- "interruptible": true,
245
- "needs": [
246
- "web 🔨 app | dev ",
247
- ],
248
- "retry": {
249
- "max": 2,
250
- "when": [
251
- "runner_system_failure",
252
- "stuck_or_timeout_failure",
253
- ],
254
- },
255
- "script": [
256
- "ensureMeteorDockerfile",
257
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
258
- "docker version",
259
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
260
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
261
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
262
- "docker push $DOCKER_CACHE_IMAGE",
263
- ],
264
- "services": [
265
- {
266
- "command": [
267
- "--tls=false",
268
- ],
269
- "name": "docker:20-dind",
270
- },
271
- ],
272
- "stage": "build",
273
- "variables": {
274
- "APP_DIR": "app",
275
- "DOCKERFILE_ADDITIONS": undefined,
276
- "DOCKERFILE_ADDITIONS_END": undefined,
277
- "DOCKER_BUILDKIT": "1",
278
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
279
- "DOCKER_DIR": ".",
280
- "DOCKER_DRIVER": "overlay2",
281
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
282
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
283
- "DOCKER_IMAGE_NAME": "dev/web",
284
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
285
- "DOCKER_REGISTRY": "$CI_REGISTRY",
286
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
287
- "DOCKER_TLS_CERTDIR": "",
288
- "KUBERNETES_CPU_LIMIT": "1",
289
- "KUBERNETES_CPU_REQUEST": "0.5",
290
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
291
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
292
- "METEOR_INSTALL_SCRIPTS": "",
293
- },
294
- },
295
- "web 🚀 Deploy | dev ": {
296
- "allow_failure": false,
297
- "environment": {
298
- "auto_stop_in": "4 weeks",
299
- "name": "dev/web",
300
- "on_stop": "web 🛑 Stop ⚠️ | dev ",
301
- "url": "https://web.dev.my-app.pan.panter.cloud",
302
- },
303
- "image": "path/to/docker/kubernetes:the-version",
304
- "interruptible": true,
305
- "needs": [
306
- {
307
- "artifacts": false,
308
- "job": "web 👮 lint",
309
- },
310
- {
311
- "artifacts": false,
312
- "job": "web 🔨 app | dev ",
313
- },
314
- {
315
- "artifacts": false,
316
- "job": "web 🔨 docker | dev ",
317
- },
318
- {
319
- "artifacts": false,
320
- "job": "web 🧪 test",
321
- },
322
- {
323
- "artifacts": true,
324
- "job": "web 🧾 sbom | dev ",
325
- },
326
- {
327
- "artifacts": false,
328
- "job": "web 🛡 audit",
329
- },
330
- ],
331
- "retry": {
332
- "max": 2,
333
- "when": [
334
- "runner_system_failure",
335
- "stuck_or_timeout_failure",
336
- ],
337
- },
338
- "rules": [
339
- {
340
- "when": "on_success",
341
- },
342
- ],
343
- "script": [
344
- "kubectl config set-cluster "kube-pan-my-app-dev-web" --server="$CL_dev_web_KUBE_URL" --certificate-authority <(echo $CL_dev_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
345
- "kubectl config set-credentials "kube-pan-my-app-dev-web" --token="$CL_dev_web_KUBE_TOKEN"",
346
- "kubectl config set-context "kube-pan-my-app-dev-web" --cluster="kube-pan-my-app-dev-web" --user="kube-pan-my-app-dev-web" --namespace="pan-my-app-dev"",
347
- "kubectl config use-context "kube-pan-my-app-dev-web"",
348
- "kubernetesCreateSecret",
349
- "kubernetesDeploy",
350
- "echo Uploading SBOM to Dependency Track",
351
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-my-app/web" "https://web.dev.my-app.pan.panter.cloud" "__sbom.json" vex.json || true",
352
- "echo deployment successful 😻",
353
- ],
354
- "stage": "deploy dev",
355
- "variables": {
356
- "APP_DIR": "app",
357
- "BUILD_ID": "some-id",
358
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
359
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
360
- "BUILD_INFO_ID": "some-id",
361
- "COMPONENT_NAME": "web",
362
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
363
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
364
- "DOCKER_IMAGE_NAME": "dev/web",
365
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
366
- "DOCKER_REGISTRY": "$CI_REGISTRY",
367
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
368
- "ENV_SHORT": "dev",
369
- "ENV_TYPE": "dev",
370
- "HELM_ARGS": "",
371
- "HELM_EXPERIMENTAL_OCI": "1",
372
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
373
- "HOST": "web.dev.my-app.pan.panter.cloud",
374
- "HOST_CANONICAL": "web.dev.my-app.pan.panter.cloud",
375
- "KUBERNETES_CPU_LIMIT": "1",
376
- "KUBERNETES_CPU_REQUEST": "0.5",
377
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
378
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
379
- "KUBE_APP_NAME": "web",
380
- "KUBE_APP_NAME_PREFIX": "",
381
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
382
- "KUBE_NAMESPACE": "pan-my-app-dev",
383
- "KUBE_VALUES": "env:
384
- secret:
385
- MONGODB_ROOT_PASSWORD: '$CL_dev_web_MONGODB_ROOT_PASSWORD'
386
- MONGO_URL: 'mongodb://root:$CL_dev_web_MONGODB_ROOT_PASSWORD@web-mongodb.pan-my-app-dev.svc.cluster.local:27017/app?authSource=admin'
387
- public:
388
- ENV_SHORT: 'dev'
389
- APP_DIR: 'app'
390
- ENV_TYPE: 'dev'
391
- BUILD_INFO_ID: 'some-id'
392
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
393
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
394
- HOST: 'web.dev.my-app.pan.panter.cloud'
395
- ROOT_URL: 'https://web.dev.my-app.pan.panter.cloud'
396
- KUBE_NAMESPACE: 'pan-my-app-dev'
397
- KUBE_APP_NAME: 'web'
398
- KUBE_APP_NAME_PREFIX: ''
399
- HOST_CANONICAL: 'web.dev.my-app.pan.panter.cloud'
400
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
401
- application:
402
- host: 'web.dev.my-app.pan.panter.cloud'
403
- command: 'node main.js'
404
- livenessProbe:
405
- httpGet:
406
- path: '__health'
407
- readinessProbe:
408
- httpGet:
409
- path: '__health'
410
- startupProbe:
411
- httpGet:
412
- path: '__health'
413
- worker:
414
- enabled: true
415
- mongodb:
416
- enabled: true
417
- auth:
418
- enabled: true
419
- rootPassword: '$CL_dev_web_MONGODB_ROOT_PASSWORD'
420
- replicaSetKey: '$CL_dev_web_MONGODB_REPLICASET_KEY'
421
- persistence:
422
- storageClass: 'standard-rwo'
423
- backup:
424
- enabled: false
425
- hostToBackup: 'web-mongodb.pan-my-app-dev.svc.cluster.local:27017'
426
- pvcToBackup: 'web-mongodb'
427
- image: 'mrelite/kubectlmongoshell:v1.0'
428
- schedule: '0 4 * * *'
429
- volumeSnapshotClass: 'snapshotclass'
430
- architecture: 'standalone'
431
- ",
432
- "MONGODB_ROOT_PASSWORD": "$CL_dev_web_MONGODB_ROOT_PASSWORD",
433
- "RELEASE_NAME": "pan-my-app-dev-web",
434
- "ROOT_URL": "https://web.dev.my-app.pan.panter.cloud",
435
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
436
- },
437
- },
438
- "web 🛑 Stop ⚠️ | dev ": {
439
- "environment": {
440
- "action": "stop",
441
- "name": "dev/web",
442
- "url": "https://web.dev.my-app.pan.panter.cloud",
443
- },
444
- "image": "path/to/docker/kubernetes:the-version",
445
- "interruptible": true,
446
- "needs": [],
447
- "retry": {
448
- "max": 2,
449
- "when": [
450
- "runner_system_failure",
451
- "stuck_or_timeout_failure",
452
- ],
453
- },
454
- "rules": [
455
- {
456
- "allow_failure": true,
457
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
458
- "when": "on_success",
459
- },
460
- {
461
- "allow_failure": true,
462
- "when": "manual",
463
- },
464
- ],
465
- "script": [
466
- "kubectl config set-cluster "kube-pan-my-app-dev-web" --server="$CL_dev_web_KUBE_URL" --certificate-authority <(echo $CL_dev_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
467
- "kubectl config set-credentials "kube-pan-my-app-dev-web" --token="$CL_dev_web_KUBE_TOKEN"",
468
- "kubectl config set-context "kube-pan-my-app-dev-web" --cluster="kube-pan-my-app-dev-web" --user="kube-pan-my-app-dev-web" --namespace="pan-my-app-dev"",
469
- "kubectl config use-context "kube-pan-my-app-dev-web"",
470
- "kubernetesDelete",
471
- "echo Disabling component in Dependency Track",
472
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-my-app/web" "https://web.dev.my-app.pan.panter.cloud" || true",
473
- ],
474
- "stage": "stop dev",
475
- "variables": {
476
- "APP_DIR": "app",
477
- "BUILD_ID": "some-id",
478
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
479
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
480
- "BUILD_INFO_ID": "some-id",
481
- "COMPONENT_NAME": "web",
482
- "ENV_SHORT": "dev",
483
- "ENV_TYPE": "dev",
484
- "GIT_STRATEGY": "none",
485
- "HELM_ARGS": "",
486
- "HELM_EXPERIMENTAL_OCI": "1",
487
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
488
- "HOST": "web.dev.my-app.pan.panter.cloud",
489
- "HOST_CANONICAL": "web.dev.my-app.pan.panter.cloud",
490
- "KUBERNETES_CPU_LIMIT": "1",
491
- "KUBERNETES_CPU_REQUEST": "0.5",
492
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
493
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
494
- "KUBE_APP_NAME": "web",
495
- "KUBE_APP_NAME_PREFIX": "",
496
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
497
- "KUBE_NAMESPACE": "pan-my-app-dev",
498
- "KUBE_VALUES": "env:
499
- secret:
500
- MONGODB_ROOT_PASSWORD: '$CL_dev_web_MONGODB_ROOT_PASSWORD'
501
- MONGO_URL: 'mongodb://root:$CL_dev_web_MONGODB_ROOT_PASSWORD@web-mongodb.pan-my-app-dev.svc.cluster.local:27017/app?authSource=admin'
502
- public:
503
- ENV_SHORT: 'dev'
504
- APP_DIR: 'app'
505
- ENV_TYPE: 'dev'
506
- BUILD_INFO_ID: 'some-id'
507
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
508
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
509
- HOST: 'web.dev.my-app.pan.panter.cloud'
510
- ROOT_URL: 'https://web.dev.my-app.pan.panter.cloud'
511
- KUBE_NAMESPACE: 'pan-my-app-dev'
512
- KUBE_APP_NAME: 'web'
513
- KUBE_APP_NAME_PREFIX: ''
514
- HOST_CANONICAL: 'web.dev.my-app.pan.panter.cloud'
515
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
516
- application:
517
- host: 'web.dev.my-app.pan.panter.cloud'
518
- command: 'node main.js'
519
- livenessProbe:
520
- httpGet:
521
- path: '__health'
522
- readinessProbe:
523
- httpGet:
524
- path: '__health'
525
- startupProbe:
526
- httpGet:
527
- path: '__health'
528
- worker:
529
- enabled: true
530
- mongodb:
531
- enabled: true
532
- auth:
533
- enabled: true
534
- rootPassword: '$CL_dev_web_MONGODB_ROOT_PASSWORD'
535
- replicaSetKey: '$CL_dev_web_MONGODB_REPLICASET_KEY'
536
- persistence:
537
- storageClass: 'standard-rwo'
538
- backup:
539
- enabled: false
540
- hostToBackup: 'web-mongodb.pan-my-app-dev.svc.cluster.local:27017'
541
- pvcToBackup: 'web-mongodb'
542
- image: 'mrelite/kubectlmongoshell:v1.0'
543
- schedule: '0 4 * * *'
544
- volumeSnapshotClass: 'snapshotclass'
545
- architecture: 'standalone'
546
- ",
547
- "MONGODB_ROOT_PASSWORD": "$CL_dev_web_MONGODB_ROOT_PASSWORD",
548
- "RELEASE_NAME": "pan-my-app-dev-web",
549
- "ROOT_URL": "https://web.dev.my-app.pan.panter.cloud",
550
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
551
- },
552
- },
553
- "web 🛡 audit": {
554
- "allow_failure": true,
555
- "image": "path/to/docker/jobs-default:the-version",
556
- "interruptible": true,
557
- "needs": [],
558
- "retry": {
559
- "max": 2,
560
- "when": [
561
- "runner_system_failure",
562
- "stuck_or_timeout_failure",
563
- ],
564
- },
565
- "script": [
566
- "cd app",
567
- "yarn npm audit --environment production",
568
- ],
569
- "stage": "test",
570
- "variables": {
571
- "APP_PATH": "app",
572
- "KUBERNETES_CPU_LIMIT": "2",
573
- "KUBERNETES_CPU_REQUEST": "0.5",
574
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
575
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
576
- },
577
- },
578
- "web 🧪 test": {
579
- "cache": [
580
- {
581
- "key": "app-yarn",
582
- "paths": [
583
- "app/.yarn",
584
- ],
585
- "policy": "pull-push",
586
- },
587
- {
588
- "key": "app-node-modules",
589
- "paths": [
590
- "app/node_modules",
591
- ],
592
- "policy": "pull-push",
593
- },
594
- ],
595
- "image": "path/to/docker/jobs-testing-chrome:the-version",
596
- "interruptible": true,
597
- "needs": [],
598
- "retry": {
599
- "max": 2,
600
- "when": [
601
- "runner_system_failure",
602
- "stuck_or_timeout_failure",
603
- ],
604
- },
605
- "script": [
606
- "cd app",
607
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
608
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
609
- "yarn install --immutable",
610
- "yarn test",
611
- ],
612
- "stage": "test",
613
- "variables": {
614
- "APP_PATH": "app",
615
- "KUBERNETES_CPU_LIMIT": "2",
616
- "KUBERNETES_CPU_REQUEST": "0.5",
617
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
618
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
619
- },
620
- },
621
- "web 🧾 sbom | dev ": {
622
- "allow_failure": true,
623
- "artifacts": {
624
- "paths": [
625
- "__sbom.json",
626
- ],
627
- },
628
- "image": "aquasec/trivy:0.38.3",
629
- "interruptible": true,
630
- "needs": [],
631
- "retry": {
632
- "max": 2,
633
- "when": [
634
- "runner_system_failure",
635
- "stuck_or_timeout_failure",
636
- ],
637
- },
638
- "script": [
639
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
640
- ],
641
- "stage": "build",
642
- "variables": {},
643
- },
644
- },
645
- "stages": [
646
- "setup",
647
- "setup dev",
648
- "setup review",
649
- "setup stage",
650
- "setup prod",
651
- "setup local",
652
- "test",
653
- "test dev",
654
- "test review",
655
- "test stage",
656
- "test prod",
657
- "test local",
658
- "build",
659
- "build dev",
660
- "build review",
661
- "build stage",
662
- "build prod",
663
- "build local",
664
- "deploy",
665
- "deploy dev",
666
- "deploy review",
667
- "deploy stage",
668
- "deploy prod",
669
- "deploy local",
670
- "verify",
671
- "verify dev",
672
- "verify review",
673
- "verify stage",
674
- "verify prod",
675
- "verify local",
676
- "rollback",
677
- "rollback dev",
678
- "rollback review",
679
- "rollback stage",
680
- "rollback prod",
681
- "rollback local",
682
- "stop",
683
- "stop dev",
684
- "stop review",
685
- "stop stage",
686
- "stop prod",
687
- "stop local",
688
- ],
689
- "variables": {
690
- "FF_USE_FASTZIP": "true",
691
- },
692
- "workflow": {
693
- "rules": [
694
- {
695
- "if": "$CI_COMMIT_TAG",
696
- },
697
- {
698
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
699
- "when": "never",
700
- },
701
- {
702
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
703
- },
704
- {
705
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
706
- },
707
- {
708
- "if": "$CI_MERGE_REQUEST_ID",
709
- },
710
- ],
711
- },
712
- },
713
- "mr": {
714
- "image": "path/to/docker/jobs-default:the-version",
715
- "jobs": {
716
- "web ↩️ Rollback ⚠️ | review ": {
717
- "environment": {
718
- "action": "access",
719
- "name": "review/some-commit/web",
720
- "url": "https://web.mr1234.review.my-app.pan.panter.cloud",
721
- },
722
- "image": "path/to/docker/kubernetes:the-version",
723
- "interruptible": true,
724
- "needs": [],
725
- "retry": {
726
- "max": 2,
727
- "when": [
728
- "runner_system_failure",
729
- "stuck_or_timeout_failure",
730
- ],
731
- },
732
- "rules": [
733
- {
734
- "allow_failure": true,
735
- "when": "manual",
736
- },
737
- ],
738
- "script": [
739
- "kubectl config set-cluster "kube-pan-my-app-review-mr1234-web" --server="$CL_review_web_KUBE_URL" --certificate-authority <(echo $CL_review_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
740
- "kubectl config set-credentials "kube-pan-my-app-review-mr1234-web" --token="$CL_review_web_KUBE_TOKEN"",
741
- "kubectl config set-context "kube-pan-my-app-review-mr1234-web" --cluster="kube-pan-my-app-review-mr1234-web" --user="kube-pan-my-app-review-mr1234-web" --namespace="pan-my-app-review"",
742
- "kubectl config use-context "kube-pan-my-app-review-mr1234-web"",
743
- "kubernetesRollback",
744
- ],
745
- "stage": "rollback review",
746
- "variables": {
747
- "APP_DIR": "app",
748
- "BUILD_ID": "some-id",
749
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
750
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
751
- "BUILD_INFO_ID": "some-id",
752
- "COMPONENT_NAME": "web",
753
- "ENV_SHORT": "review",
754
- "ENV_TYPE": "review",
755
- "GIT_STRATEGY": "none",
756
- "HELM_ARGS": "",
757
- "HELM_EXPERIMENTAL_OCI": "1",
758
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
759
- "HOST": "web.mr1234.review.my-app.pan.panter.cloud",
760
- "HOST_CANONICAL": "web.mr1234.review.my-app.pan.panter.cloud",
761
- "KUBERNETES_CPU_LIMIT": "1",
762
- "KUBERNETES_CPU_REQUEST": "0.5",
763
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
764
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
765
- "KUBE_APP_NAME": "mr1234-web",
766
- "KUBE_APP_NAME_PREFIX": "mr1234-",
767
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
768
- "KUBE_NAMESPACE": "pan-my-app-review",
769
- "KUBE_VALUES": "env:
770
- secret:
771
- MONGODB_ROOT_PASSWORD: '$CL_review_web_MONGODB_ROOT_PASSWORD'
772
- MONGO_URL: 'mongodb://root:$CL_review_web_MONGODB_ROOT_PASSWORD@mr1234-web-mongodb.pan-my-app-review.svc.cluster.local:27017/app?authSource=admin'
773
- public:
774
- ENV_SHORT: 'review'
775
- APP_DIR: 'app'
776
- ENV_TYPE: 'review'
777
- BUILD_INFO_ID: 'some-id'
778
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
779
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
780
- HOST: 'web.mr1234.review.my-app.pan.panter.cloud'
781
- ROOT_URL: 'https://web.mr1234.review.my-app.pan.panter.cloud'
782
- KUBE_NAMESPACE: 'pan-my-app-review'
783
- KUBE_APP_NAME: 'mr1234-web'
784
- KUBE_APP_NAME_PREFIX: 'mr1234-'
785
- HOST_CANONICAL: 'web.mr1234.review.my-app.pan.panter.cloud'
786
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
787
- application:
788
- host: 'web.mr1234.review.my-app.pan.panter.cloud'
789
- command: 'node main.js'
790
- livenessProbe:
791
- httpGet:
792
- path: '__health'
793
- readinessProbe:
794
- httpGet:
795
- path: '__health'
796
- startupProbe:
797
- httpGet:
798
- path: '__health'
799
- worker:
800
- enabled: true
801
- mongodb:
802
- enabled: true
803
- auth:
804
- enabled: true
805
- rootPassword: '$CL_review_web_MONGODB_ROOT_PASSWORD'
806
- replicaSetKey: '$CL_review_web_MONGODB_REPLICASET_KEY'
807
- persistence:
808
- storageClass: 'standard-rwo'
809
- backup:
810
- enabled: false
811
- hostToBackup: 'mr1234-web-mongodb.pan-my-app-review.svc.cluster.local:27017'
812
- pvcToBackup: 'mr1234-web-mongodb'
813
- image: 'mrelite/kubectlmongoshell:v1.0'
814
- schedule: '0 4 * * *'
815
- volumeSnapshotClass: 'snapshotclass'
816
- architecture: 'standalone'
817
- ",
818
- "MONGODB_ROOT_PASSWORD": "$CL_review_web_MONGODB_ROOT_PASSWORD",
819
- "RELEASE_NAME": "pan-my-app-review-mr1234-web",
820
- "ROOT_URL": "https://web.mr1234.review.my-app.pan.panter.cloud",
821
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
822
- },
823
- },
824
- "web 👮 lint": {
825
- "cache": [
826
- {
827
- "key": "app-yarn",
828
- "paths": [
829
- "app/.yarn",
830
- ],
831
- "policy": "pull-push",
832
- },
833
- {
834
- "key": "app-node-modules",
835
- "paths": [
836
- "app/node_modules",
837
- ],
838
- "policy": "pull-push",
839
- },
840
- ],
841
- "image": "path/to/docker/jobs-default:the-version",
842
- "interruptible": true,
843
- "needs": [],
844
- "retry": {
845
- "max": 2,
846
- "when": [
847
- "runner_system_failure",
848
- "stuck_or_timeout_failure",
849
- ],
850
- },
851
- "script": [
852
- "cd app",
853
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
854
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
855
- "yarn install --immutable",
856
- "yarn lint",
857
- ],
858
- "stage": "test",
859
- "variables": {
860
- "APP_PATH": "app",
861
- "KUBERNETES_CPU_LIMIT": "2",
862
- "KUBERNETES_CPU_REQUEST": "0.5",
863
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
864
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
865
- },
866
- },
867
- "web 🔨 app | review ": {
868
- "artifacts": {
869
- "paths": [
870
- "app/__build_info.json",
871
- "app/dist",
872
- ],
873
- "reports": {
874
- "junit": undefined,
875
- },
876
- },
877
- "cache": [
878
- {
879
- "key": "app-yarn",
880
- "paths": [
881
- "app/.yarn",
882
- ],
883
- "policy": "pull-push",
884
- },
885
- {
886
- "key": "app-node-modules",
887
- "paths": [
888
- "app/node_modules",
889
- ],
890
- "policy": "pull-push",
891
- },
892
- {
893
- "key": "webmeteor-build-cache",
894
- "paths": [
895
- "app/.meteor/local/resolver-result-cache.json",
896
- "app/.meteor/local/plugin-cache",
897
- "app/.meteor/local/isopacks",
898
- "app/.meteor/local/bundler-cache/scanner",
899
- ],
900
- "policy": "pull-push",
901
- },
902
- ],
903
- "image": "path/to/docker/jobs-meteor:the-version",
904
- "interruptible": true,
905
- "needs": [],
906
- "retry": {
907
- "max": 2,
908
- "when": [
909
- "runner_system_failure",
910
- "stuck_or_timeout_failure",
911
- ],
912
- },
913
- "script": [
914
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
915
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
916
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
917
- "cd app",
918
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
919
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
920
- "yarn install --immutable",
921
- "echo "add healthcheck package"",
922
- "meteor add panter:healthroute --allow-superuser",
923
- "meteor add qualia:prod-shell --allow-superuser",
924
- "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
925
- "cp ./__build_info.json ./dist/bundle/programs/server",
926
- ],
927
- "stage": "build",
928
- "variables": {
929
- "APP_DIR": "app",
930
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
931
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
932
- "BUILD_INFO_ID": "some-id",
933
- "ENV_SHORT": "review",
934
- "ENV_TYPE": "review",
935
- "HOST": "web.mr1234.review.my-app.pan.panter.cloud",
936
- "HOST_CANONICAL": "web.mr1234.review.my-app.pan.panter.cloud",
937
- "KUBERNETES_CPU_LIMIT": "2",
938
- "KUBERNETES_CPU_REQUEST": "0.5",
939
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
940
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
941
- "KUBE_APP_NAME": "mr1234-web",
942
- "KUBE_APP_NAME_PREFIX": "mr1234-",
943
- "KUBE_NAMESPACE": "pan-my-app-review",
944
- "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
945
- "MONGODB_ROOT_PASSWORD": "$CL_review_web_MONGODB_ROOT_PASSWORD",
946
- "ROOT_URL": "https://web.mr1234.review.my-app.pan.panter.cloud",
947
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
948
- },
949
- },
950
- "web 🔨 docker | review ": {
951
- "image": "path/to/docker/docker-build:the-version",
952
- "interruptible": true,
953
- "needs": [
954
- "web 🔨 app | review ",
955
- ],
956
- "retry": {
957
- "max": 2,
958
- "when": [
959
- "runner_system_failure",
960
- "stuck_or_timeout_failure",
961
- ],
962
- },
963
- "script": [
964
- "ensureMeteorDockerfile",
965
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
966
- "docker version",
967
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
968
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
969
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
970
- "docker push $DOCKER_CACHE_IMAGE",
971
- ],
972
- "services": [
973
- {
974
- "command": [
975
- "--tls=false",
976
- ],
977
- "name": "docker:20-dind",
978
- },
979
- ],
980
- "stage": "build",
981
- "variables": {
982
- "APP_DIR": "app",
983
- "DOCKERFILE_ADDITIONS": undefined,
984
- "DOCKERFILE_ADDITIONS_END": undefined,
985
- "DOCKER_BUILDKIT": "1",
986
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
987
- "DOCKER_DIR": ".",
988
- "DOCKER_DRIVER": "overlay2",
989
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
990
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
991
- "DOCKER_IMAGE_NAME": "review/web",
992
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
993
- "DOCKER_REGISTRY": "$CI_REGISTRY",
994
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
995
- "DOCKER_TLS_CERTDIR": "",
996
- "KUBERNETES_CPU_LIMIT": "1",
997
- "KUBERNETES_CPU_REQUEST": "0.5",
998
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
999
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1000
- "METEOR_INSTALL_SCRIPTS": "",
1001
- },
1002
- },
1003
- "web 🚀 Deploy | review ": {
1004
- "allow_failure": false,
1005
- "environment": {
1006
- "auto_stop_in": "2 week",
1007
- "name": "review/some-commit/web",
1008
- "on_stop": "web 🛑 Stop ⚠️ | review ",
1009
- "url": "https://web.mr1234.review.my-app.pan.panter.cloud",
1010
- },
1011
- "image": "path/to/docker/kubernetes:the-version",
1012
- "interruptible": true,
1013
- "needs": [
1014
- {
1015
- "artifacts": false,
1016
- "job": "web 👮 lint",
1017
- },
1018
- {
1019
- "artifacts": false,
1020
- "job": "web 🔨 app | review ",
1021
- },
1022
- {
1023
- "artifacts": false,
1024
- "job": "web 🔨 docker | review ",
1025
- },
1026
- {
1027
- "artifacts": false,
1028
- "job": "web 🧪 test",
1029
- },
1030
- {
1031
- "artifacts": true,
1032
- "job": "web 🧾 sbom | review ",
1033
- },
1034
- {
1035
- "artifacts": false,
1036
- "job": "web 🛡 audit",
1037
- },
1038
- ],
1039
- "retry": {
1040
- "max": 2,
1041
- "when": [
1042
- "runner_system_failure",
1043
- "stuck_or_timeout_failure",
1044
- ],
1045
- },
1046
- "rules": [
1047
- {
1048
- "when": "on_success",
1049
- },
1050
- ],
1051
- "script": [
1052
- "kubectl config set-cluster "kube-pan-my-app-review-mr1234-web" --server="$CL_review_web_KUBE_URL" --certificate-authority <(echo $CL_review_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1053
- "kubectl config set-credentials "kube-pan-my-app-review-mr1234-web" --token="$CL_review_web_KUBE_TOKEN"",
1054
- "kubectl config set-context "kube-pan-my-app-review-mr1234-web" --cluster="kube-pan-my-app-review-mr1234-web" --user="kube-pan-my-app-review-mr1234-web" --namespace="pan-my-app-review"",
1055
- "kubectl config use-context "kube-pan-my-app-review-mr1234-web"",
1056
- "kubernetesCreateSecret",
1057
- "kubernetesDeploy",
1058
- "echo Uploading SBOM to Dependency Track",
1059
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-my-app/web" "https://web.mr1234.review.my-app.pan.panter.cloud" "__sbom.json" vex.json || true",
1060
- "echo deployment successful 😻",
1061
- ],
1062
- "stage": "deploy review",
1063
- "variables": {
1064
- "APP_DIR": "app",
1065
- "BUILD_ID": "some-id",
1066
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1067
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1068
- "BUILD_INFO_ID": "some-id",
1069
- "COMPONENT_NAME": "web",
1070
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
1071
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1072
- "DOCKER_IMAGE_NAME": "review/web",
1073
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1074
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1075
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1076
- "ENV_SHORT": "review",
1077
- "ENV_TYPE": "review",
1078
- "HELM_ARGS": "",
1079
- "HELM_EXPERIMENTAL_OCI": "1",
1080
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1081
- "HOST": "web.mr1234.review.my-app.pan.panter.cloud",
1082
- "HOST_CANONICAL": "web.mr1234.review.my-app.pan.panter.cloud",
1083
- "KUBERNETES_CPU_LIMIT": "1",
1084
- "KUBERNETES_CPU_REQUEST": "0.5",
1085
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1086
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1087
- "KUBE_APP_NAME": "mr1234-web",
1088
- "KUBE_APP_NAME_PREFIX": "mr1234-",
1089
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
1090
- "KUBE_NAMESPACE": "pan-my-app-review",
1091
- "KUBE_VALUES": "env:
1092
- secret:
1093
- MONGODB_ROOT_PASSWORD: '$CL_review_web_MONGODB_ROOT_PASSWORD'
1094
- MONGO_URL: 'mongodb://root:$CL_review_web_MONGODB_ROOT_PASSWORD@mr1234-web-mongodb.pan-my-app-review.svc.cluster.local:27017/app?authSource=admin'
1095
- public:
1096
- ENV_SHORT: 'review'
1097
- APP_DIR: 'app'
1098
- ENV_TYPE: 'review'
1099
- BUILD_INFO_ID: 'some-id'
1100
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1101
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1102
- HOST: 'web.mr1234.review.my-app.pan.panter.cloud'
1103
- ROOT_URL: 'https://web.mr1234.review.my-app.pan.panter.cloud'
1104
- KUBE_NAMESPACE: 'pan-my-app-review'
1105
- KUBE_APP_NAME: 'mr1234-web'
1106
- KUBE_APP_NAME_PREFIX: 'mr1234-'
1107
- HOST_CANONICAL: 'web.mr1234.review.my-app.pan.panter.cloud'
1108
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
1109
- application:
1110
- host: 'web.mr1234.review.my-app.pan.panter.cloud'
1111
- command: 'node main.js'
1112
- livenessProbe:
1113
- httpGet:
1114
- path: '__health'
1115
- readinessProbe:
1116
- httpGet:
1117
- path: '__health'
1118
- startupProbe:
1119
- httpGet:
1120
- path: '__health'
1121
- worker:
1122
- enabled: true
1123
- mongodb:
1124
- enabled: true
1125
- auth:
1126
- enabled: true
1127
- rootPassword: '$CL_review_web_MONGODB_ROOT_PASSWORD'
1128
- replicaSetKey: '$CL_review_web_MONGODB_REPLICASET_KEY'
1129
- persistence:
1130
- storageClass: 'standard-rwo'
1131
- backup:
1132
- enabled: false
1133
- hostToBackup: 'mr1234-web-mongodb.pan-my-app-review.svc.cluster.local:27017'
1134
- pvcToBackup: 'mr1234-web-mongodb'
1135
- image: 'mrelite/kubectlmongoshell:v1.0'
1136
- schedule: '0 4 * * *'
1137
- volumeSnapshotClass: 'snapshotclass'
1138
- architecture: 'standalone'
1139
- ",
1140
- "MONGODB_ROOT_PASSWORD": "$CL_review_web_MONGODB_ROOT_PASSWORD",
1141
- "RELEASE_NAME": "pan-my-app-review-mr1234-web",
1142
- "ROOT_URL": "https://web.mr1234.review.my-app.pan.panter.cloud",
1143
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
1144
- },
1145
- },
1146
- "web 🛑 Stop ⚠️ | review ": {
1147
- "environment": {
1148
- "action": "stop",
1149
- "name": "review/some-commit/web",
1150
- "url": "https://web.mr1234.review.my-app.pan.panter.cloud",
1151
- },
1152
- "image": "path/to/docker/kubernetes:the-version",
1153
- "interruptible": true,
1154
- "needs": [],
1155
- "retry": {
1156
- "max": 2,
1157
- "when": [
1158
- "runner_system_failure",
1159
- "stuck_or_timeout_failure",
1160
- ],
1161
- },
1162
- "rules": [
1163
- {
1164
- "allow_failure": true,
1165
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1166
- "when": "on_success",
1167
- },
1168
- {
1169
- "allow_failure": true,
1170
- "when": "manual",
1171
- },
1172
- ],
1173
- "script": [
1174
- "kubectl config set-cluster "kube-pan-my-app-review-mr1234-web" --server="$CL_review_web_KUBE_URL" --certificate-authority <(echo $CL_review_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1175
- "kubectl config set-credentials "kube-pan-my-app-review-mr1234-web" --token="$CL_review_web_KUBE_TOKEN"",
1176
- "kubectl config set-context "kube-pan-my-app-review-mr1234-web" --cluster="kube-pan-my-app-review-mr1234-web" --user="kube-pan-my-app-review-mr1234-web" --namespace="pan-my-app-review"",
1177
- "kubectl config use-context "kube-pan-my-app-review-mr1234-web"",
1178
- "kubernetesDelete",
1179
- "echo Disabling component in Dependency Track",
1180
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-my-app/web" "https://web.mr1234.review.my-app.pan.panter.cloud" || true",
1181
- ],
1182
- "stage": "stop review",
1183
- "variables": {
1184
- "APP_DIR": "app",
1185
- "BUILD_ID": "some-id",
1186
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1187
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1188
- "BUILD_INFO_ID": "some-id",
1189
- "COMPONENT_NAME": "web",
1190
- "ENV_SHORT": "review",
1191
- "ENV_TYPE": "review",
1192
- "GIT_STRATEGY": "none",
1193
- "HELM_ARGS": "",
1194
- "HELM_EXPERIMENTAL_OCI": "1",
1195
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1196
- "HOST": "web.mr1234.review.my-app.pan.panter.cloud",
1197
- "HOST_CANONICAL": "web.mr1234.review.my-app.pan.panter.cloud",
1198
- "KUBERNETES_CPU_LIMIT": "1",
1199
- "KUBERNETES_CPU_REQUEST": "0.5",
1200
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1201
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1202
- "KUBE_APP_NAME": "mr1234-web",
1203
- "KUBE_APP_NAME_PREFIX": "mr1234-",
1204
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
1205
- "KUBE_NAMESPACE": "pan-my-app-review",
1206
- "KUBE_VALUES": "env:
1207
- secret:
1208
- MONGODB_ROOT_PASSWORD: '$CL_review_web_MONGODB_ROOT_PASSWORD'
1209
- MONGO_URL: 'mongodb://root:$CL_review_web_MONGODB_ROOT_PASSWORD@mr1234-web-mongodb.pan-my-app-review.svc.cluster.local:27017/app?authSource=admin'
1210
- public:
1211
- ENV_SHORT: 'review'
1212
- APP_DIR: 'app'
1213
- ENV_TYPE: 'review'
1214
- BUILD_INFO_ID: 'some-id'
1215
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1216
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1217
- HOST: 'web.mr1234.review.my-app.pan.panter.cloud'
1218
- ROOT_URL: 'https://web.mr1234.review.my-app.pan.panter.cloud'
1219
- KUBE_NAMESPACE: 'pan-my-app-review'
1220
- KUBE_APP_NAME: 'mr1234-web'
1221
- KUBE_APP_NAME_PREFIX: 'mr1234-'
1222
- HOST_CANONICAL: 'web.mr1234.review.my-app.pan.panter.cloud'
1223
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
1224
- application:
1225
- host: 'web.mr1234.review.my-app.pan.panter.cloud'
1226
- command: 'node main.js'
1227
- livenessProbe:
1228
- httpGet:
1229
- path: '__health'
1230
- readinessProbe:
1231
- httpGet:
1232
- path: '__health'
1233
- startupProbe:
1234
- httpGet:
1235
- path: '__health'
1236
- worker:
1237
- enabled: true
1238
- mongodb:
1239
- enabled: true
1240
- auth:
1241
- enabled: true
1242
- rootPassword: '$CL_review_web_MONGODB_ROOT_PASSWORD'
1243
- replicaSetKey: '$CL_review_web_MONGODB_REPLICASET_KEY'
1244
- persistence:
1245
- storageClass: 'standard-rwo'
1246
- backup:
1247
- enabled: false
1248
- hostToBackup: 'mr1234-web-mongodb.pan-my-app-review.svc.cluster.local:27017'
1249
- pvcToBackup: 'mr1234-web-mongodb'
1250
- image: 'mrelite/kubectlmongoshell:v1.0'
1251
- schedule: '0 4 * * *'
1252
- volumeSnapshotClass: 'snapshotclass'
1253
- architecture: 'standalone'
1254
- ",
1255
- "MONGODB_ROOT_PASSWORD": "$CL_review_web_MONGODB_ROOT_PASSWORD",
1256
- "RELEASE_NAME": "pan-my-app-review-mr1234-web",
1257
- "ROOT_URL": "https://web.mr1234.review.my-app.pan.panter.cloud",
1258
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
1259
- },
1260
- },
1261
- "web 🛡 audit": {
1262
- "allow_failure": true,
1263
- "image": "path/to/docker/jobs-default:the-version",
1264
- "interruptible": true,
1265
- "needs": [],
1266
- "retry": {
1267
- "max": 2,
1268
- "when": [
1269
- "runner_system_failure",
1270
- "stuck_or_timeout_failure",
1271
- ],
1272
- },
1273
- "script": [
1274
- "cd app",
1275
- "yarn npm audit --environment production",
1276
- ],
1277
- "stage": "test",
1278
- "variables": {
1279
- "APP_PATH": "app",
1280
- "KUBERNETES_CPU_LIMIT": "2",
1281
- "KUBERNETES_CPU_REQUEST": "0.5",
1282
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1283
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1284
- },
1285
- },
1286
- "web 🧪 test": {
1287
- "cache": [
1288
- {
1289
- "key": "app-yarn",
1290
- "paths": [
1291
- "app/.yarn",
1292
- ],
1293
- "policy": "pull-push",
1294
- },
1295
- {
1296
- "key": "app-node-modules",
1297
- "paths": [
1298
- "app/node_modules",
1299
- ],
1300
- "policy": "pull-push",
1301
- },
1302
- ],
1303
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1304
- "interruptible": true,
1305
- "needs": [],
1306
- "retry": {
1307
- "max": 2,
1308
- "when": [
1309
- "runner_system_failure",
1310
- "stuck_or_timeout_failure",
1311
- ],
1312
- },
1313
- "script": [
1314
- "cd app",
1315
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1316
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1317
- "yarn install --immutable",
1318
- "yarn test",
1319
- ],
1320
- "stage": "test",
1321
- "variables": {
1322
- "APP_PATH": "app",
1323
- "KUBERNETES_CPU_LIMIT": "2",
1324
- "KUBERNETES_CPU_REQUEST": "0.5",
1325
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1326
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1327
- },
1328
- },
1329
- "web 🧾 sbom | review ": {
1330
- "allow_failure": true,
1331
- "artifacts": {
1332
- "paths": [
1333
- "__sbom.json",
1334
- ],
1335
- },
1336
- "image": "aquasec/trivy:0.38.3",
1337
- "interruptible": true,
1338
- "needs": [],
1339
- "retry": {
1340
- "max": 2,
1341
- "when": [
1342
- "runner_system_failure",
1343
- "stuck_or_timeout_failure",
1344
- ],
1345
- },
1346
- "script": [
1347
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
1348
- ],
1349
- "stage": "build",
1350
- "variables": {},
1351
- },
1352
- },
1353
- "stages": [
1354
- "setup",
1355
- "setup dev",
1356
- "setup review",
1357
- "setup stage",
1358
- "setup prod",
1359
- "setup local",
1360
- "test",
1361
- "test dev",
1362
- "test review",
1363
- "test stage",
1364
- "test prod",
1365
- "test local",
1366
- "build",
1367
- "build dev",
1368
- "build review",
1369
- "build stage",
1370
- "build prod",
1371
- "build local",
1372
- "deploy",
1373
- "deploy dev",
1374
- "deploy review",
1375
- "deploy stage",
1376
- "deploy prod",
1377
- "deploy local",
1378
- "verify",
1379
- "verify dev",
1380
- "verify review",
1381
- "verify stage",
1382
- "verify prod",
1383
- "verify local",
1384
- "rollback",
1385
- "rollback dev",
1386
- "rollback review",
1387
- "rollback stage",
1388
- "rollback prod",
1389
- "rollback local",
1390
- "stop",
1391
- "stop dev",
1392
- "stop review",
1393
- "stop stage",
1394
- "stop prod",
1395
- "stop local",
1396
- ],
1397
- "variables": {
1398
- "FF_USE_FASTZIP": "true",
1399
- },
1400
- "workflow": {
1401
- "rules": [
1402
- {
1403
- "if": "$CI_COMMIT_TAG",
1404
- },
1405
- {
1406
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1407
- "when": "never",
1408
- },
1409
- {
1410
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1411
- },
1412
- {
1413
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1414
- },
1415
- {
1416
- "if": "$CI_MERGE_REQUEST_ID",
1417
- },
1418
- ],
1419
- },
1420
- },
1421
- "taggedRelease": {
1422
- "image": "path/to/docker/jobs-default:the-version",
1423
- "jobs": {
1424
- "web ↩️ Rollback ⚠️ | prod ": {
1425
- "environment": {
1426
- "action": "access",
1427
- "name": "prod/web",
1428
- "url": "https://www.example.com",
1429
- },
1430
- "image": "path/to/docker/kubernetes:the-version",
1431
- "interruptible": true,
1432
- "needs": [],
1433
- "retry": {
1434
- "max": 2,
1435
- "when": [
1436
- "runner_system_failure",
1437
- "stuck_or_timeout_failure",
1438
- ],
1439
- },
1440
- "rules": [
1441
- {
1442
- "allow_failure": true,
1443
- "when": "manual",
1444
- },
1445
- ],
1446
- "script": [
1447
- "kubectl config set-cluster "kube-pan-my-app-prod-web" --server="$CL_prod_web_KUBE_URL" --certificate-authority <(echo $CL_prod_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1448
- "kubectl config set-credentials "kube-pan-my-app-prod-web" --token="$CL_prod_web_KUBE_TOKEN"",
1449
- "kubectl config set-context "kube-pan-my-app-prod-web" --cluster="kube-pan-my-app-prod-web" --user="kube-pan-my-app-prod-web" --namespace="pan-my-app-prod"",
1450
- "kubectl config use-context "kube-pan-my-app-prod-web"",
1451
- "kubernetesRollback",
1452
- ],
1453
- "stage": "rollback prod",
1454
- "variables": {
1455
- "APP_DIR": "app",
1456
- "BUILD_ID": "some-id",
1457
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1458
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1459
- "BUILD_INFO_ID": "some-id",
1460
- "COMPONENT_NAME": "web",
1461
- "ENV_SHORT": "prod",
1462
- "ENV_TYPE": "prod",
1463
- "GIT_STRATEGY": "none",
1464
- "HELM_ARGS": "",
1465
- "HELM_EXPERIMENTAL_OCI": "1",
1466
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1467
- "HOST": "www.example.com",
1468
- "HOST_CANONICAL": "web.prod.my-app.pan.panter.cloud",
1469
- "KUBERNETES_CPU_LIMIT": "1",
1470
- "KUBERNETES_CPU_REQUEST": "0.5",
1471
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1472
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1473
- "KUBE_APP_NAME": "web",
1474
- "KUBE_APP_NAME_PREFIX": "",
1475
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
1476
- "KUBE_NAMESPACE": "pan-my-app-prod",
1477
- "KUBE_VALUES": "env:
1478
- secret:
1479
- MONGODB_ROOT_PASSWORD: '$CL_prod_web_MONGODB_ROOT_PASSWORD'
1480
- MONGODB_REPLICASET_KEY: '$CL_prod_web_MONGODB_REPLICASET_KEY'
1481
- MONGO_URL: 'mongodb://root:$CL_prod_web_MONGODB_ROOT_PASSWORD@web-mongodb-0.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017,web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017/app?replicaSet=rs0&authSource=admin'
1482
- MONGO_OPLOG_URL: 'mongodb://root:$CL_prod_web_MONGODB_ROOT_PASSWORD@web-mongodb-0.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017,web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017/local?replicaSet=rs0&authSource=admin'
1483
- public:
1484
- ENV_SHORT: 'prod'
1485
- APP_DIR: 'app'
1486
- ENV_TYPE: 'prod'
1487
- BUILD_INFO_ID: 'some-id'
1488
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1489
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1490
- HOST: 'www.example.com'
1491
- ROOT_URL: 'https://www.example.com'
1492
- KUBE_NAMESPACE: 'pan-my-app-prod'
1493
- KUBE_APP_NAME: 'web'
1494
- KUBE_APP_NAME_PREFIX: ''
1495
- HOST_CANONICAL: 'web.prod.my-app.pan.panter.cloud'
1496
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]'
1497
- application:
1498
- host: 'www.example.com'
1499
- command: 'node main.js'
1500
- livenessProbe:
1501
- httpGet:
1502
- path: '__health'
1503
- readinessProbe:
1504
- httpGet:
1505
- path: '__health'
1506
- startupProbe:
1507
- httpGet:
1508
- path: '__health'
1509
- worker:
1510
- enabled: true
1511
- redirects:
1512
- - host: 'example.com'
1513
- mongodb:
1514
- enabled: true
1515
- auth:
1516
- enabled: true
1517
- rootPassword: '$CL_prod_web_MONGODB_ROOT_PASSWORD'
1518
- replicaSetKey: '$CL_prod_web_MONGODB_REPLICASET_KEY'
1519
- persistence:
1520
- storageClass: 'premium-rwo'
1521
- size: '50Gi'
1522
- backup:
1523
- enabled: true
1524
- hostToBackup: 'web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017'
1525
- pvcToBackup: 'datadir-web-mongodb-1'
1526
- image: 'mrelite/kubectlmongoshell:v1.0'
1527
- schedule: '0 4 * * *'
1528
- volumeSnapshotClass: 'snapshotclass'
1529
- architecture: 'replicaset'
1530
- replicaCount: 2
1531
- resources:
1532
- limits:
1533
- memory: '8Gi'
1534
- requests:
1535
- memory: '8Gi'
1536
- ",
1537
- "MONGODB_REPLICASET_KEY": "$CL_prod_web_MONGODB_REPLICASET_KEY",
1538
- "MONGODB_ROOT_PASSWORD": "$CL_prod_web_MONGODB_ROOT_PASSWORD",
1539
- "RELEASE_NAME": "pan-my-app-prod-web",
1540
- "ROOT_URL": "https://www.example.com",
1541
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]",
1542
- },
1543
- },
1544
- "web ↩️ Rollback ⚠️ | stage ": {
1545
- "environment": {
1546
- "action": "access",
1547
- "name": "stage/web",
1548
- "url": "https://web.stage.my-app.pan.panter.cloud",
1549
- },
1550
- "image": "path/to/docker/kubernetes:the-version",
1551
- "interruptible": true,
1552
- "needs": [],
1553
- "retry": {
1554
- "max": 2,
1555
- "when": [
1556
- "runner_system_failure",
1557
- "stuck_or_timeout_failure",
1558
- ],
1559
- },
1560
- "rules": [
1561
- {
1562
- "allow_failure": true,
1563
- "when": "manual",
1564
- },
1565
- ],
1566
- "script": [
1567
- "kubectl config set-cluster "kube-pan-my-app-stage-web" --server="$CL_stage_web_KUBE_URL" --certificate-authority <(echo $CL_stage_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1568
- "kubectl config set-credentials "kube-pan-my-app-stage-web" --token="$CL_stage_web_KUBE_TOKEN"",
1569
- "kubectl config set-context "kube-pan-my-app-stage-web" --cluster="kube-pan-my-app-stage-web" --user="kube-pan-my-app-stage-web" --namespace="pan-my-app-stage"",
1570
- "kubectl config use-context "kube-pan-my-app-stage-web"",
1571
- "kubernetesRollback",
1572
- ],
1573
- "stage": "rollback stage",
1574
- "variables": {
1575
- "APP_DIR": "app",
1576
- "BUILD_ID": "some-id",
1577
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1578
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1579
- "BUILD_INFO_ID": "some-id",
1580
- "COMPONENT_NAME": "web",
1581
- "ENV_SHORT": "stage",
1582
- "ENV_TYPE": "stage",
1583
- "GIT_STRATEGY": "none",
1584
- "HELM_ARGS": "",
1585
- "HELM_EXPERIMENTAL_OCI": "1",
1586
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1587
- "HOST": "web.stage.my-app.pan.panter.cloud",
1588
- "HOST_CANONICAL": "web.stage.my-app.pan.panter.cloud",
1589
- "KUBERNETES_CPU_LIMIT": "1",
1590
- "KUBERNETES_CPU_REQUEST": "0.5",
1591
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1592
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1593
- "KUBE_APP_NAME": "web",
1594
- "KUBE_APP_NAME_PREFIX": "",
1595
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
1596
- "KUBE_NAMESPACE": "pan-my-app-stage",
1597
- "KUBE_VALUES": "env:
1598
- secret:
1599
- MONGODB_ROOT_PASSWORD: '$CL_stage_web_MONGODB_ROOT_PASSWORD'
1600
- MONGO_URL: 'mongodb://root:$CL_stage_web_MONGODB_ROOT_PASSWORD@web-mongodb.pan-my-app-stage.svc.cluster.local:27017/app?authSource=admin'
1601
- public:
1602
- ENV_SHORT: 'stage'
1603
- APP_DIR: 'app'
1604
- ENV_TYPE: 'stage'
1605
- BUILD_INFO_ID: 'some-id'
1606
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1607
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1608
- HOST: 'web.stage.my-app.pan.panter.cloud'
1609
- ROOT_URL: 'https://web.stage.my-app.pan.panter.cloud'
1610
- KUBE_NAMESPACE: 'pan-my-app-stage'
1611
- KUBE_APP_NAME: 'web'
1612
- KUBE_APP_NAME_PREFIX: ''
1613
- HOST_CANONICAL: 'web.stage.my-app.pan.panter.cloud'
1614
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
1615
- application:
1616
- host: 'web.stage.my-app.pan.panter.cloud'
1617
- command: 'node main.js'
1618
- livenessProbe:
1619
- httpGet:
1620
- path: '__health'
1621
- readinessProbe:
1622
- httpGet:
1623
- path: '__health'
1624
- startupProbe:
1625
- httpGet:
1626
- path: '__health'
1627
- worker:
1628
- enabled: true
1629
- mongodb:
1630
- enabled: true
1631
- auth:
1632
- enabled: true
1633
- rootPassword: '$CL_stage_web_MONGODB_ROOT_PASSWORD'
1634
- replicaSetKey: '$CL_stage_web_MONGODB_REPLICASET_KEY'
1635
- persistence:
1636
- storageClass: 'standard-rwo'
1637
- backup:
1638
- enabled: true
1639
- hostToBackup: 'web-mongodb.pan-my-app-stage.svc.cluster.local:27017'
1640
- pvcToBackup: 'web-mongodb'
1641
- image: 'mrelite/kubectlmongoshell:v1.0'
1642
- schedule: '0 4 * * *'
1643
- volumeSnapshotClass: 'snapshotclass'
1644
- architecture: 'standalone'
1645
- ",
1646
- "MONGODB_ROOT_PASSWORD": "$CL_stage_web_MONGODB_ROOT_PASSWORD",
1647
- "RELEASE_NAME": "pan-my-app-stage-web",
1648
- "ROOT_URL": "https://web.stage.my-app.pan.panter.cloud",
1649
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
1650
- },
1651
- },
1652
- "web 🔨 app | prod ": {
1653
- "artifacts": {
1654
- "paths": [
1655
- "app/__build_info.json",
1656
- "app/dist",
1657
- ],
1658
- "reports": {
1659
- "junit": undefined,
1660
- },
1661
- },
1662
- "cache": [
1663
- {
1664
- "key": "app-yarn",
1665
- "paths": [
1666
- "app/.yarn",
1667
- ],
1668
- "policy": "pull-push",
1669
- },
1670
- {
1671
- "key": "app-node-modules",
1672
- "paths": [
1673
- "app/node_modules",
1674
- ],
1675
- "policy": "pull-push",
1676
- },
1677
- {
1678
- "key": "webmeteor-build-cache",
1679
- "paths": [
1680
- "app/.meteor/local/resolver-result-cache.json",
1681
- "app/.meteor/local/plugin-cache",
1682
- "app/.meteor/local/isopacks",
1683
- "app/.meteor/local/bundler-cache/scanner",
1684
- ],
1685
- "policy": "pull-push",
1686
- },
1687
- ],
1688
- "image": "path/to/docker/jobs-meteor:the-version",
1689
- "interruptible": true,
1690
- "needs": [],
1691
- "retry": {
1692
- "max": 2,
1693
- "when": [
1694
- "runner_system_failure",
1695
- "stuck_or_timeout_failure",
1696
- ],
1697
- },
1698
- "script": [
1699
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
1700
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1701
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1702
- "cd app",
1703
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1704
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1705
- "yarn install --immutable",
1706
- "echo "add healthcheck package"",
1707
- "meteor add panter:healthroute --allow-superuser",
1708
- "meteor add qualia:prod-shell --allow-superuser",
1709
- "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
1710
- "cp ./__build_info.json ./dist/bundle/programs/server",
1711
- ],
1712
- "stage": "build",
1713
- "variables": {
1714
- "APP_DIR": "app",
1715
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1716
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1717
- "BUILD_INFO_ID": "some-id",
1718
- "ENV_SHORT": "prod",
1719
- "ENV_TYPE": "prod",
1720
- "HOST": "www.example.com",
1721
- "HOST_CANONICAL": "web.prod.my-app.pan.panter.cloud",
1722
- "KUBERNETES_CPU_LIMIT": "2",
1723
- "KUBERNETES_CPU_REQUEST": "0.5",
1724
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1725
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1726
- "KUBE_APP_NAME": "web",
1727
- "KUBE_APP_NAME_PREFIX": "",
1728
- "KUBE_NAMESPACE": "pan-my-app-prod",
1729
- "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
1730
- "MONGODB_REPLICASET_KEY": "$CL_prod_web_MONGODB_REPLICASET_KEY",
1731
- "MONGODB_ROOT_PASSWORD": "$CL_prod_web_MONGODB_ROOT_PASSWORD",
1732
- "ROOT_URL": "https://www.example.com",
1733
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]",
1734
- },
1735
- },
1736
- "web 🔨 app | stage ": {
1737
- "artifacts": {
1738
- "paths": [
1739
- "app/__build_info.json",
1740
- "app/dist",
1741
- ],
1742
- "reports": {
1743
- "junit": undefined,
1744
- },
1745
- },
1746
- "cache": [
1747
- {
1748
- "key": "app-yarn",
1749
- "paths": [
1750
- "app/.yarn",
1751
- ],
1752
- "policy": "pull-push",
1753
- },
1754
- {
1755
- "key": "app-node-modules",
1756
- "paths": [
1757
- "app/node_modules",
1758
- ],
1759
- "policy": "pull-push",
1760
- },
1761
- {
1762
- "key": "webmeteor-build-cache",
1763
- "paths": [
1764
- "app/.meteor/local/resolver-result-cache.json",
1765
- "app/.meteor/local/plugin-cache",
1766
- "app/.meteor/local/isopacks",
1767
- "app/.meteor/local/bundler-cache/scanner",
1768
- ],
1769
- "policy": "pull-push",
1770
- },
1771
- ],
1772
- "image": "path/to/docker/jobs-meteor:the-version",
1773
- "interruptible": true,
1774
- "needs": [],
1775
- "retry": {
1776
- "max": 2,
1777
- "when": [
1778
- "runner_system_failure",
1779
- "stuck_or_timeout_failure",
1780
- ],
1781
- },
1782
- "script": [
1783
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
1784
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1785
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1786
- "cd app",
1787
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1788
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1789
- "yarn install --immutable",
1790
- "echo "add healthcheck package"",
1791
- "meteor add panter:healthroute --allow-superuser",
1792
- "meteor add qualia:prod-shell --allow-superuser",
1793
- "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
1794
- "cp ./__build_info.json ./dist/bundle/programs/server",
1795
- ],
1796
- "stage": "build",
1797
- "variables": {
1798
- "APP_DIR": "app",
1799
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1800
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1801
- "BUILD_INFO_ID": "some-id",
1802
- "ENV_SHORT": "stage",
1803
- "ENV_TYPE": "stage",
1804
- "HOST": "web.stage.my-app.pan.panter.cloud",
1805
- "HOST_CANONICAL": "web.stage.my-app.pan.panter.cloud",
1806
- "KUBERNETES_CPU_LIMIT": "2",
1807
- "KUBERNETES_CPU_REQUEST": "0.5",
1808
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1809
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1810
- "KUBE_APP_NAME": "web",
1811
- "KUBE_APP_NAME_PREFIX": "",
1812
- "KUBE_NAMESPACE": "pan-my-app-stage",
1813
- "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
1814
- "MONGODB_ROOT_PASSWORD": "$CL_stage_web_MONGODB_ROOT_PASSWORD",
1815
- "ROOT_URL": "https://web.stage.my-app.pan.panter.cloud",
1816
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
1817
- },
1818
- },
1819
- "web 🔨 docker | prod ": {
1820
- "image": "path/to/docker/docker-build:the-version",
1821
- "interruptible": true,
1822
- "needs": [
1823
- "web 🔨 app | prod ",
1824
- ],
1825
- "retry": {
1826
- "max": 2,
1827
- "when": [
1828
- "runner_system_failure",
1829
- "stuck_or_timeout_failure",
1830
- ],
1831
- },
1832
- "script": [
1833
- "ensureMeteorDockerfile",
1834
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1835
- "docker version",
1836
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1837
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1838
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1839
- "docker push $DOCKER_CACHE_IMAGE",
1840
- ],
1841
- "services": [
1842
- {
1843
- "command": [
1844
- "--tls=false",
1845
- ],
1846
- "name": "docker:20-dind",
1847
- },
1848
- ],
1849
- "stage": "build",
1850
- "variables": {
1851
- "APP_DIR": "app",
1852
- "DOCKERFILE_ADDITIONS": undefined,
1853
- "DOCKERFILE_ADDITIONS_END": undefined,
1854
- "DOCKER_BUILDKIT": "1",
1855
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
1856
- "DOCKER_DIR": ".",
1857
- "DOCKER_DRIVER": "overlay2",
1858
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1859
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1860
- "DOCKER_IMAGE_NAME": "prod/web",
1861
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1862
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1863
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1864
- "DOCKER_TLS_CERTDIR": "",
1865
- "KUBERNETES_CPU_LIMIT": "1",
1866
- "KUBERNETES_CPU_REQUEST": "0.5",
1867
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1868
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1869
- "METEOR_INSTALL_SCRIPTS": "",
1870
- },
1871
- },
1872
- "web 🔨 docker | stage ": {
1873
- "image": "path/to/docker/docker-build:the-version",
1874
- "interruptible": true,
1875
- "needs": [
1876
- "web 🔨 app | stage ",
1877
- ],
1878
- "retry": {
1879
- "max": 2,
1880
- "when": [
1881
- "runner_system_failure",
1882
- "stuck_or_timeout_failure",
1883
- ],
1884
- },
1885
- "script": [
1886
- "ensureMeteorDockerfile",
1887
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1888
- "docker version",
1889
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1890
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1891
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1892
- "docker push $DOCKER_CACHE_IMAGE",
1893
- ],
1894
- "services": [
1895
- {
1896
- "command": [
1897
- "--tls=false",
1898
- ],
1899
- "name": "docker:20-dind",
1900
- },
1901
- ],
1902
- "stage": "build",
1903
- "variables": {
1904
- "APP_DIR": "app",
1905
- "DOCKERFILE_ADDITIONS": undefined,
1906
- "DOCKERFILE_ADDITIONS_END": undefined,
1907
- "DOCKER_BUILDKIT": "1",
1908
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
1909
- "DOCKER_DIR": ".",
1910
- "DOCKER_DRIVER": "overlay2",
1911
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1912
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1913
- "DOCKER_IMAGE_NAME": "stage/web",
1914
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1915
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1916
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1917
- "DOCKER_TLS_CERTDIR": "",
1918
- "KUBERNETES_CPU_LIMIT": "1",
1919
- "KUBERNETES_CPU_REQUEST": "0.5",
1920
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1921
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1922
- "METEOR_INSTALL_SCRIPTS": "",
1923
- },
1924
- },
1925
- "web 🚀 Deploy | prod ": {
1926
- "allow_failure": true,
1927
- "environment": {
1928
- "auto_stop_in": undefined,
1929
- "name": "prod/web",
1930
- "on_stop": "web 🛑 Stop ⚠️ | prod ",
1931
- "url": "https://www.example.com",
1932
- },
1933
- "image": "path/to/docker/kubernetes:the-version",
1934
- "interruptible": true,
1935
- "needs": [
1936
- {
1937
- "artifacts": false,
1938
- "job": "web 🔨 app | prod ",
1939
- },
1940
- {
1941
- "artifacts": false,
1942
- "job": "web 🔨 docker | prod ",
1943
- },
1944
- {
1945
- "artifacts": true,
1946
- "job": "web 🧾 sbom | prod ",
1947
- },
1948
- ],
1949
- "retry": {
1950
- "max": 2,
1951
- "when": [
1952
- "runner_system_failure",
1953
- "stuck_or_timeout_failure",
1954
- ],
1955
- },
1956
- "rules": [
1957
- {
1958
- "when": "manual",
1959
- },
1960
- ],
1961
- "script": [
1962
- "kubectl config set-cluster "kube-pan-my-app-prod-web" --server="$CL_prod_web_KUBE_URL" --certificate-authority <(echo $CL_prod_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1963
- "kubectl config set-credentials "kube-pan-my-app-prod-web" --token="$CL_prod_web_KUBE_TOKEN"",
1964
- "kubectl config set-context "kube-pan-my-app-prod-web" --cluster="kube-pan-my-app-prod-web" --user="kube-pan-my-app-prod-web" --namespace="pan-my-app-prod"",
1965
- "kubectl config use-context "kube-pan-my-app-prod-web"",
1966
- "kubernetesCreateSecret",
1967
- "kubernetesDeploy",
1968
- "echo Uploading SBOM to Dependency Track",
1969
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-my-app/web" "https://www.example.com" "__sbom.json" vex.json || true",
1970
- "echo deployment successful 😻",
1971
- ],
1972
- "stage": "deploy prod",
1973
- "variables": {
1974
- "APP_DIR": "app",
1975
- "BUILD_ID": "some-id",
1976
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1977
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1978
- "BUILD_INFO_ID": "some-id",
1979
- "COMPONENT_NAME": "web",
1980
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
1981
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1982
- "DOCKER_IMAGE_NAME": "prod/web",
1983
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1984
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1985
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1986
- "ENV_SHORT": "prod",
1987
- "ENV_TYPE": "prod",
1988
- "HELM_ARGS": "",
1989
- "HELM_EXPERIMENTAL_OCI": "1",
1990
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1991
- "HOST": "www.example.com",
1992
- "HOST_CANONICAL": "web.prod.my-app.pan.panter.cloud",
1993
- "KUBERNETES_CPU_LIMIT": "1",
1994
- "KUBERNETES_CPU_REQUEST": "0.5",
1995
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1996
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1997
- "KUBE_APP_NAME": "web",
1998
- "KUBE_APP_NAME_PREFIX": "",
1999
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
2000
- "KUBE_NAMESPACE": "pan-my-app-prod",
2001
- "KUBE_VALUES": "env:
2002
- secret:
2003
- MONGODB_ROOT_PASSWORD: '$CL_prod_web_MONGODB_ROOT_PASSWORD'
2004
- MONGODB_REPLICASET_KEY: '$CL_prod_web_MONGODB_REPLICASET_KEY'
2005
- MONGO_URL: 'mongodb://root:$CL_prod_web_MONGODB_ROOT_PASSWORD@web-mongodb-0.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017,web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017/app?replicaSet=rs0&authSource=admin'
2006
- MONGO_OPLOG_URL: 'mongodb://root:$CL_prod_web_MONGODB_ROOT_PASSWORD@web-mongodb-0.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017,web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017/local?replicaSet=rs0&authSource=admin'
2007
- public:
2008
- ENV_SHORT: 'prod'
2009
- APP_DIR: 'app'
2010
- ENV_TYPE: 'prod'
2011
- BUILD_INFO_ID: 'some-id'
2012
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2013
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2014
- HOST: 'www.example.com'
2015
- ROOT_URL: 'https://www.example.com'
2016
- KUBE_NAMESPACE: 'pan-my-app-prod'
2017
- KUBE_APP_NAME: 'web'
2018
- KUBE_APP_NAME_PREFIX: ''
2019
- HOST_CANONICAL: 'web.prod.my-app.pan.panter.cloud'
2020
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]'
2021
- application:
2022
- host: 'www.example.com'
2023
- command: 'node main.js'
2024
- livenessProbe:
2025
- httpGet:
2026
- path: '__health'
2027
- readinessProbe:
2028
- httpGet:
2029
- path: '__health'
2030
- startupProbe:
2031
- httpGet:
2032
- path: '__health'
2033
- worker:
2034
- enabled: true
2035
- redirects:
2036
- - host: 'example.com'
2037
- mongodb:
2038
- enabled: true
2039
- auth:
2040
- enabled: true
2041
- rootPassword: '$CL_prod_web_MONGODB_ROOT_PASSWORD'
2042
- replicaSetKey: '$CL_prod_web_MONGODB_REPLICASET_KEY'
2043
- persistence:
2044
- storageClass: 'premium-rwo'
2045
- size: '50Gi'
2046
- backup:
2047
- enabled: true
2048
- hostToBackup: 'web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017'
2049
- pvcToBackup: 'datadir-web-mongodb-1'
2050
- image: 'mrelite/kubectlmongoshell:v1.0'
2051
- schedule: '0 4 * * *'
2052
- volumeSnapshotClass: 'snapshotclass'
2053
- architecture: 'replicaset'
2054
- replicaCount: 2
2055
- resources:
2056
- limits:
2057
- memory: '8Gi'
2058
- requests:
2059
- memory: '8Gi'
2060
- ",
2061
- "MONGODB_REPLICASET_KEY": "$CL_prod_web_MONGODB_REPLICASET_KEY",
2062
- "MONGODB_ROOT_PASSWORD": "$CL_prod_web_MONGODB_ROOT_PASSWORD",
2063
- "RELEASE_NAME": "pan-my-app-prod-web",
2064
- "ROOT_URL": "https://www.example.com",
2065
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]",
2066
- },
2067
- },
2068
- "web 🚀 Deploy | stage ": {
2069
- "allow_failure": false,
2070
- "environment": {
2071
- "auto_stop_in": undefined,
2072
- "name": "stage/web",
2073
- "on_stop": "web 🛑 Stop ⚠️ | stage ",
2074
- "url": "https://web.stage.my-app.pan.panter.cloud",
2075
- },
2076
- "image": "path/to/docker/kubernetes:the-version",
2077
- "interruptible": true,
2078
- "needs": [
2079
- {
2080
- "artifacts": false,
2081
- "job": "web 🔨 app | stage ",
2082
- },
2083
- {
2084
- "artifacts": false,
2085
- "job": "web 🔨 docker | stage ",
2086
- },
2087
- {
2088
- "artifacts": true,
2089
- "job": "web 🧾 sbom | stage ",
2090
- },
2091
- ],
2092
- "retry": {
2093
- "max": 2,
2094
- "when": [
2095
- "runner_system_failure",
2096
- "stuck_or_timeout_failure",
2097
- ],
2098
- },
2099
- "rules": [
2100
- {
2101
- "when": "on_success",
2102
- },
2103
- ],
2104
- "script": [
2105
- "kubectl config set-cluster "kube-pan-my-app-stage-web" --server="$CL_stage_web_KUBE_URL" --certificate-authority <(echo $CL_stage_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2106
- "kubectl config set-credentials "kube-pan-my-app-stage-web" --token="$CL_stage_web_KUBE_TOKEN"",
2107
- "kubectl config set-context "kube-pan-my-app-stage-web" --cluster="kube-pan-my-app-stage-web" --user="kube-pan-my-app-stage-web" --namespace="pan-my-app-stage"",
2108
- "kubectl config use-context "kube-pan-my-app-stage-web"",
2109
- "kubernetesCreateSecret",
2110
- "kubernetesDeploy",
2111
- "echo Uploading SBOM to Dependency Track",
2112
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-my-app/web" "https://web.stage.my-app.pan.panter.cloud" "__sbom.json" vex.json || true",
2113
- "echo deployment successful 😻",
2114
- ],
2115
- "stage": "deploy stage",
2116
- "variables": {
2117
- "APP_DIR": "app",
2118
- "BUILD_ID": "some-id",
2119
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2120
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2121
- "BUILD_INFO_ID": "some-id",
2122
- "COMPONENT_NAME": "web",
2123
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/web",
2124
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2125
- "DOCKER_IMAGE_NAME": "stage/web",
2126
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2127
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2128
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2129
- "ENV_SHORT": "stage",
2130
- "ENV_TYPE": "stage",
2131
- "HELM_ARGS": "",
2132
- "HELM_EXPERIMENTAL_OCI": "1",
2133
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2134
- "HOST": "web.stage.my-app.pan.panter.cloud",
2135
- "HOST_CANONICAL": "web.stage.my-app.pan.panter.cloud",
2136
- "KUBERNETES_CPU_LIMIT": "1",
2137
- "KUBERNETES_CPU_REQUEST": "0.5",
2138
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2139
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2140
- "KUBE_APP_NAME": "web",
2141
- "KUBE_APP_NAME_PREFIX": "",
2142
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
2143
- "KUBE_NAMESPACE": "pan-my-app-stage",
2144
- "KUBE_VALUES": "env:
2145
- secret:
2146
- MONGODB_ROOT_PASSWORD: '$CL_stage_web_MONGODB_ROOT_PASSWORD'
2147
- MONGO_URL: 'mongodb://root:$CL_stage_web_MONGODB_ROOT_PASSWORD@web-mongodb.pan-my-app-stage.svc.cluster.local:27017/app?authSource=admin'
2148
- public:
2149
- ENV_SHORT: 'stage'
2150
- APP_DIR: 'app'
2151
- ENV_TYPE: 'stage'
2152
- BUILD_INFO_ID: 'some-id'
2153
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2154
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2155
- HOST: 'web.stage.my-app.pan.panter.cloud'
2156
- ROOT_URL: 'https://web.stage.my-app.pan.panter.cloud'
2157
- KUBE_NAMESPACE: 'pan-my-app-stage'
2158
- KUBE_APP_NAME: 'web'
2159
- KUBE_APP_NAME_PREFIX: ''
2160
- HOST_CANONICAL: 'web.stage.my-app.pan.panter.cloud'
2161
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
2162
- application:
2163
- host: 'web.stage.my-app.pan.panter.cloud'
2164
- command: 'node main.js'
2165
- livenessProbe:
2166
- httpGet:
2167
- path: '__health'
2168
- readinessProbe:
2169
- httpGet:
2170
- path: '__health'
2171
- startupProbe:
2172
- httpGet:
2173
- path: '__health'
2174
- worker:
2175
- enabled: true
2176
- mongodb:
2177
- enabled: true
2178
- auth:
2179
- enabled: true
2180
- rootPassword: '$CL_stage_web_MONGODB_ROOT_PASSWORD'
2181
- replicaSetKey: '$CL_stage_web_MONGODB_REPLICASET_KEY'
2182
- persistence:
2183
- storageClass: 'standard-rwo'
2184
- backup:
2185
- enabled: true
2186
- hostToBackup: 'web-mongodb.pan-my-app-stage.svc.cluster.local:27017'
2187
- pvcToBackup: 'web-mongodb'
2188
- image: 'mrelite/kubectlmongoshell:v1.0'
2189
- schedule: '0 4 * * *'
2190
- volumeSnapshotClass: 'snapshotclass'
2191
- architecture: 'standalone'
2192
- ",
2193
- "MONGODB_ROOT_PASSWORD": "$CL_stage_web_MONGODB_ROOT_PASSWORD",
2194
- "RELEASE_NAME": "pan-my-app-stage-web",
2195
- "ROOT_URL": "https://web.stage.my-app.pan.panter.cloud",
2196
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
2197
- },
2198
- },
2199
- "web 🛑 Stop ⚠️ | prod ": {
2200
- "environment": {
2201
- "action": "stop",
2202
- "name": "prod/web",
2203
- "url": "https://www.example.com",
2204
- },
2205
- "image": "path/to/docker/kubernetes:the-version",
2206
- "interruptible": true,
2207
- "needs": [],
2208
- "retry": {
2209
- "max": 2,
2210
- "when": [
2211
- "runner_system_failure",
2212
- "stuck_or_timeout_failure",
2213
- ],
2214
- },
2215
- "rules": [
2216
- {
2217
- "allow_failure": true,
2218
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2219
- "when": "on_success",
2220
- },
2221
- {
2222
- "allow_failure": true,
2223
- "when": "manual",
2224
- },
2225
- ],
2226
- "script": [
2227
- "kubectl config set-cluster "kube-pan-my-app-prod-web" --server="$CL_prod_web_KUBE_URL" --certificate-authority <(echo $CL_prod_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2228
- "kubectl config set-credentials "kube-pan-my-app-prod-web" --token="$CL_prod_web_KUBE_TOKEN"",
2229
- "kubectl config set-context "kube-pan-my-app-prod-web" --cluster="kube-pan-my-app-prod-web" --user="kube-pan-my-app-prod-web" --namespace="pan-my-app-prod"",
2230
- "kubectl config use-context "kube-pan-my-app-prod-web"",
2231
- "kubernetesDelete",
2232
- "echo Disabling component in Dependency Track",
2233
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-my-app/web" "https://www.example.com" || true",
2234
- ],
2235
- "stage": "stop prod",
2236
- "variables": {
2237
- "APP_DIR": "app",
2238
- "BUILD_ID": "some-id",
2239
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2240
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2241
- "BUILD_INFO_ID": "some-id",
2242
- "COMPONENT_NAME": "web",
2243
- "ENV_SHORT": "prod",
2244
- "ENV_TYPE": "prod",
2245
- "GIT_STRATEGY": "none",
2246
- "HELM_ARGS": "",
2247
- "HELM_EXPERIMENTAL_OCI": "1",
2248
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2249
- "HOST": "www.example.com",
2250
- "HOST_CANONICAL": "web.prod.my-app.pan.panter.cloud",
2251
- "KUBERNETES_CPU_LIMIT": "1",
2252
- "KUBERNETES_CPU_REQUEST": "0.5",
2253
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2254
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2255
- "KUBE_APP_NAME": "web",
2256
- "KUBE_APP_NAME_PREFIX": "",
2257
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
2258
- "KUBE_NAMESPACE": "pan-my-app-prod",
2259
- "KUBE_VALUES": "env:
2260
- secret:
2261
- MONGODB_ROOT_PASSWORD: '$CL_prod_web_MONGODB_ROOT_PASSWORD'
2262
- MONGODB_REPLICASET_KEY: '$CL_prod_web_MONGODB_REPLICASET_KEY'
2263
- MONGO_URL: 'mongodb://root:$CL_prod_web_MONGODB_ROOT_PASSWORD@web-mongodb-0.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017,web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017/app?replicaSet=rs0&authSource=admin'
2264
- MONGO_OPLOG_URL: 'mongodb://root:$CL_prod_web_MONGODB_ROOT_PASSWORD@web-mongodb-0.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017,web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017/local?replicaSet=rs0&authSource=admin'
2265
- public:
2266
- ENV_SHORT: 'prod'
2267
- APP_DIR: 'app'
2268
- ENV_TYPE: 'prod'
2269
- BUILD_INFO_ID: 'some-id'
2270
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2271
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2272
- HOST: 'www.example.com'
2273
- ROOT_URL: 'https://www.example.com'
2274
- KUBE_NAMESPACE: 'pan-my-app-prod'
2275
- KUBE_APP_NAME: 'web'
2276
- KUBE_APP_NAME_PREFIX: ''
2277
- HOST_CANONICAL: 'web.prod.my-app.pan.panter.cloud'
2278
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]'
2279
- application:
2280
- host: 'www.example.com'
2281
- command: 'node main.js'
2282
- livenessProbe:
2283
- httpGet:
2284
- path: '__health'
2285
- readinessProbe:
2286
- httpGet:
2287
- path: '__health'
2288
- startupProbe:
2289
- httpGet:
2290
- path: '__health'
2291
- worker:
2292
- enabled: true
2293
- redirects:
2294
- - host: 'example.com'
2295
- mongodb:
2296
- enabled: true
2297
- auth:
2298
- enabled: true
2299
- rootPassword: '$CL_prod_web_MONGODB_ROOT_PASSWORD'
2300
- replicaSetKey: '$CL_prod_web_MONGODB_REPLICASET_KEY'
2301
- persistence:
2302
- storageClass: 'premium-rwo'
2303
- size: '50Gi'
2304
- backup:
2305
- enabled: true
2306
- hostToBackup: 'web-mongodb-1.web-mongodb-headless.pan-my-app-prod.svc.cluster.local:27017'
2307
- pvcToBackup: 'datadir-web-mongodb-1'
2308
- image: 'mrelite/kubectlmongoshell:v1.0'
2309
- schedule: '0 4 * * *'
2310
- volumeSnapshotClass: 'snapshotclass'
2311
- architecture: 'replicaset'
2312
- replicaCount: 2
2313
- resources:
2314
- limits:
2315
- memory: '8Gi'
2316
- requests:
2317
- memory: '8Gi'
2318
- ",
2319
- "MONGODB_REPLICASET_KEY": "$CL_prod_web_MONGODB_REPLICASET_KEY",
2320
- "MONGODB_ROOT_PASSWORD": "$CL_prod_web_MONGODB_ROOT_PASSWORD",
2321
- "RELEASE_NAME": "pan-my-app-prod-web",
2322
- "ROOT_URL": "https://www.example.com",
2323
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD","MONGODB_REPLICASET_KEY"]",
2324
- },
2325
- },
2326
- "web 🛑 Stop ⚠️ | stage ": {
2327
- "environment": {
2328
- "action": "stop",
2329
- "name": "stage/web",
2330
- "url": "https://web.stage.my-app.pan.panter.cloud",
2331
- },
2332
- "image": "path/to/docker/kubernetes:the-version",
2333
- "interruptible": true,
2334
- "needs": [],
2335
- "retry": {
2336
- "max": 2,
2337
- "when": [
2338
- "runner_system_failure",
2339
- "stuck_or_timeout_failure",
2340
- ],
2341
- },
2342
- "rules": [
2343
- {
2344
- "allow_failure": true,
2345
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2346
- "when": "on_success",
2347
- },
2348
- {
2349
- "allow_failure": true,
2350
- "when": "manual",
2351
- },
2352
- ],
2353
- "script": [
2354
- "kubectl config set-cluster "kube-pan-my-app-stage-web" --server="$CL_stage_web_KUBE_URL" --certificate-authority <(echo $CL_stage_web_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2355
- "kubectl config set-credentials "kube-pan-my-app-stage-web" --token="$CL_stage_web_KUBE_TOKEN"",
2356
- "kubectl config set-context "kube-pan-my-app-stage-web" --cluster="kube-pan-my-app-stage-web" --user="kube-pan-my-app-stage-web" --namespace="pan-my-app-stage"",
2357
- "kubectl config use-context "kube-pan-my-app-stage-web"",
2358
- "kubernetesDelete",
2359
- "echo Disabling component in Dependency Track",
2360
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-my-app/web" "https://web.stage.my-app.pan.panter.cloud" || true",
2361
- ],
2362
- "stage": "stop stage",
2363
- "variables": {
2364
- "APP_DIR": "app",
2365
- "BUILD_ID": "some-id",
2366
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2367
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2368
- "BUILD_INFO_ID": "some-id",
2369
- "COMPONENT_NAME": "web",
2370
- "ENV_SHORT": "stage",
2371
- "ENV_TYPE": "stage",
2372
- "GIT_STRATEGY": "none",
2373
- "HELM_ARGS": "",
2374
- "HELM_EXPERIMENTAL_OCI": "1",
2375
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2376
- "HOST": "web.stage.my-app.pan.panter.cloud",
2377
- "HOST_CANONICAL": "web.stage.my-app.pan.panter.cloud",
2378
- "KUBERNETES_CPU_LIMIT": "1",
2379
- "KUBERNETES_CPU_REQUEST": "0.5",
2380
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2381
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2382
- "KUBE_APP_NAME": "web",
2383
- "KUBE_APP_NAME_PREFIX": "",
2384
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-web",
2385
- "KUBE_NAMESPACE": "pan-my-app-stage",
2386
- "KUBE_VALUES": "env:
2387
- secret:
2388
- MONGODB_ROOT_PASSWORD: '$CL_stage_web_MONGODB_ROOT_PASSWORD'
2389
- MONGO_URL: 'mongodb://root:$CL_stage_web_MONGODB_ROOT_PASSWORD@web-mongodb.pan-my-app-stage.svc.cluster.local:27017/app?authSource=admin'
2390
- public:
2391
- ENV_SHORT: 'stage'
2392
- APP_DIR: 'app'
2393
- ENV_TYPE: 'stage'
2394
- BUILD_INFO_ID: 'some-id'
2395
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2396
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2397
- HOST: 'web.stage.my-app.pan.panter.cloud'
2398
- ROOT_URL: 'https://web.stage.my-app.pan.panter.cloud'
2399
- KUBE_NAMESPACE: 'pan-my-app-stage'
2400
- KUBE_APP_NAME: 'web'
2401
- KUBE_APP_NAME_PREFIX: ''
2402
- HOST_CANONICAL: 'web.stage.my-app.pan.panter.cloud'
2403
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]'
2404
- application:
2405
- host: 'web.stage.my-app.pan.panter.cloud'
2406
- command: 'node main.js'
2407
- livenessProbe:
2408
- httpGet:
2409
- path: '__health'
2410
- readinessProbe:
2411
- httpGet:
2412
- path: '__health'
2413
- startupProbe:
2414
- httpGet:
2415
- path: '__health'
2416
- worker:
2417
- enabled: true
2418
- mongodb:
2419
- enabled: true
2420
- auth:
2421
- enabled: true
2422
- rootPassword: '$CL_stage_web_MONGODB_ROOT_PASSWORD'
2423
- replicaSetKey: '$CL_stage_web_MONGODB_REPLICASET_KEY'
2424
- persistence:
2425
- storageClass: 'standard-rwo'
2426
- backup:
2427
- enabled: true
2428
- hostToBackup: 'web-mongodb.pan-my-app-stage.svc.cluster.local:27017'
2429
- pvcToBackup: 'web-mongodb'
2430
- image: 'mrelite/kubectlmongoshell:v1.0'
2431
- schedule: '0 4 * * *'
2432
- volumeSnapshotClass: 'snapshotclass'
2433
- architecture: 'standalone'
2434
- ",
2435
- "MONGODB_ROOT_PASSWORD": "$CL_stage_web_MONGODB_ROOT_PASSWORD",
2436
- "RELEASE_NAME": "pan-my-app-stage-web",
2437
- "ROOT_URL": "https://web.stage.my-app.pan.panter.cloud",
2438
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","MONGODB_ROOT_PASSWORD"]",
2439
- },
2440
- },
2441
- "web 🧾 sbom | prod ": {
2442
- "allow_failure": true,
2443
- "artifacts": {
2444
- "paths": [
2445
- "__sbom.json",
2446
- ],
2447
- },
2448
- "image": "aquasec/trivy:0.38.3",
2449
- "interruptible": true,
2450
- "needs": [],
2451
- "retry": {
2452
- "max": 2,
2453
- "when": [
2454
- "runner_system_failure",
2455
- "stuck_or_timeout_failure",
2456
- ],
2457
- },
2458
- "script": [
2459
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
2460
- ],
2461
- "stage": "build",
2462
- "variables": {},
2463
- },
2464
- "web 🧾 sbom | stage ": {
2465
- "allow_failure": true,
2466
- "artifacts": {
2467
- "paths": [
2468
- "__sbom.json",
2469
- ],
2470
- },
2471
- "image": "aquasec/trivy:0.38.3",
2472
- "interruptible": true,
2473
- "needs": [],
2474
- "retry": {
2475
- "max": 2,
2476
- "when": [
2477
- "runner_system_failure",
2478
- "stuck_or_timeout_failure",
2479
- ],
2480
- },
2481
- "script": [
2482
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
2483
- ],
2484
- "stage": "build",
2485
- "variables": {},
2486
- },
2487
- },
2488
- "stages": [
2489
- "setup",
2490
- "setup dev",
2491
- "setup review",
2492
- "setup stage",
2493
- "setup prod",
2494
- "setup local",
2495
- "test",
2496
- "test dev",
2497
- "test review",
2498
- "test stage",
2499
- "test prod",
2500
- "test local",
2501
- "build",
2502
- "build dev",
2503
- "build review",
2504
- "build stage",
2505
- "build prod",
2506
- "build local",
2507
- "deploy",
2508
- "deploy dev",
2509
- "deploy review",
2510
- "deploy stage",
2511
- "deploy prod",
2512
- "deploy local",
2513
- "verify",
2514
- "verify dev",
2515
- "verify review",
2516
- "verify stage",
2517
- "verify prod",
2518
- "verify local",
2519
- "rollback",
2520
- "rollback dev",
2521
- "rollback review",
2522
- "rollback stage",
2523
- "rollback prod",
2524
- "rollback local",
2525
- "stop",
2526
- "stop dev",
2527
- "stop review",
2528
- "stop stage",
2529
- "stop prod",
2530
- "stop local",
2531
- ],
2532
- "variables": {
2533
- "FF_USE_FASTZIP": "true",
2534
- },
2535
- "workflow": {
2536
- "rules": [
2537
- {
2538
- "if": "$CI_COMMIT_TAG",
2539
- },
2540
- {
2541
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2542
- "when": "never",
2543
- },
2544
- {
2545
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2546
- },
2547
- {
2548
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2549
- },
2550
- {
2551
- "if": "$CI_MERGE_REQUEST_ID",
2552
- },
2553
- ],
2554
- },
2555
- },
2556
- }
2557
- `;