@catladder/pipeline 0.0.0-more-collapse-deeb54d7 → 0.0.0-multiple-gitlab-includes-3df5566d

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (597) hide show
  1. package/README.md +17 -0
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +34 -0
  5. package/dist/bash/bashEscape.js +114 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.d.ts +0 -1
  18. package/dist/build/base/constants.js +4 -3
  19. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  20. package/dist/build/base/createAppBuildJob.js +18 -15
  21. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  22. package/dist/build/base/createArtifactsConfig.js +3 -1
  23. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  24. package/dist/build/base/createBuildJobDefinition.js +58 -0
  25. package/dist/build/base/index.d.ts +7 -4
  26. package/dist/build/base/index.js +17 -6
  27. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  28. package/dist/build/base/writeBuildInfo.js +4 -3
  29. package/dist/build/base/writeDotEnv.d.ts +3 -2
  30. package/dist/build/base/writeDotEnv.js +30 -6
  31. package/dist/build/cache/createJobCache.d.ts +7 -0
  32. package/dist/build/cache/createJobCache.js +115 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  34. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  35. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  36. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  37. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  38. package/dist/build/custom/buildJob.d.ts +2 -2
  39. package/dist/build/custom/buildJob.js +8 -67
  40. package/dist/build/custom/index.d.ts +2 -2
  41. package/dist/build/custom/index.js +3 -1
  42. package/dist/build/custom/testJob.d.ts +4 -4
  43. package/dist/build/custom/testJob.js +25 -21
  44. package/dist/build/docker.d.ts +48 -39
  45. package/dist/build/docker.js +112 -37
  46. package/dist/build/index.d.ts +14 -7
  47. package/dist/build/index.js +44 -16
  48. package/dist/build/node/buildJob.d.ts +6 -2
  49. package/dist/build/node/buildJob.js +39 -48
  50. package/dist/build/node/cache.d.ts +4 -5
  51. package/dist/build/node/cache.js +18 -23
  52. package/dist/build/node/constants.d.ts +0 -1
  53. package/dist/build/node/constants.js +5 -4
  54. package/dist/build/node/index.d.ts +4 -4
  55. package/dist/build/node/index.js +3 -1
  56. package/dist/build/node/meteor.d.ts +2 -2
  57. package/dist/build/node/meteor.js +10 -12
  58. package/dist/build/node/testJob.d.ts +3 -2
  59. package/dist/build/node/testJob.js +29 -19
  60. package/dist/build/node/yarn.d.ts +3 -2
  61. package/dist/build/node/yarn.js +13 -13
  62. package/dist/build/rails/build.d.ts +2 -2
  63. package/dist/build/rails/build.js +24 -8
  64. package/dist/build/rails/index.d.ts +2 -2
  65. package/dist/build/rails/index.js +3 -1
  66. package/dist/build/rails/test.d.ts +2 -2
  67. package/dist/build/rails/test.js +20 -12
  68. package/dist/build/sbom.d.ts +2 -2
  69. package/dist/build/sbom.js +9 -6
  70. package/dist/build/types.d.ts +152 -47
  71. package/dist/build/types.js +10 -2
  72. package/dist/catladder-gitlab.js +129 -49
  73. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  74. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  75. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  76. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  77. package/dist/config/configruedEnvs.js +3 -1
  78. package/dist/config/index.js +13 -7
  79. package/dist/config/readConfig.d.ts +2 -2
  80. package/dist/config/readConfig.js +191 -40
  81. package/dist/constants.js +5 -3
  82. package/dist/context/createAllComponentsContext.d.ts +12 -0
  83. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  84. package/dist/context/createComponentContext.d.ts +11 -0
  85. package/dist/context/createComponentContext.js +255 -0
  86. package/dist/context/createWorkspaceContext.d.ts +16 -0
  87. package/dist/context/createWorkspaceContext.js +173 -0
  88. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  89. package/dist/context/getBuildInfoVariables.js +55 -0
  90. package/dist/context/getEnvConfig.js +5 -2
  91. package/dist/context/getEnvType.js +3 -1
  92. package/dist/context/getEnvironment.d.ts +3 -3
  93. package/dist/context/getEnvironment.js +11 -12
  94. package/dist/context/getEnvironmentContext.d.ts +7 -3
  95. package/dist/context/getEnvironmentContext.js +21 -11
  96. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  97. package/dist/context/getEnvironmentVariables.js +81 -49
  98. package/dist/context/getLabels.d.ts +2 -2
  99. package/dist/context/getLabels.js +9 -7
  100. package/dist/context/getReviewSlug.d.ts +4 -0
  101. package/dist/context/getReviewSlug.js +21 -0
  102. package/dist/context/index.d.ts +2 -4
  103. package/dist/context/index.js +15 -162
  104. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  105. package/dist/context/transformJobOnlyVars.js +4 -2
  106. package/dist/context/utils/envVars.d.ts +1 -1
  107. package/dist/context/utils/envVars.js +5 -2
  108. package/dist/defaults/index.js +3 -1
  109. package/dist/deploy/base/deploy.d.ts +3 -3
  110. package/dist/deploy/base/deploy.js +38 -22
  111. package/dist/deploy/base/index.d.ts +3 -5
  112. package/dist/deploy/base/index.js +3 -1
  113. package/dist/deploy/base/rollback.d.ts +3 -3
  114. package/dist/deploy/base/rollback.js +13 -9
  115. package/dist/deploy/base/stop.d.ts +3 -3
  116. package/dist/deploy/base/stop.js +16 -11
  117. package/dist/deploy/base/types.d.ts +1 -1
  118. package/dist/deploy/base/types.js +3 -1
  119. package/dist/deploy/base/variables.d.ts +0 -1
  120. package/dist/deploy/base/variables.js +4 -3
  121. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +19 -0
  122. package/dist/deploy/cloudRun/artifactsRegistry.js +125 -0
  123. package/dist/deploy/cloudRun/cleanup.d.ts +2 -0
  124. package/dist/deploy/cloudRun/cleanup.js +53 -0
  125. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -0
  126. package/dist/deploy/cloudRun/cloudRunRevisions.js +62 -0
  127. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +7 -0
  128. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +207 -0
  129. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +4 -0
  130. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +96 -0
  131. package/dist/deploy/cloudRun/createJobs/common.d.ts +18 -0
  132. package/dist/deploy/cloudRun/createJobs/common.js +93 -0
  133. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  134. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  135. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +62 -0
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -0
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +54 -0
  139. package/dist/deploy/cloudRun/createJobs/index.d.ts +3 -0
  140. package/dist/deploy/cloudRun/createJobs/index.js +57 -0
  141. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  142. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  143. package/dist/deploy/cloudRun/index.d.ts +2 -2
  144. package/dist/deploy/cloudRun/index.js +17 -10
  145. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +3 -1
  146. package/dist/deploy/cloudRun/utils/createArgsString.js +25 -17
  147. package/dist/deploy/cloudRun/utils/database.d.ts +6 -4
  148. package/dist/deploy/cloudRun/utils/database.js +28 -15
  149. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  150. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +4 -2
  151. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -0
  152. package/dist/deploy/cloudRun/utils/getServiceName.js +10 -0
  153. package/dist/deploy/cloudRun/utils/jobName.d.ts +2 -1
  154. package/dist/deploy/cloudRun/utils/jobName.js +4 -2
  155. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.d.ts +9 -0
  156. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +18 -0
  157. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  158. package/dist/deploy/cloudSql/utils.js +7 -2
  159. package/dist/deploy/custom/deployJob.d.ts +2 -2
  160. package/dist/deploy/custom/deployJob.js +10 -9
  161. package/dist/deploy/custom/index.d.ts +2 -2
  162. package/dist/deploy/custom/index.js +3 -1
  163. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  164. package/dist/deploy/dockerTag/deployJob.js +38 -7
  165. package/dist/deploy/dockerTag/index.d.ts +2 -2
  166. package/dist/deploy/dockerTag/index.js +3 -1
  167. package/dist/deploy/index.d.ts +10 -9
  168. package/dist/deploy/index.js +13 -7
  169. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  170. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  171. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  172. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  173. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  174. package/dist/deploy/kubernetes/deployJob.js +23 -22
  175. package/dist/deploy/kubernetes/index.d.ts +2 -2
  176. package/dist/deploy/kubernetes/index.js +52 -15
  177. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  178. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  179. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  180. package/dist/deploy/kubernetes/kubeValues.js +16 -18
  181. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  182. package/dist/deploy/kubernetes/mongodb.js +14 -12
  183. package/dist/deploy/sbom.d.ts +4 -4
  184. package/dist/deploy/sbom.js +7 -4
  185. package/dist/deploy/types/base.d.ts +5 -5
  186. package/dist/deploy/types/base.js +3 -1
  187. package/dist/deploy/types/custom.d.ts +3 -7
  188. package/dist/deploy/types/custom.js +3 -1
  189. package/dist/deploy/types/dockerTag.d.ts +3 -1
  190. package/dist/deploy/types/dockerTag.js +3 -1
  191. package/dist/deploy/types/googleCloudRun.d.ts +127 -24
  192. package/dist/deploy/types/googleCloudRun.js +3 -1
  193. package/dist/deploy/types/index.d.ts +6 -6
  194. package/dist/deploy/types/index.js +14 -8
  195. package/dist/deploy/types/kubernetes.d.ts +25 -54
  196. package/dist/deploy/types/kubernetes.js +3 -1
  197. package/dist/deploy/utils.d.ts +2 -2
  198. package/dist/deploy/utils.js +5 -2
  199. package/dist/globalScriptFunctions/index.d.ts +14 -0
  200. package/dist/globalScriptFunctions/index.js +37 -0
  201. package/dist/index.d.ts +5 -2
  202. package/dist/index.js +18 -9
  203. package/dist/packageInfos.d.ts +4 -0
  204. package/dist/packageInfos.js +20 -0
  205. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  206. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  207. package/dist/pipeline/createAllJobs.d.ts +16 -6
  208. package/dist/pipeline/createAllJobs.js +99 -27
  209. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  210. package/dist/pipeline/createJobsForComponent.js +9 -149
  211. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  212. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  213. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  214. package/dist/pipeline/createMainPipeline.js +283 -0
  215. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  216. package/dist/pipeline/generatePipelineFiles.js +304 -0
  217. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  218. package/dist/pipeline/getPipelineStages.js +56 -0
  219. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  220. package/dist/pipeline/gitlab/createGitlabJobs.js +258 -74
  221. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  222. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  223. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  224. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  225. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  226. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  227. package/dist/pipeline/index.d.ts +3 -2
  228. package/dist/pipeline/index.js +16 -9
  229. package/dist/pipeline/packageManager.d.ts +3 -2
  230. package/dist/pipeline/packageManager.js +50 -24
  231. package/dist/pipeline/yarn/yarnUtils.d.ts +3 -2
  232. package/dist/pipeline/yarn/yarnUtils.js +65 -17
  233. package/dist/rules/index.d.ts +7 -2
  234. package/dist/rules/index.js +34 -16
  235. package/dist/runner/index.d.ts +1 -1
  236. package/dist/runner/index.js +3 -1
  237. package/dist/tsconfig.tsbuildinfo +1 -1
  238. package/dist/types/config.d.ts +44 -29
  239. package/dist/types/config.js +5 -2
  240. package/dist/types/context.d.ts +124 -40
  241. package/dist/types/context.js +12 -1
  242. package/dist/types/environmentContext.d.ts +15 -12
  243. package/dist/types/environmentContext.js +3 -1
  244. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  245. package/dist/types/gitlab-ci-yml.js +3 -2
  246. package/dist/types/gitlab-types.d.ts +8 -8
  247. package/dist/types/gitlab-types.js +3 -1
  248. package/dist/types/index.d.ts +1 -0
  249. package/dist/types/index.js +14 -7
  250. package/dist/types/jobDefinition.d.ts +11 -0
  251. package/dist/types/jobDefinition.js +5 -0
  252. package/dist/types/jobs.d.ts +30 -15
  253. package/dist/types/jobs.js +3 -1
  254. package/dist/types/pipeline.d.ts +3 -3
  255. package/dist/types/pipeline.js +3 -1
  256. package/dist/types/utils.d.ts +1 -1
  257. package/dist/types/utils.js +3 -1
  258. package/dist/utils/gitlab.js +7 -2
  259. package/dist/utils/index.d.ts +2 -1
  260. package/dist/utils/index.js +10 -3
  261. package/dist/utils/jsonParse.d.ts +1 -0
  262. package/dist/utils/jsonParse.js +14 -0
  263. package/dist/utils/removeUndefined.d.ts +1 -0
  264. package/dist/utils/removeUndefined.js +36 -0
  265. package/dist/utils/writeFiles.d.ts +11 -0
  266. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  267. package/dist/variables/VariableValue.d.ts +3 -0
  268. package/dist/variables/VariableValue.js +5 -0
  269. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  270. package/dist/variables/VariableValueContainingReferences.js +97 -0
  271. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  272. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  273. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  274. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  275. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  276. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  277. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  278. package/dist/variables/__tests__/variableValue.test.js +36 -0
  279. package/dist/variables/resolveAllReferences.d.ts +3 -0
  280. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -47
  281. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  282. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  283. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  284. package/dist/variables/resolveReferencesOnce.js +22 -0
  285. package/examples/.test-gen-ignore +1 -0
  286. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1418 -0
  287. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1418 -0
  288. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1418 -0
  289. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1434 -0
  290. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1418 -0
  291. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1526 -0
  292. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1418 -0
  293. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1436 -0
  294. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1418 -0
  295. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1418 -0
  296. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1418 -0
  297. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1418 -0
  298. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1490 -0
  299. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1302 -0
  300. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1418 -0
  301. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2998 -0
  302. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1733 -0
  303. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1426 -0
  304. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1285 -0
  305. package/examples/__snapshots__/custom-build-job.test.ts.snap +1174 -0
  306. package/examples/__snapshots__/custom-deploy.test.ts.snap +1168 -0
  307. package/examples/__snapshots__/custom-envs.test.ts.snap +798 -0
  308. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1182 -0
  309. package/examples/__snapshots__/git-submodule.test.ts.snap +1419 -0
  310. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1759 -0
  311. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1779 -0
  312. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3357 -0
  313. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1883 -0
  314. package/examples/__snapshots__/local-dot-env.test.ts.snap +1342 -0
  315. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1836 -0
  316. package/examples/__snapshots__/multiline-var.test.ts.snap +5679 -0
  317. package/examples/__snapshots__/native-app.test.ts.snap +2206 -0
  318. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1418 -0
  319. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1426 -0
  320. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1487 -0
  321. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1471 -0
  322. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4739 -0
  323. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1368 -0
  324. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2338 -0
  325. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2330 -0
  326. package/examples/__utils__/helpers.ts +9 -12
  327. package/examples/cloud-run-http2.test.ts +11 -0
  328. package/examples/cloud-run-http2.ts +29 -0
  329. package/examples/cloud-run-memory-limit.test.ts +11 -0
  330. package/examples/cloud-run-memory-limit.ts +10 -5
  331. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  332. package/examples/cloud-run-meteor-with-worker.ts +37 -0
  333. package/examples/cloud-run-nextjs.test.ts +11 -0
  334. package/examples/cloud-run-nextjs.ts +28 -0
  335. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  336. package/examples/cloud-run-no-cpu-throttling.ts +6 -4
  337. package/examples/cloud-run-no-service.test.ts +11 -0
  338. package/examples/cloud-run-no-service.ts +33 -0
  339. package/examples/cloud-run-non-public.test.ts +11 -0
  340. package/examples/cloud-run-non-public.ts +5 -4
  341. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  342. package/examples/cloud-run-post-stop-job.ts +42 -0
  343. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  344. package/examples/cloud-run-service-custom-vpc-connector.ts +30 -0
  345. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  346. package/examples/cloud-run-service-custom-vpc.ts +31 -0
  347. package/examples/cloud-run-service-gen2.test.ts +11 -0
  348. package/examples/cloud-run-service-gen2.ts +29 -0
  349. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  350. package/examples/cloud-run-service-increase-timout.ts +29 -0
  351. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  352. package/examples/cloud-run-service-with-volumes.ts +56 -0
  353. package/examples/cloud-run-storybook.test.ts +11 -0
  354. package/examples/cloud-run-storybook.ts +33 -0
  355. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  356. package/examples/cloud-run-with-ngnix.ts +29 -0
  357. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  358. package/examples/cloud-run-with-sql-reuse-db.ts +5 -4
  359. package/examples/cloud-run-with-sql.test.ts +11 -0
  360. package/examples/cloud-run-with-sql.ts +6 -20
  361. package/examples/cloud-run-with-worker.test.ts +11 -0
  362. package/examples/cloud-run-with-worker.ts +37 -0
  363. package/examples/custom-build-job-with-tests.test.ts +11 -0
  364. package/examples/custom-build-job-with-tests.ts +5 -4
  365. package/examples/custom-build-job.test.ts +11 -0
  366. package/examples/custom-build-job.ts +5 -4
  367. package/examples/custom-deploy.test.ts +11 -0
  368. package/examples/custom-deploy.ts +12 -4
  369. package/examples/custom-envs.test.ts +11 -0
  370. package/examples/custom-envs.ts +5 -4
  371. package/examples/custom-sbom-java.test.ts +11 -0
  372. package/examples/custom-sbom-java.ts +10 -6
  373. package/examples/git-submodule.test.ts +11 -0
  374. package/examples/git-submodule.ts +30 -0
  375. package/examples/kubernetes-application-customization.test.ts +11 -0
  376. package/examples/kubernetes-application-customization.ts +7 -4
  377. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  378. package/examples/kubernetes-with-cloud-sql.ts +7 -4
  379. package/examples/kubernetes-with-jobs.test.ts +11 -0
  380. package/examples/kubernetes-with-jobs.ts +7 -4
  381. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  382. package/examples/kubernetes-with-mongodb.ts +7 -4
  383. package/examples/local-dot-env.test.ts +11 -0
  384. package/examples/local-dot-env.ts +27 -0
  385. package/examples/meteor-kubernetes.test.ts +11 -0
  386. package/examples/meteor-kubernetes.ts +4 -5
  387. package/examples/multiline-var.test.ts +11 -0
  388. package/examples/multiline-var.ts +107 -0
  389. package/examples/native-app.test.ts +11 -0
  390. package/examples/native-app.ts +22 -17
  391. package/examples/node-build-with-custom-image.test.ts +11 -0
  392. package/examples/node-build-with-custom-image.ts +5 -4
  393. package/examples/node-build-with-docker-additions.test.ts +11 -0
  394. package/examples/node-build-with-docker-additions.ts +29 -0
  395. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  396. package/examples/rails-k8s-with-worker.test.ts +11 -0
  397. package/examples/rails-k8s-with-worker.ts +14 -11
  398. package/examples/referencing-other-vars.test.ts +11 -0
  399. package/examples/referencing-other-vars.ts +83 -0
  400. package/examples/wait-for-other-deploy.test.ts +11 -0
  401. package/examples/wait-for-other-deploy.ts +5 -4
  402. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  403. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  404. package/examples/workspace-api-www.test.ts +11 -0
  405. package/examples/workspace-api-www.ts +46 -0
  406. package/package.json +75 -26
  407. package/scripts/generate-examples-test.ts +84 -0
  408. package/scripts/generate-gitlab-ci-types.ts +2 -2
  409. package/scripts/tsconfig.json +7 -0
  410. package/src/bash/BashExpression.ts +78 -0
  411. package/src/bash/bashEscape.ts +158 -0
  412. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  413. package/src/bash/bashYaml.ts +80 -0
  414. package/src/bash/getInjectVarsScript.ts +21 -0
  415. package/src/bash/index.ts +2 -0
  416. package/src/build/artifacts/createBuildJobArtifact.ts +61 -0
  417. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  418. package/src/build/base/constants.ts +2 -2
  419. package/src/build/base/createAppBuildJob.ts +40 -24
  420. package/src/build/base/createArtifactsConfig.ts +2 -2
  421. package/src/build/base/createBuildJobDefinition.ts +37 -0
  422. package/src/build/base/index.ts +37 -8
  423. package/src/build/base/writeBuildInfo.ts +3 -3
  424. package/src/build/base/writeDotEnv.ts +25 -6
  425. package/src/build/cache/createJobCache.ts +83 -0
  426. package/src/build/cache/getAllCacheConfigsFromConfig.ts +28 -0
  427. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  428. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  429. package/src/build/custom/buildJob.ts +11 -37
  430. package/src/build/custom/index.ts +2 -2
  431. package/src/build/custom/testJob.ts +24 -22
  432. package/src/build/docker.ts +145 -49
  433. package/src/build/index.ts +42 -10
  434. package/src/build/node/buildJob.ts +65 -62
  435. package/src/build/node/cache.ts +30 -35
  436. package/src/build/node/constants.ts +2 -3
  437. package/src/build/node/index.ts +8 -4
  438. package/src/build/node/meteor.ts +16 -24
  439. package/src/build/node/testJob.ts +47 -26
  440. package/src/build/node/yarn.ts +32 -16
  441. package/src/build/rails/build.ts +21 -9
  442. package/src/build/rails/index.ts +2 -2
  443. package/src/build/rails/test.ts +22 -12
  444. package/src/build/sbom.ts +15 -10
  445. package/src/build/types.ts +190 -47
  446. package/src/catladder-gitlab.ts +7 -56
  447. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  448. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  449. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  450. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  451. package/src/config/configruedEnvs.ts +6 -6
  452. package/src/config/readConfig.ts +15 -22
  453. package/src/constants.ts +5 -2
  454. package/src/context/createAllComponentsContext.ts +31 -0
  455. package/src/context/createComponentContext.ts +134 -0
  456. package/src/context/createWorkspaceContext.ts +56 -0
  457. package/src/context/getBuildInfoVariables.ts +36 -0
  458. package/src/context/getEnvConfig.ts +3 -3
  459. package/src/context/getEnvType.ts +1 -1
  460. package/src/context/getEnvironment.ts +8 -24
  461. package/src/context/getEnvironmentContext.ts +25 -29
  462. package/src/context/getEnvironmentVariables.ts +104 -76
  463. package/src/context/getLabels.ts +5 -5
  464. package/src/context/getReviewSlug.ts +27 -0
  465. package/src/context/index.ts +1 -65
  466. package/src/context/transformJobOnlyVars.ts +6 -3
  467. package/src/context/utils/envVars.ts +5 -4
  468. package/src/deploy/base/deploy.ts +63 -47
  469. package/src/deploy/base/index.ts +11 -6
  470. package/src/deploy/base/rollback.ts +11 -16
  471. package/src/deploy/base/stop.ts +11 -15
  472. package/src/deploy/base/variables.ts +1 -2
  473. package/src/deploy/cloudRun/artifactsRegistry.ts +126 -0
  474. package/src/deploy/cloudRun/cleanup.ts +30 -0
  475. package/src/deploy/cloudRun/cloudRunRevisions.ts +65 -0
  476. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +227 -0
  477. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +86 -0
  478. package/src/deploy/cloudRun/createJobs/common.ts +59 -0
  479. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  480. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +71 -0
  481. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +34 -0
  482. package/src/deploy/cloudRun/createJobs/index.ts +51 -0
  483. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  484. package/src/deploy/cloudRun/index.ts +85 -59
  485. package/src/deploy/cloudRun/utils/createArgsString.ts +21 -13
  486. package/src/deploy/cloudRun/utils/database.ts +31 -9
  487. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +9 -11
  488. package/src/deploy/cloudRun/utils/getServiceName.ts +3 -0
  489. package/src/deploy/cloudRun/utils/jobName.ts +7 -2
  490. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +12 -0
  491. package/src/deploy/cloudSql/utils.ts +13 -10
  492. package/src/deploy/custom/deployJob.ts +15 -10
  493. package/src/deploy/custom/index.ts +2 -2
  494. package/src/deploy/dockerTag/deployJob.ts +7 -8
  495. package/src/deploy/dockerTag/index.ts +8 -7
  496. package/src/deploy/index.ts +15 -12
  497. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  498. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  499. package/src/deploy/kubernetes/deployJob.ts +30 -21
  500. package/src/deploy/kubernetes/index.ts +43 -35
  501. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  502. package/src/deploy/kubernetes/kubeValues.ts +15 -19
  503. package/src/deploy/kubernetes/mongodb.ts +15 -15
  504. package/src/deploy/sbom.ts +18 -10
  505. package/src/deploy/types/base.ts +3 -3
  506. package/src/deploy/types/custom.ts +3 -7
  507. package/src/deploy/types/dockerTag.ts +2 -0
  508. package/src/deploy/types/googleCloudRun.ts +133 -10
  509. package/src/deploy/types/index.ts +2 -2
  510. package/src/deploy/types/kubernetes.ts +5 -36
  511. package/src/deploy/utils.ts +5 -5
  512. package/src/globalScriptFunctions/index.ts +30 -0
  513. package/src/index.ts +4 -1
  514. package/src/packageInfos.ts +14 -0
  515. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  516. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  517. package/src/pipeline/createAllJobs.ts +67 -33
  518. package/src/pipeline/createJobsForComponent.ts +10 -38
  519. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  520. package/src/pipeline/createMainPipeline.ts +119 -0
  521. package/src/pipeline/generatePipelineFiles.ts +100 -0
  522. package/src/pipeline/getPipelineStages.ts +23 -0
  523. package/src/pipeline/gitlab/createGitlabJobs.ts +388 -108
  524. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  525. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  526. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  527. package/src/pipeline/index.ts +2 -1
  528. package/src/pipeline/packageManager.ts +44 -26
  529. package/src/pipeline/yarn/yarnUtils.ts +39 -10
  530. package/src/rules/index.ts +36 -9
  531. package/src/runner/index.ts +0 -1
  532. package/src/types/config.ts +43 -16
  533. package/src/types/context.ts +165 -37
  534. package/src/types/environmentContext.ts +18 -13
  535. package/src/types/gitlab-ci-yml.ts +0 -1
  536. package/src/types/gitlab-types.ts +10 -7
  537. package/src/types/index.ts +1 -0
  538. package/src/types/jobDefinition.ts +34 -0
  539. package/src/types/jobs.ts +31 -15
  540. package/src/types/utils.ts +4 -4
  541. package/src/utils/gitlab.ts +20 -3
  542. package/src/utils/index.ts +6 -3
  543. package/src/utils/jsonParse.ts +7 -0
  544. package/src/utils/removeUndefined.ts +4 -0
  545. package/src/utils/writeFiles.ts +52 -0
  546. package/src/variables/VariableValue.ts +6 -0
  547. package/src/variables/VariableValueContainingReferences.ts +89 -0
  548. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  549. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  550. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  551. package/src/variables/__tests__/variableValue.test.ts +73 -0
  552. package/src/variables/resolveAllReferences.ts +46 -0
  553. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  554. package/src/variables/resolveReferencesOnce.ts +29 -0
  555. package/bin/catladder-gitlab-dev.js +0 -3
  556. package/bin/catladder-gitlab.js +0 -3
  557. package/dist/bundles/catladder-gitlab/index.js +0 -33838
  558. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  559. package/dist/context/resolveReferences.d.ts +0 -4
  560. package/dist/context/resolveReferences.js +0 -254
  561. package/dist/deploy/cloudRun/deployJob.d.ts +0 -3
  562. package/dist/deploy/cloudRun/deployJob.js +0 -248
  563. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  564. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  565. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  566. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  567. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  568. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1780
  569. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1780
  570. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1780
  571. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3532
  572. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3543
  573. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1656
  574. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1362
  575. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1556
  576. package/examples/__snapshots__/custom-envs.ts.snap +0 -1050
  577. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1370
  578. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2468
  579. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2428
  580. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2440
  581. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4453
  582. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2632
  583. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2557
  584. package/examples/__snapshots__/native-app.ts.snap +0 -2878
  585. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1780
  586. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4189
  587. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -1922
  588. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  589. package/scripts/bundle +0 -2
  590. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  591. package/src/context/resolveReferences.ts +0 -70
  592. package/src/deploy/cloudRun/deployJob.ts +0 -301
  593. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  594. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  595. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  596. package/src/pipeline/createChildPipeline.ts +0 -45
  597. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
@@ -1,3543 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "api 👮 lint": {
9
- "cache": [
10
- {
11
- "key": "api-yarn",
12
- "paths": [
13
- "api/.yarn",
14
- ],
15
- "policy": "pull-push",
16
- },
17
- {
18
- "key": "api-node-modules",
19
- "paths": [
20
- "api/node_modules",
21
- ],
22
- "policy": "pull-push",
23
- },
24
- ],
25
- "image": "path/to/docker/jobs-default:the-version",
26
- "interruptible": true,
27
- "needs": [],
28
- "retry": {
29
- "max": 2,
30
- "when": [
31
- "runner_system_failure",
32
- "stuck_or_timeout_failure",
33
- ],
34
- },
35
- "script": [
36
- "cd api",
37
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
38
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
39
- "yarn install --immutable",
40
- "yarn lint",
41
- ],
42
- "stage": "test",
43
- "variables": {
44
- "APP_PATH": "api",
45
- "KUBERNETES_CPU_LIMIT": "2",
46
- "KUBERNETES_CPU_REQUEST": "0.5",
47
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
48
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
49
- },
50
- },
51
- "api 🔨 app | dev ": {
52
- "artifacts": {
53
- "expire_in": "1 day",
54
- "paths": [
55
- "api/__build_info.json",
56
- "api/dist",
57
- "api/.next",
58
- ],
59
- "reports": {
60
- "junit": undefined,
61
- },
62
- },
63
- "cache": [
64
- {
65
- "key": "api-yarn",
66
- "paths": [
67
- "api/.yarn",
68
- ],
69
- "policy": "pull-push",
70
- },
71
- {
72
- "key": "api-node-modules",
73
- "paths": [
74
- "api/node_modules",
75
- ],
76
- "policy": "pull-push",
77
- },
78
- {
79
- "key": "api-next-cache",
80
- "paths": [
81
- "api/.next/cache/",
82
- ],
83
- "policy": "pull-push",
84
- },
85
- ],
86
- "image": "path/to/docker/jobs-default:the-version",
87
- "interruptible": true,
88
- "needs": [],
89
- "retry": {
90
- "max": 2,
91
- "when": [
92
- "runner_system_failure",
93
- "stuck_or_timeout_failure",
94
- ],
95
- },
96
- "script": [
97
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
98
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
99
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
100
- "cd api",
101
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
102
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
103
- "yarn install --immutable",
104
- "yarn build",
105
- ],
106
- "stage": "build",
107
- "variables": {
108
- "APP_DIR": "api",
109
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
110
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
111
- "BUILD_INFO_ID": "some-id",
112
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-migration:run",
113
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run",
114
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
115
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
116
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
117
- "DB_NAME": "pan-test-app-dev-api",
118
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
119
- "DB_USER": "my-user",
120
- "ENV_SHORT": "dev",
121
- "ENV_TYPE": "dev",
122
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
123
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
124
- "HOST": "pan-test-app-dev-api-unknown-host.example.com",
125
- "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
126
- "KUBERNETES_CPU_LIMIT": "2",
127
- "KUBERNETES_CPU_REQUEST": "0.5",
128
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
129
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
130
- "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
131
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
132
- },
133
- },
134
- "api 🔨 docker | dev ": {
135
- "cache": [
136
- {
137
- "key": "api-yarn",
138
- "paths": [
139
- "api/.yarn",
140
- ],
141
- "policy": "pull",
142
- },
143
- ],
144
- "image": "path/to/docker/docker-build:the-version",
145
- "interruptible": true,
146
- "needs": [
147
- "api 🔨 app | dev ",
148
- ],
149
- "retry": {
150
- "max": 2,
151
- "when": [
152
- "runner_system_failure",
153
- "stuck_or_timeout_failure",
154
- ],
155
- },
156
- "script": [
157
- "ensureNodeDockerfile",
158
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
159
- "docker version",
160
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
161
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
162
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
163
- "docker push $DOCKER_CACHE_IMAGE",
164
- ],
165
- "services": [
166
- {
167
- "command": [
168
- "--tls=false",
169
- ],
170
- "name": "docker:20-dind",
171
- },
172
- ],
173
- "stage": "build",
174
- "variables": {
175
- "APP_DIR": "api",
176
- "DOCKERFILE_ADDITIONS": undefined,
177
- "DOCKERFILE_ADDITIONS_END": undefined,
178
- "DOCKER_BUILDKIT": "1",
179
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
180
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
181
- RUN yarn plugin import workspace-tools
182
- RUN yarn workspaces focus --production && yarn rebuild",
183
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
184
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
185
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
186
- COPY --chown=node:node .yarn /app/.yarn",
187
- "DOCKER_DIR": ".",
188
- "DOCKER_DRIVER": "overlay2",
189
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
190
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
191
- "DOCKER_IMAGE_NAME": "dev/api",
192
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
193
- "DOCKER_REGISTRY": "$CI_REGISTRY",
194
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
195
- "DOCKER_TLS_CERTDIR": "",
196
- "KUBERNETES_CPU_LIMIT": "1",
197
- "KUBERNETES_CPU_REQUEST": "0.5",
198
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
199
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
200
- },
201
- },
202
- "api 🚀 Deploy | dev ": {
203
- "allow_failure": false,
204
- "artifacts": {
205
- "paths": [
206
- "____envvars.yaml",
207
- ],
208
- },
209
- "environment": {
210
- "auto_stop_in": "4 weeks",
211
- "name": "dev/api",
212
- "on_stop": "api 🛑 Stop ⚠️ | dev ",
213
- "url": "https://pan-test-app-dev-api-unknown-host.example.com",
214
- },
215
- "image": "path/to/docker/gcloud:the-version",
216
- "interruptible": true,
217
- "needs": [
218
- {
219
- "artifacts": false,
220
- "job": "api 👮 lint",
221
- },
222
- {
223
- "artifacts": false,
224
- "job": "api 🔨 app | dev ",
225
- },
226
- {
227
- "artifacts": false,
228
- "job": "api 🔨 docker | dev ",
229
- },
230
- {
231
- "artifacts": false,
232
- "job": "api 🧪 test",
233
- },
234
- {
235
- "artifacts": true,
236
- "job": "api 🧾 sbom | dev ",
237
- },
238
- {
239
- "artifacts": false,
240
- "job": "api 🛡 audit",
241
- },
242
- ],
243
- "retry": {
244
- "max": 2,
245
- "when": [
246
- "runner_system_failure",
247
- "stuck_or_timeout_failure",
248
- ],
249
- },
250
- "rules": [
251
- {
252
- "when": "on_success",
253
- },
254
- ],
255
- "script": [
256
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
257
- "echo $CL_dev_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
258
- ",
259
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
260
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
261
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
262
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
263
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
264
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
265
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
266
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
267
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG",
268
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG",
269
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
270
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
271
- "echo "$ENV_VARS" > ____envvars.yaml",
272
- "set +e",
273
- "echo "ensuring Database..."",
274
- "gcloud sql databases create pan-test-app-dev-api --instance=instancename --project projectId",
275
- "set -e",
276
- "set +e",
277
- "gcloud scheduler jobs create http pan-test-app-dev-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
278
- "set -e",
279
- "gcloud scheduler jobs update http pan-test-app-dev-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
280
- "set +e",
281
- "gcloud beta run jobs create pan-test-app-dev-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node --memory=512Mi --task-timeout=10m",
282
- "set -e",
283
- "gcloud beta run jobs update pan-test-app-dev-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node --memory=512Mi --task-timeout=10m --env-vars-file=____envvars.yaml",
284
- "set +e",
285
- "gcloud beta run jobs create pan-test-app-dev-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node --memory=512Mi --task-timeout=15m",
286
- "set -e",
287
- "gcloud beta run jobs update pan-test-app-dev-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node --memory=512Mi --task-timeout=15m --env-vars-file=____envvars.yaml",
288
- "gcloud run deploy pan-test-app-dev-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --cpu-boost",
289
- "gcloud beta run jobs execute pan-test-app-dev-api-migration --project=google-project-id --region=europe-west6",
290
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
291
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG",
292
- "echo Uploading SBOM to Dependency Track",
293
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" "__sbom.json" vex.json || true",
294
- ],
295
- "services": [
296
- {
297
- "command": [
298
- "--tls=false",
299
- ],
300
- "name": "docker:20-dind",
301
- },
302
- ],
303
- "stage": "deploy dev",
304
- "variables": {
305
- "APP_DIR": "api",
306
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
307
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
308
- "BUILD_INFO_ID": "some-id",
309
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
310
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-migration:run",
311
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run",
312
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
313
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
314
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
315
- "DB_NAME": "pan-test-app-dev-api",
316
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
317
- "DB_USER": "my-user",
318
- "DOCKER_BUILDKIT": "1",
319
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
320
- "DOCKER_DRIVER": "overlay2",
321
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
322
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
323
- "DOCKER_IMAGE_NAME": "dev/api",
324
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
325
- "DOCKER_REGISTRY": "$CI_REGISTRY",
326
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
327
- "DOCKER_TLS_CERTDIR": "",
328
- "ENV_SHORT": "dev",
329
- "ENV_TYPE": "dev",
330
- "ENV_VARS": "ENV_SHORT: 'dev'
331
- APP_DIR: 'api'
332
- ENV_TYPE: 'dev'
333
- BUILD_INFO_ID: 'some-id'
334
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
335
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
336
- HOST: 'pan-test-app-dev-api-unknown-host.example.com'
337
- ROOT_URL: 'https://pan-test-app-dev-api-unknown-host.example.com'
338
- HOST_CANONICAL: 'pan-test-app-dev-api-unknown-host.example.com'
339
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
340
- DB_NAME: 'pan-test-app-dev-api'
341
- DB_USER: 'my-user'
342
- DB_PASSWORD: '$CL_dev_api_DB_PASSWORD'
343
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
344
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
345
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-migration:run'
346
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run'
347
- GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix'
348
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
349
- ",
350
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
351
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
352
- "HOST": "pan-test-app-dev-api-unknown-host.example.com",
353
- "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
354
- "KUBERNETES_CPU_LIMIT": "1",
355
- "KUBERNETES_CPU_REQUEST": "0.5",
356
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
357
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
358
- "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
359
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
360
- },
361
- },
362
- "api 🛑 Stop ⚠️ | dev ": {
363
- "environment": {
364
- "action": "stop",
365
- "name": "dev/api",
366
- "url": "https://pan-test-app-dev-api-unknown-host.example.com",
367
- },
368
- "image": "path/to/docker/gcloud:the-version",
369
- "interruptible": true,
370
- "needs": [],
371
- "retry": {
372
- "max": 2,
373
- "when": [
374
- "runner_system_failure",
375
- "stuck_or_timeout_failure",
376
- ],
377
- },
378
- "rules": [
379
- {
380
- "allow_failure": true,
381
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
382
- "when": "on_success",
383
- },
384
- {
385
- "allow_failure": true,
386
- "when": "manual",
387
- },
388
- ],
389
- "script": [
390
- "set +e",
391
- "echo $CL_dev_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
392
- ",
393
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
394
- "gcloud run services delete pan-test-app-dev-api --project=google-project-id --region=europe-west6",
395
- "gcloud scheduler jobs delete pan-test-app-dev-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
396
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-dev-api-migration --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
397
- "gcloud beta run jobs delete pan-test-app-dev-api-migration --project=google-project-id --region=europe-west6",
398
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-dev-api-send-reminders --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
399
- "gcloud beta run jobs delete pan-test-app-dev-api-send-reminders --project=google-project-id --region=europe-west6",
400
- "echo Disabling component in Dependency Track",
401
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" || true",
402
- "set -e",
403
- ],
404
- "stage": "stop dev",
405
- "variables": {
406
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
407
- "GIT_STRATEGY": "none",
408
- "KUBERNETES_CPU_LIMIT": "1",
409
- "KUBERNETES_CPU_REQUEST": "0.5",
410
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
411
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
412
- },
413
- },
414
- "api 🛡 audit": {
415
- "allow_failure": true,
416
- "image": "path/to/docker/jobs-default:the-version",
417
- "interruptible": true,
418
- "needs": [],
419
- "retry": {
420
- "max": 2,
421
- "when": [
422
- "runner_system_failure",
423
- "stuck_or_timeout_failure",
424
- ],
425
- },
426
- "script": [
427
- "cd api",
428
- "yarn npm audit --environment production",
429
- ],
430
- "stage": "test",
431
- "variables": {
432
- "APP_PATH": "api",
433
- "KUBERNETES_CPU_LIMIT": "2",
434
- "KUBERNETES_CPU_REQUEST": "0.5",
435
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
436
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
437
- },
438
- },
439
- "api 🧪 test": {
440
- "cache": [
441
- {
442
- "key": "api-yarn",
443
- "paths": [
444
- "api/.yarn",
445
- ],
446
- "policy": "pull-push",
447
- },
448
- {
449
- "key": "api-node-modules",
450
- "paths": [
451
- "api/node_modules",
452
- ],
453
- "policy": "pull-push",
454
- },
455
- ],
456
- "image": "path/to/docker/jobs-testing-chrome:the-version",
457
- "interruptible": true,
458
- "needs": [],
459
- "retry": {
460
- "max": 2,
461
- "when": [
462
- "runner_system_failure",
463
- "stuck_or_timeout_failure",
464
- ],
465
- },
466
- "script": [
467
- "cd api",
468
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
469
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
470
- "yarn install --immutable",
471
- "yarn test",
472
- ],
473
- "stage": "test",
474
- "variables": {
475
- "APP_PATH": "api",
476
- "KUBERNETES_CPU_LIMIT": "2",
477
- "KUBERNETES_CPU_REQUEST": "0.5",
478
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
479
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
480
- },
481
- },
482
- "api 🧾 sbom | dev ": {
483
- "allow_failure": true,
484
- "artifacts": {
485
- "paths": [
486
- "__sbom.json",
487
- ],
488
- },
489
- "image": "aquasec/trivy:0.38.3",
490
- "interruptible": true,
491
- "needs": [],
492
- "retry": {
493
- "max": 2,
494
- "when": [
495
- "runner_system_failure",
496
- "stuck_or_timeout_failure",
497
- ],
498
- },
499
- "script": [
500
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
501
- ],
502
- "stage": "build",
503
- "variables": {},
504
- },
505
- "www 👮 lint": {
506
- "cache": [
507
- {
508
- "key": "www-yarn",
509
- "paths": [
510
- "www/.yarn",
511
- ],
512
- "policy": "pull-push",
513
- },
514
- {
515
- "key": "www-node-modules",
516
- "paths": [
517
- "www/node_modules",
518
- ],
519
- "policy": "pull-push",
520
- },
521
- ],
522
- "image": "path/to/docker/jobs-default:the-version",
523
- "interruptible": true,
524
- "needs": [],
525
- "retry": {
526
- "max": 2,
527
- "when": [
528
- "runner_system_failure",
529
- "stuck_or_timeout_failure",
530
- ],
531
- },
532
- "script": [
533
- "cd www",
534
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
535
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
536
- "yarn install --immutable",
537
- "yarn lint",
538
- ],
539
- "stage": "test",
540
- "variables": {
541
- "APP_PATH": "www",
542
- "KUBERNETES_CPU_LIMIT": "2",
543
- "KUBERNETES_CPU_REQUEST": "0.5",
544
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
545
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
546
- },
547
- },
548
- "www 🔨 app | dev ": {
549
- "artifacts": {
550
- "expire_in": "1 day",
551
- "paths": [
552
- "www/__build_info.json",
553
- "www/dist",
554
- "www/.next",
555
- ],
556
- "reports": {
557
- "junit": undefined,
558
- },
559
- },
560
- "cache": [
561
- {
562
- "key": "www-yarn",
563
- "paths": [
564
- "www/.yarn",
565
- ],
566
- "policy": "pull-push",
567
- },
568
- {
569
- "key": "www-node-modules",
570
- "paths": [
571
- "www/node_modules",
572
- ],
573
- "policy": "pull-push",
574
- },
575
- {
576
- "key": "www-next-cache",
577
- "paths": [
578
- "www/.next/cache/",
579
- ],
580
- "policy": "pull-push",
581
- },
582
- ],
583
- "image": "path/to/docker/jobs-default:the-version",
584
- "interruptible": true,
585
- "needs": [],
586
- "retry": {
587
- "max": 2,
588
- "when": [
589
- "runner_system_failure",
590
- "stuck_or_timeout_failure",
591
- ],
592
- },
593
- "script": [
594
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
595
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
596
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
597
- "cd www",
598
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
599
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
600
- "yarn install --immutable",
601
- "yarn build",
602
- ],
603
- "stage": "build",
604
- "variables": {
605
- "API_URL": "https://pan-test-app-dev-api-unknown-host.example.com/graphql",
606
- "APP_DIR": "www",
607
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
608
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
609
- "BUILD_INFO_ID": "some-id",
610
- "ENV_SHORT": "dev",
611
- "ENV_TYPE": "dev",
612
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey",
613
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_www_GCLOUD_RUN_canonicalHostSuffix",
614
- "HOST": "pan-test-app-dev-www-unknown-host.example.com",
615
- "HOST_CANONICAL": "pan-test-app-dev-www-unknown-host.example.com",
616
- "KUBERNETES_CPU_LIMIT": "2",
617
- "KUBERNETES_CPU_REQUEST": "0.5",
618
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
619
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
620
- "ROOT_URL": "https://pan-test-app-dev-www-unknown-host.example.com",
621
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
622
- },
623
- },
624
- "www 🔨 docker | dev ": {
625
- "cache": [
626
- {
627
- "key": "www-yarn",
628
- "paths": [
629
- "www/.yarn",
630
- ],
631
- "policy": "pull",
632
- },
633
- ],
634
- "image": "path/to/docker/docker-build:the-version",
635
- "interruptible": true,
636
- "needs": [
637
- "www 🔨 app | dev ",
638
- ],
639
- "retry": {
640
- "max": 2,
641
- "when": [
642
- "runner_system_failure",
643
- "stuck_or_timeout_failure",
644
- ],
645
- },
646
- "script": [
647
- "ensureNodeDockerfile",
648
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
649
- "docker version",
650
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
651
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
652
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
653
- "docker push $DOCKER_CACHE_IMAGE",
654
- ],
655
- "services": [
656
- {
657
- "command": [
658
- "--tls=false",
659
- ],
660
- "name": "docker:20-dind",
661
- },
662
- ],
663
- "stage": "build",
664
- "variables": {
665
- "APP_DIR": "www",
666
- "DOCKERFILE_ADDITIONS": undefined,
667
- "DOCKERFILE_ADDITIONS_END": undefined,
668
- "DOCKER_BUILDKIT": "1",
669
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
670
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
671
- RUN yarn plugin import workspace-tools
672
- RUN yarn workspaces focus --production && yarn rebuild",
673
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
674
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
675
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
676
- COPY --chown=node:node .yarn /app/.yarn",
677
- "DOCKER_DIR": ".",
678
- "DOCKER_DRIVER": "overlay2",
679
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
680
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
681
- "DOCKER_IMAGE_NAME": "dev/www",
682
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
683
- "DOCKER_REGISTRY": "$CI_REGISTRY",
684
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
685
- "DOCKER_TLS_CERTDIR": "",
686
- "KUBERNETES_CPU_LIMIT": "1",
687
- "KUBERNETES_CPU_REQUEST": "0.5",
688
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
689
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
690
- },
691
- },
692
- "www 🚀 Deploy | dev ": {
693
- "allow_failure": false,
694
- "artifacts": {
695
- "paths": [
696
- "____envvars.yaml",
697
- ],
698
- },
699
- "environment": {
700
- "auto_stop_in": "4 weeks",
701
- "name": "dev/www",
702
- "on_stop": "www 🛑 Stop ⚠️ | dev ",
703
- "url": "https://pan-test-app-dev-www-unknown-host.example.com",
704
- },
705
- "image": "path/to/docker/gcloud:the-version",
706
- "interruptible": true,
707
- "needs": [
708
- {
709
- "artifacts": false,
710
- "job": "www 👮 lint",
711
- },
712
- {
713
- "artifacts": false,
714
- "job": "www 🔨 app | dev ",
715
- },
716
- {
717
- "artifacts": false,
718
- "job": "www 🔨 docker | dev ",
719
- },
720
- {
721
- "artifacts": false,
722
- "job": "www 🧪 test",
723
- },
724
- {
725
- "artifacts": true,
726
- "job": "www 🧾 sbom | dev ",
727
- },
728
- {
729
- "artifacts": false,
730
- "job": "www 🛡 audit",
731
- },
732
- ],
733
- "retry": {
734
- "max": 2,
735
- "when": [
736
- "runner_system_failure",
737
- "stuck_or_timeout_failure",
738
- ],
739
- },
740
- "rules": [
741
- {
742
- "when": "on_success",
743
- },
744
- ],
745
- "script": [
746
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
747
- "echo $CL_dev_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
748
- ",
749
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
750
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
751
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
752
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
753
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
754
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
755
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
756
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
757
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www:$DOCKER_IMAGE_TAG",
758
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www:$DOCKER_IMAGE_TAG",
759
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
760
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
761
- "echo "$ENV_VARS" > ____envvars.yaml",
762
- "gcloud run deploy pan-test-app-dev-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=dev,env-name=dev,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
763
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
764
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www:$DOCKER_IMAGE_TAG",
765
- "echo Uploading SBOM to Dependency Track",
766
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" "__sbom.json" vex.json || true",
767
- ],
768
- "services": [
769
- {
770
- "command": [
771
- "--tls=false",
772
- ],
773
- "name": "docker:20-dind",
774
- },
775
- ],
776
- "stage": "deploy dev",
777
- "variables": {
778
- "API_URL": "https://pan-test-app-dev-api-unknown-host.example.com/graphql",
779
- "APP_DIR": "www",
780
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
781
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
782
- "BUILD_INFO_ID": "some-id",
783
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
784
- "DOCKER_BUILDKIT": "1",
785
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
786
- "DOCKER_DRIVER": "overlay2",
787
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
788
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
789
- "DOCKER_IMAGE_NAME": "dev/www",
790
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
791
- "DOCKER_REGISTRY": "$CI_REGISTRY",
792
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
793
- "DOCKER_TLS_CERTDIR": "",
794
- "ENV_SHORT": "dev",
795
- "ENV_TYPE": "dev",
796
- "ENV_VARS": "ENV_SHORT: 'dev'
797
- APP_DIR: 'www'
798
- ENV_TYPE: 'dev'
799
- BUILD_INFO_ID: 'some-id'
800
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
801
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
802
- HOST: 'pan-test-app-dev-www-unknown-host.example.com'
803
- ROOT_URL: 'https://pan-test-app-dev-www-unknown-host.example.com'
804
- HOST_CANONICAL: 'pan-test-app-dev-www-unknown-host.example.com'
805
- GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_www_GCLOUD_RUN_canonicalHostSuffix'
806
- API_URL: 'https://pan-test-app-dev-api-unknown-host.example.com/graphql'
807
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
808
- ",
809
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey",
810
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_www_GCLOUD_RUN_canonicalHostSuffix",
811
- "HOST": "pan-test-app-dev-www-unknown-host.example.com",
812
- "HOST_CANONICAL": "pan-test-app-dev-www-unknown-host.example.com",
813
- "KUBERNETES_CPU_LIMIT": "1",
814
- "KUBERNETES_CPU_REQUEST": "0.5",
815
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
816
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
817
- "ROOT_URL": "https://pan-test-app-dev-www-unknown-host.example.com",
818
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
819
- },
820
- },
821
- "www 🛑 Stop ⚠️ | dev ": {
822
- "environment": {
823
- "action": "stop",
824
- "name": "dev/www",
825
- "url": "https://pan-test-app-dev-www-unknown-host.example.com",
826
- },
827
- "image": "path/to/docker/gcloud:the-version",
828
- "interruptible": true,
829
- "needs": [],
830
- "retry": {
831
- "max": 2,
832
- "when": [
833
- "runner_system_failure",
834
- "stuck_or_timeout_failure",
835
- ],
836
- },
837
- "rules": [
838
- {
839
- "allow_failure": true,
840
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
841
- "when": "on_success",
842
- },
843
- {
844
- "allow_failure": true,
845
- "when": "manual",
846
- },
847
- ],
848
- "script": [
849
- "set +e",
850
- "echo $CL_dev_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
851
- ",
852
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
853
- "gcloud run services delete pan-test-app-dev-www --project=google-project-id --region=europe-west6",
854
- "echo Disabling component in Dependency Track",
855
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" || true",
856
- "set -e",
857
- ],
858
- "stage": "stop dev",
859
- "variables": {
860
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
861
- "GIT_STRATEGY": "none",
862
- "KUBERNETES_CPU_LIMIT": "1",
863
- "KUBERNETES_CPU_REQUEST": "0.5",
864
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
865
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
866
- },
867
- },
868
- "www 🛡 audit": {
869
- "allow_failure": true,
870
- "image": "path/to/docker/jobs-default:the-version",
871
- "interruptible": true,
872
- "needs": [],
873
- "retry": {
874
- "max": 2,
875
- "when": [
876
- "runner_system_failure",
877
- "stuck_or_timeout_failure",
878
- ],
879
- },
880
- "script": [
881
- "cd www",
882
- "yarn npm audit --environment production",
883
- ],
884
- "stage": "test",
885
- "variables": {
886
- "APP_PATH": "www",
887
- "KUBERNETES_CPU_LIMIT": "2",
888
- "KUBERNETES_CPU_REQUEST": "0.5",
889
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
890
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
891
- },
892
- },
893
- "www 🧪 test": {
894
- "cache": [
895
- {
896
- "key": "www-yarn",
897
- "paths": [
898
- "www/.yarn",
899
- ],
900
- "policy": "pull-push",
901
- },
902
- {
903
- "key": "www-node-modules",
904
- "paths": [
905
- "www/node_modules",
906
- ],
907
- "policy": "pull-push",
908
- },
909
- ],
910
- "image": "path/to/docker/jobs-testing-chrome:the-version",
911
- "interruptible": true,
912
- "needs": [],
913
- "retry": {
914
- "max": 2,
915
- "when": [
916
- "runner_system_failure",
917
- "stuck_or_timeout_failure",
918
- ],
919
- },
920
- "script": [
921
- "cd www",
922
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
923
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
924
- "yarn install --immutable",
925
- "yarn test",
926
- ],
927
- "stage": "test",
928
- "variables": {
929
- "APP_PATH": "www",
930
- "KUBERNETES_CPU_LIMIT": "2",
931
- "KUBERNETES_CPU_REQUEST": "0.5",
932
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
933
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
934
- },
935
- },
936
- "www 🧾 sbom | dev ": {
937
- "allow_failure": true,
938
- "artifacts": {
939
- "paths": [
940
- "__sbom.json",
941
- ],
942
- },
943
- "image": "aquasec/trivy:0.38.3",
944
- "interruptible": true,
945
- "needs": [],
946
- "retry": {
947
- "max": 2,
948
- "when": [
949
- "runner_system_failure",
950
- "stuck_or_timeout_failure",
951
- ],
952
- },
953
- "script": [
954
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
955
- ],
956
- "stage": "build",
957
- "variables": {},
958
- },
959
- },
960
- "stages": [
961
- "setup",
962
- "setup dev",
963
- "setup review",
964
- "setup stage",
965
- "setup prod",
966
- "setup local",
967
- "test",
968
- "test dev",
969
- "test review",
970
- "test stage",
971
- "test prod",
972
- "test local",
973
- "build",
974
- "build dev",
975
- "build review",
976
- "build stage",
977
- "build prod",
978
- "build local",
979
- "deploy",
980
- "deploy dev",
981
- "deploy review",
982
- "deploy stage",
983
- "deploy prod",
984
- "deploy local",
985
- "verify",
986
- "verify dev",
987
- "verify review",
988
- "verify stage",
989
- "verify prod",
990
- "verify local",
991
- "rollback",
992
- "rollback dev",
993
- "rollback review",
994
- "rollback stage",
995
- "rollback prod",
996
- "rollback local",
997
- "stop",
998
- "stop dev",
999
- "stop review",
1000
- "stop stage",
1001
- "stop prod",
1002
- "stop local",
1003
- ],
1004
- "variables": {
1005
- "FF_USE_FASTZIP": "true",
1006
- },
1007
- "workflow": {
1008
- "rules": [
1009
- {
1010
- "if": "$CI_COMMIT_TAG",
1011
- },
1012
- {
1013
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1014
- "when": "never",
1015
- },
1016
- {
1017
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1018
- },
1019
- {
1020
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1021
- },
1022
- {
1023
- "if": "$CI_MERGE_REQUEST_ID",
1024
- },
1025
- ],
1026
- },
1027
- },
1028
- "mr": {
1029
- "image": "path/to/docker/jobs-default:the-version",
1030
- "jobs": {
1031
- "api 👮 lint": {
1032
- "cache": [
1033
- {
1034
- "key": "api-yarn",
1035
- "paths": [
1036
- "api/.yarn",
1037
- ],
1038
- "policy": "pull-push",
1039
- },
1040
- {
1041
- "key": "api-node-modules",
1042
- "paths": [
1043
- "api/node_modules",
1044
- ],
1045
- "policy": "pull-push",
1046
- },
1047
- ],
1048
- "image": "path/to/docker/jobs-default:the-version",
1049
- "interruptible": true,
1050
- "needs": [],
1051
- "retry": {
1052
- "max": 2,
1053
- "when": [
1054
- "runner_system_failure",
1055
- "stuck_or_timeout_failure",
1056
- ],
1057
- },
1058
- "script": [
1059
- "cd api",
1060
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1061
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1062
- "yarn install --immutable",
1063
- "yarn lint",
1064
- ],
1065
- "stage": "test",
1066
- "variables": {
1067
- "APP_PATH": "api",
1068
- "KUBERNETES_CPU_LIMIT": "2",
1069
- "KUBERNETES_CPU_REQUEST": "0.5",
1070
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1071
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1072
- },
1073
- },
1074
- "api 🔨 app | review ": {
1075
- "artifacts": {
1076
- "expire_in": "1 day",
1077
- "paths": [
1078
- "api/__build_info.json",
1079
- "api/dist",
1080
- "api/.next",
1081
- ],
1082
- "reports": {
1083
- "junit": undefined,
1084
- },
1085
- },
1086
- "cache": [
1087
- {
1088
- "key": "api-yarn",
1089
- "paths": [
1090
- "api/.yarn",
1091
- ],
1092
- "policy": "pull-push",
1093
- },
1094
- {
1095
- "key": "api-node-modules",
1096
- "paths": [
1097
- "api/node_modules",
1098
- ],
1099
- "policy": "pull-push",
1100
- },
1101
- {
1102
- "key": "api-next-cache",
1103
- "paths": [
1104
- "api/.next/cache/",
1105
- ],
1106
- "policy": "pull-push",
1107
- },
1108
- ],
1109
- "image": "path/to/docker/jobs-default:the-version",
1110
- "interruptible": true,
1111
- "needs": [],
1112
- "retry": {
1113
- "max": 2,
1114
- "when": [
1115
- "runner_system_failure",
1116
- "stuck_or_timeout_failure",
1117
- ],
1118
- },
1119
- "script": [
1120
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1121
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1122
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1123
- "cd api",
1124
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1125
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1126
- "yarn install --immutable",
1127
- "yarn build",
1128
- ],
1129
- "stage": "build",
1130
- "variables": {
1131
- "APP_DIR": "api",
1132
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1133
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1134
- "BUILD_INFO_ID": "some-id",
1135
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-migration:run",
1136
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run",
1137
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1138
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1139
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1140
- "DB_NAME": "pan-test-app-review-mr1234-api",
1141
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1142
- "DB_USER": "my-user",
1143
- "ENV_SHORT": "review",
1144
- "ENV_TYPE": "review",
1145
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
1146
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
1147
- "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1148
- "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1149
- "KUBERNETES_CPU_LIMIT": "2",
1150
- "KUBERNETES_CPU_REQUEST": "0.5",
1151
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1152
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1153
- "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1154
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1155
- },
1156
- },
1157
- "api 🔨 docker | review ": {
1158
- "cache": [
1159
- {
1160
- "key": "api-yarn",
1161
- "paths": [
1162
- "api/.yarn",
1163
- ],
1164
- "policy": "pull",
1165
- },
1166
- ],
1167
- "image": "path/to/docker/docker-build:the-version",
1168
- "interruptible": true,
1169
- "needs": [
1170
- "api 🔨 app | review ",
1171
- ],
1172
- "retry": {
1173
- "max": 2,
1174
- "when": [
1175
- "runner_system_failure",
1176
- "stuck_or_timeout_failure",
1177
- ],
1178
- },
1179
- "script": [
1180
- "ensureNodeDockerfile",
1181
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1182
- "docker version",
1183
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1184
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1185
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1186
- "docker push $DOCKER_CACHE_IMAGE",
1187
- ],
1188
- "services": [
1189
- {
1190
- "command": [
1191
- "--tls=false",
1192
- ],
1193
- "name": "docker:20-dind",
1194
- },
1195
- ],
1196
- "stage": "build",
1197
- "variables": {
1198
- "APP_DIR": "api",
1199
- "DOCKERFILE_ADDITIONS": undefined,
1200
- "DOCKERFILE_ADDITIONS_END": undefined,
1201
- "DOCKER_BUILDKIT": "1",
1202
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1203
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1204
- RUN yarn plugin import workspace-tools
1205
- RUN yarn workspaces focus --production && yarn rebuild",
1206
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1207
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1208
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1209
- COPY --chown=node:node .yarn /app/.yarn",
1210
- "DOCKER_DIR": ".",
1211
- "DOCKER_DRIVER": "overlay2",
1212
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1213
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1214
- "DOCKER_IMAGE_NAME": "review/api",
1215
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1216
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1217
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1218
- "DOCKER_TLS_CERTDIR": "",
1219
- "KUBERNETES_CPU_LIMIT": "1",
1220
- "KUBERNETES_CPU_REQUEST": "0.5",
1221
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1222
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1223
- },
1224
- },
1225
- "api 🚀 Deploy | review ": {
1226
- "allow_failure": false,
1227
- "artifacts": {
1228
- "paths": [
1229
- "____envvars.yaml",
1230
- ],
1231
- },
1232
- "environment": {
1233
- "auto_stop_in": "2 week",
1234
- "name": "review/some-commit/api",
1235
- "on_stop": "api 🛑 Stop ⚠️ | review ",
1236
- "url": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1237
- },
1238
- "image": "path/to/docker/gcloud:the-version",
1239
- "interruptible": true,
1240
- "needs": [
1241
- {
1242
- "artifacts": false,
1243
- "job": "api 👮 lint",
1244
- },
1245
- {
1246
- "artifacts": false,
1247
- "job": "api 🔨 app | review ",
1248
- },
1249
- {
1250
- "artifacts": false,
1251
- "job": "api 🔨 docker | review ",
1252
- },
1253
- {
1254
- "artifacts": false,
1255
- "job": "api 🧪 test",
1256
- },
1257
- {
1258
- "artifacts": true,
1259
- "job": "api 🧾 sbom | review ",
1260
- },
1261
- {
1262
- "artifacts": false,
1263
- "job": "api 🛡 audit",
1264
- },
1265
- ],
1266
- "retry": {
1267
- "max": 2,
1268
- "when": [
1269
- "runner_system_failure",
1270
- "stuck_or_timeout_failure",
1271
- ],
1272
- },
1273
- "rules": [
1274
- {
1275
- "when": "on_success",
1276
- },
1277
- ],
1278
- "script": [
1279
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1280
- "echo $CL_review_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
1281
- ",
1282
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1283
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
1284
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1285
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1286
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
1287
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1288
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
1289
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1290
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG",
1291
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG",
1292
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
1293
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1294
- "echo "$ENV_VARS" > ____envvars.yaml",
1295
- "set +e",
1296
- "echo "ensuring Database..."",
1297
- "gcloud sql databases create pan-test-app-review-mr1234-api --instance=instancename --project projectId",
1298
- "set -e",
1299
- "set +e",
1300
- "gcloud scheduler jobs create http pan-test-app-review-mr1234-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1301
- "set -e",
1302
- "gcloud scheduler jobs update http pan-test-app-review-mr1234-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1303
- "set +e",
1304
- "gcloud beta run jobs create pan-test-app-review-mr1234-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node --memory=512Mi --task-timeout=10m",
1305
- "set -e",
1306
- "gcloud beta run jobs update pan-test-app-review-mr1234-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node --memory=512Mi --task-timeout=10m --env-vars-file=____envvars.yaml",
1307
- "set +e",
1308
- "gcloud beta run jobs create pan-test-app-review-mr1234-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node --memory=512Mi --task-timeout=15m",
1309
- "set -e",
1310
- "gcloud beta run jobs update pan-test-app-review-mr1234-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node --memory=512Mi --task-timeout=15m --env-vars-file=____envvars.yaml",
1311
- "gcloud run deploy pan-test-app-review-mr1234-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --cpu-boost",
1312
- "gcloud beta run jobs execute pan-test-app-review-mr1234-api-migration --project=google-project-id --region=europe-west6",
1313
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1314
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG",
1315
- "echo Uploading SBOM to Dependency Track",
1316
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" "__sbom.json" vex.json || true",
1317
- ],
1318
- "services": [
1319
- {
1320
- "command": [
1321
- "--tls=false",
1322
- ],
1323
- "name": "docker:20-dind",
1324
- },
1325
- ],
1326
- "stage": "deploy review",
1327
- "variables": {
1328
- "APP_DIR": "api",
1329
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1330
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1331
- "BUILD_INFO_ID": "some-id",
1332
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1333
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-migration:run",
1334
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run",
1335
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1336
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1337
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1338
- "DB_NAME": "pan-test-app-review-mr1234-api",
1339
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1340
- "DB_USER": "my-user",
1341
- "DOCKER_BUILDKIT": "1",
1342
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1343
- "DOCKER_DRIVER": "overlay2",
1344
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1345
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1346
- "DOCKER_IMAGE_NAME": "review/api",
1347
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1348
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1349
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1350
- "DOCKER_TLS_CERTDIR": "",
1351
- "ENV_SHORT": "review",
1352
- "ENV_TYPE": "review",
1353
- "ENV_VARS": "ENV_SHORT: 'review'
1354
- APP_DIR: 'api'
1355
- ENV_TYPE: 'review'
1356
- BUILD_INFO_ID: 'some-id'
1357
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1358
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1359
- HOST: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1360
- ROOT_URL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
1361
- HOST_CANONICAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1362
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
1363
- DB_NAME: 'pan-test-app-review-mr1234-api'
1364
- DB_USER: 'my-user'
1365
- DB_PASSWORD: '$CL_review_api_DB_PASSWORD'
1366
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
1367
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
1368
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-migration:run'
1369
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run'
1370
- GCLOUD_RUN_canonicalHostSuffix: '$CL_review_api_GCLOUD_RUN_canonicalHostSuffix'
1371
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
1372
- ",
1373
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
1374
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
1375
- "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1376
- "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1377
- "KUBERNETES_CPU_LIMIT": "1",
1378
- "KUBERNETES_CPU_REQUEST": "0.5",
1379
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1380
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1381
- "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1382
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1383
- },
1384
- },
1385
- "api 🛑 Stop ⚠️ | review ": {
1386
- "environment": {
1387
- "action": "stop",
1388
- "name": "review/some-commit/api",
1389
- "url": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1390
- },
1391
- "image": "path/to/docker/gcloud:the-version",
1392
- "interruptible": true,
1393
- "needs": [],
1394
- "retry": {
1395
- "max": 2,
1396
- "when": [
1397
- "runner_system_failure",
1398
- "stuck_or_timeout_failure",
1399
- ],
1400
- },
1401
- "rules": [
1402
- {
1403
- "allow_failure": true,
1404
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1405
- "when": "on_success",
1406
- },
1407
- {
1408
- "allow_failure": true,
1409
- "when": "manual",
1410
- },
1411
- ],
1412
- "script": [
1413
- "set +e",
1414
- "echo $CL_review_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
1415
- ",
1416
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1417
- "gcloud run services delete pan-test-app-review-mr1234-api --project=google-project-id --region=europe-west6",
1418
- "gcloud scheduler jobs delete pan-test-app-review-mr1234-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
1419
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-review-mr1234-api-migration --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
1420
- "gcloud beta run jobs delete pan-test-app-review-mr1234-api-migration --project=google-project-id --region=europe-west6",
1421
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-review-mr1234-api-send-reminders --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
1422
- "gcloud beta run jobs delete pan-test-app-review-mr1234-api-send-reminders --project=google-project-id --region=europe-west6",
1423
- "echo "deleting database pan-test-app-review-mr1234-api..."",
1424
- "echo "👆 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down"",
1425
- "
1426
- until gcloud sql databases delete pan-test-app-review-mr1234-api --instance=instancename --project projectId
1427
- do
1428
- echo "Trying again."
1429
- sleep 10
1430
- done
1431
- ",
1432
- "echo Disabling component in Dependency Track",
1433
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" || true",
1434
- "set -e",
1435
- ],
1436
- "stage": "stop review",
1437
- "variables": {
1438
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1439
- "GIT_STRATEGY": "none",
1440
- "KUBERNETES_CPU_LIMIT": "1",
1441
- "KUBERNETES_CPU_REQUEST": "0.5",
1442
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1443
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1444
- },
1445
- },
1446
- "api 🛡 audit": {
1447
- "allow_failure": true,
1448
- "image": "path/to/docker/jobs-default:the-version",
1449
- "interruptible": true,
1450
- "needs": [],
1451
- "retry": {
1452
- "max": 2,
1453
- "when": [
1454
- "runner_system_failure",
1455
- "stuck_or_timeout_failure",
1456
- ],
1457
- },
1458
- "script": [
1459
- "cd api",
1460
- "yarn npm audit --environment production",
1461
- ],
1462
- "stage": "test",
1463
- "variables": {
1464
- "APP_PATH": "api",
1465
- "KUBERNETES_CPU_LIMIT": "2",
1466
- "KUBERNETES_CPU_REQUEST": "0.5",
1467
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1468
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1469
- },
1470
- },
1471
- "api 🧪 test": {
1472
- "cache": [
1473
- {
1474
- "key": "api-yarn",
1475
- "paths": [
1476
- "api/.yarn",
1477
- ],
1478
- "policy": "pull-push",
1479
- },
1480
- {
1481
- "key": "api-node-modules",
1482
- "paths": [
1483
- "api/node_modules",
1484
- ],
1485
- "policy": "pull-push",
1486
- },
1487
- ],
1488
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1489
- "interruptible": true,
1490
- "needs": [],
1491
- "retry": {
1492
- "max": 2,
1493
- "when": [
1494
- "runner_system_failure",
1495
- "stuck_or_timeout_failure",
1496
- ],
1497
- },
1498
- "script": [
1499
- "cd api",
1500
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1501
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1502
- "yarn install --immutable",
1503
- "yarn test",
1504
- ],
1505
- "stage": "test",
1506
- "variables": {
1507
- "APP_PATH": "api",
1508
- "KUBERNETES_CPU_LIMIT": "2",
1509
- "KUBERNETES_CPU_REQUEST": "0.5",
1510
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1511
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1512
- },
1513
- },
1514
- "api 🧾 sbom | review ": {
1515
- "allow_failure": true,
1516
- "artifacts": {
1517
- "paths": [
1518
- "__sbom.json",
1519
- ],
1520
- },
1521
- "image": "aquasec/trivy:0.38.3",
1522
- "interruptible": true,
1523
- "needs": [],
1524
- "retry": {
1525
- "max": 2,
1526
- "when": [
1527
- "runner_system_failure",
1528
- "stuck_or_timeout_failure",
1529
- ],
1530
- },
1531
- "script": [
1532
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
1533
- ],
1534
- "stage": "build",
1535
- "variables": {},
1536
- },
1537
- "www 👮 lint": {
1538
- "cache": [
1539
- {
1540
- "key": "www-yarn",
1541
- "paths": [
1542
- "www/.yarn",
1543
- ],
1544
- "policy": "pull-push",
1545
- },
1546
- {
1547
- "key": "www-node-modules",
1548
- "paths": [
1549
- "www/node_modules",
1550
- ],
1551
- "policy": "pull-push",
1552
- },
1553
- ],
1554
- "image": "path/to/docker/jobs-default:the-version",
1555
- "interruptible": true,
1556
- "needs": [],
1557
- "retry": {
1558
- "max": 2,
1559
- "when": [
1560
- "runner_system_failure",
1561
- "stuck_or_timeout_failure",
1562
- ],
1563
- },
1564
- "script": [
1565
- "cd www",
1566
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1567
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1568
- "yarn install --immutable",
1569
- "yarn lint",
1570
- ],
1571
- "stage": "test",
1572
- "variables": {
1573
- "APP_PATH": "www",
1574
- "KUBERNETES_CPU_LIMIT": "2",
1575
- "KUBERNETES_CPU_REQUEST": "0.5",
1576
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1577
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1578
- },
1579
- },
1580
- "www 🔨 app | review ": {
1581
- "artifacts": {
1582
- "expire_in": "1 day",
1583
- "paths": [
1584
- "www/__build_info.json",
1585
- "www/dist",
1586
- "www/.next",
1587
- ],
1588
- "reports": {
1589
- "junit": undefined,
1590
- },
1591
- },
1592
- "cache": [
1593
- {
1594
- "key": "www-yarn",
1595
- "paths": [
1596
- "www/.yarn",
1597
- ],
1598
- "policy": "pull-push",
1599
- },
1600
- {
1601
- "key": "www-node-modules",
1602
- "paths": [
1603
- "www/node_modules",
1604
- ],
1605
- "policy": "pull-push",
1606
- },
1607
- {
1608
- "key": "www-next-cache",
1609
- "paths": [
1610
- "www/.next/cache/",
1611
- ],
1612
- "policy": "pull-push",
1613
- },
1614
- ],
1615
- "image": "path/to/docker/jobs-default:the-version",
1616
- "interruptible": true,
1617
- "needs": [],
1618
- "retry": {
1619
- "max": 2,
1620
- "when": [
1621
- "runner_system_failure",
1622
- "stuck_or_timeout_failure",
1623
- ],
1624
- },
1625
- "script": [
1626
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
1627
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1628
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1629
- "cd www",
1630
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1631
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1632
- "yarn install --immutable",
1633
- "yarn build",
1634
- ],
1635
- "stage": "build",
1636
- "variables": {
1637
- "API_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com/graphql",
1638
- "APP_DIR": "www",
1639
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1640
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1641
- "BUILD_INFO_ID": "some-id",
1642
- "ENV_SHORT": "review",
1643
- "ENV_TYPE": "review",
1644
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_www_GCLOUD_DEPLOY_credentialsKey",
1645
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_www_GCLOUD_RUN_canonicalHostSuffix",
1646
- "HOST": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1647
- "HOST_CANONICAL": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1648
- "KUBERNETES_CPU_LIMIT": "2",
1649
- "KUBERNETES_CPU_REQUEST": "0.5",
1650
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1651
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1652
- "ROOT_URL": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1653
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
1654
- },
1655
- },
1656
- "www 🔨 docker | review ": {
1657
- "cache": [
1658
- {
1659
- "key": "www-yarn",
1660
- "paths": [
1661
- "www/.yarn",
1662
- ],
1663
- "policy": "pull",
1664
- },
1665
- ],
1666
- "image": "path/to/docker/docker-build:the-version",
1667
- "interruptible": true,
1668
- "needs": [
1669
- "www 🔨 app | review ",
1670
- ],
1671
- "retry": {
1672
- "max": 2,
1673
- "when": [
1674
- "runner_system_failure",
1675
- "stuck_or_timeout_failure",
1676
- ],
1677
- },
1678
- "script": [
1679
- "ensureNodeDockerfile",
1680
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1681
- "docker version",
1682
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1683
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1684
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1685
- "docker push $DOCKER_CACHE_IMAGE",
1686
- ],
1687
- "services": [
1688
- {
1689
- "command": [
1690
- "--tls=false",
1691
- ],
1692
- "name": "docker:20-dind",
1693
- },
1694
- ],
1695
- "stage": "build",
1696
- "variables": {
1697
- "APP_DIR": "www",
1698
- "DOCKERFILE_ADDITIONS": undefined,
1699
- "DOCKERFILE_ADDITIONS_END": undefined,
1700
- "DOCKER_BUILDKIT": "1",
1701
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
1702
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1703
- RUN yarn plugin import workspace-tools
1704
- RUN yarn workspaces focus --production && yarn rebuild",
1705
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
1706
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
1707
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1708
- COPY --chown=node:node .yarn /app/.yarn",
1709
- "DOCKER_DIR": ".",
1710
- "DOCKER_DRIVER": "overlay2",
1711
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1712
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1713
- "DOCKER_IMAGE_NAME": "review/www",
1714
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1715
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1716
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1717
- "DOCKER_TLS_CERTDIR": "",
1718
- "KUBERNETES_CPU_LIMIT": "1",
1719
- "KUBERNETES_CPU_REQUEST": "0.5",
1720
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1721
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1722
- },
1723
- },
1724
- "www 🚀 Deploy | review ": {
1725
- "allow_failure": false,
1726
- "artifacts": {
1727
- "paths": [
1728
- "____envvars.yaml",
1729
- ],
1730
- },
1731
- "environment": {
1732
- "auto_stop_in": "2 week",
1733
- "name": "review/some-commit/www",
1734
- "on_stop": "www 🛑 Stop ⚠️ | review ",
1735
- "url": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1736
- },
1737
- "image": "path/to/docker/gcloud:the-version",
1738
- "interruptible": true,
1739
- "needs": [
1740
- {
1741
- "artifacts": false,
1742
- "job": "www 👮 lint",
1743
- },
1744
- {
1745
- "artifacts": false,
1746
- "job": "www 🔨 app | review ",
1747
- },
1748
- {
1749
- "artifacts": false,
1750
- "job": "www 🔨 docker | review ",
1751
- },
1752
- {
1753
- "artifacts": false,
1754
- "job": "www 🧪 test",
1755
- },
1756
- {
1757
- "artifacts": true,
1758
- "job": "www 🧾 sbom | review ",
1759
- },
1760
- {
1761
- "artifacts": false,
1762
- "job": "www 🛡 audit",
1763
- },
1764
- ],
1765
- "retry": {
1766
- "max": 2,
1767
- "when": [
1768
- "runner_system_failure",
1769
- "stuck_or_timeout_failure",
1770
- ],
1771
- },
1772
- "rules": [
1773
- {
1774
- "when": "on_success",
1775
- },
1776
- ],
1777
- "script": [
1778
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1779
- "echo $CL_review_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
1780
- ",
1781
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1782
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
1783
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1784
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1785
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
1786
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1787
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
1788
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1789
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234:$DOCKER_IMAGE_TAG",
1790
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234:$DOCKER_IMAGE_TAG",
1791
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
1792
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1793
- "echo "$ENV_VARS" > ____envvars.yaml",
1794
- "gcloud run deploy pan-test-app-review-mr1234-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=review,env-name=review,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
1795
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1796
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234:$DOCKER_IMAGE_TAG",
1797
- "echo Uploading SBOM to Dependency Track",
1798
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" "__sbom.json" vex.json || true",
1799
- ],
1800
- "services": [
1801
- {
1802
- "command": [
1803
- "--tls=false",
1804
- ],
1805
- "name": "docker:20-dind",
1806
- },
1807
- ],
1808
- "stage": "deploy review",
1809
- "variables": {
1810
- "API_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com/graphql",
1811
- "APP_DIR": "www",
1812
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1813
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1814
- "BUILD_INFO_ID": "some-id",
1815
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1816
- "DOCKER_BUILDKIT": "1",
1817
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
1818
- "DOCKER_DRIVER": "overlay2",
1819
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1820
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1821
- "DOCKER_IMAGE_NAME": "review/www",
1822
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1823
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1824
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1825
- "DOCKER_TLS_CERTDIR": "",
1826
- "ENV_SHORT": "review",
1827
- "ENV_TYPE": "review",
1828
- "ENV_VARS": "ENV_SHORT: 'review'
1829
- APP_DIR: 'www'
1830
- ENV_TYPE: 'review'
1831
- BUILD_INFO_ID: 'some-id'
1832
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1833
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1834
- HOST: 'pan-test-app-review-mr1234-www-unknown-host.example.com'
1835
- ROOT_URL: 'https://pan-test-app-review-mr1234-www-unknown-host.example.com'
1836
- HOST_CANONICAL: 'pan-test-app-review-mr1234-www-unknown-host.example.com'
1837
- GCLOUD_RUN_canonicalHostSuffix: '$CL_review_www_GCLOUD_RUN_canonicalHostSuffix'
1838
- API_URL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com/graphql'
1839
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
1840
- ",
1841
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_www_GCLOUD_DEPLOY_credentialsKey",
1842
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_www_GCLOUD_RUN_canonicalHostSuffix",
1843
- "HOST": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1844
- "HOST_CANONICAL": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1845
- "KUBERNETES_CPU_LIMIT": "1",
1846
- "KUBERNETES_CPU_REQUEST": "0.5",
1847
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1848
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1849
- "ROOT_URL": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1850
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
1851
- },
1852
- },
1853
- "www 🛑 Stop ⚠️ | review ": {
1854
- "environment": {
1855
- "action": "stop",
1856
- "name": "review/some-commit/www",
1857
- "url": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1858
- },
1859
- "image": "path/to/docker/gcloud:the-version",
1860
- "interruptible": true,
1861
- "needs": [],
1862
- "retry": {
1863
- "max": 2,
1864
- "when": [
1865
- "runner_system_failure",
1866
- "stuck_or_timeout_failure",
1867
- ],
1868
- },
1869
- "rules": [
1870
- {
1871
- "allow_failure": true,
1872
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1873
- "when": "on_success",
1874
- },
1875
- {
1876
- "allow_failure": true,
1877
- "when": "manual",
1878
- },
1879
- ],
1880
- "script": [
1881
- "set +e",
1882
- "echo $CL_review_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
1883
- ",
1884
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1885
- "gcloud run services delete pan-test-app-review-mr1234-www --project=google-project-id --region=europe-west6",
1886
- "echo Disabling component in Dependency Track",
1887
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" || true",
1888
- "set -e",
1889
- ],
1890
- "stage": "stop review",
1891
- "variables": {
1892
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1893
- "GIT_STRATEGY": "none",
1894
- "KUBERNETES_CPU_LIMIT": "1",
1895
- "KUBERNETES_CPU_REQUEST": "0.5",
1896
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1897
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1898
- },
1899
- },
1900
- "www 🛡 audit": {
1901
- "allow_failure": true,
1902
- "image": "path/to/docker/jobs-default:the-version",
1903
- "interruptible": true,
1904
- "needs": [],
1905
- "retry": {
1906
- "max": 2,
1907
- "when": [
1908
- "runner_system_failure",
1909
- "stuck_or_timeout_failure",
1910
- ],
1911
- },
1912
- "script": [
1913
- "cd www",
1914
- "yarn npm audit --environment production",
1915
- ],
1916
- "stage": "test",
1917
- "variables": {
1918
- "APP_PATH": "www",
1919
- "KUBERNETES_CPU_LIMIT": "2",
1920
- "KUBERNETES_CPU_REQUEST": "0.5",
1921
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1922
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1923
- },
1924
- },
1925
- "www 🧪 test": {
1926
- "cache": [
1927
- {
1928
- "key": "www-yarn",
1929
- "paths": [
1930
- "www/.yarn",
1931
- ],
1932
- "policy": "pull-push",
1933
- },
1934
- {
1935
- "key": "www-node-modules",
1936
- "paths": [
1937
- "www/node_modules",
1938
- ],
1939
- "policy": "pull-push",
1940
- },
1941
- ],
1942
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1943
- "interruptible": true,
1944
- "needs": [],
1945
- "retry": {
1946
- "max": 2,
1947
- "when": [
1948
- "runner_system_failure",
1949
- "stuck_or_timeout_failure",
1950
- ],
1951
- },
1952
- "script": [
1953
- "cd www",
1954
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1955
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1956
- "yarn install --immutable",
1957
- "yarn test",
1958
- ],
1959
- "stage": "test",
1960
- "variables": {
1961
- "APP_PATH": "www",
1962
- "KUBERNETES_CPU_LIMIT": "2",
1963
- "KUBERNETES_CPU_REQUEST": "0.5",
1964
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1965
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1966
- },
1967
- },
1968
- "www 🧾 sbom | review ": {
1969
- "allow_failure": true,
1970
- "artifacts": {
1971
- "paths": [
1972
- "__sbom.json",
1973
- ],
1974
- },
1975
- "image": "aquasec/trivy:0.38.3",
1976
- "interruptible": true,
1977
- "needs": [],
1978
- "retry": {
1979
- "max": 2,
1980
- "when": [
1981
- "runner_system_failure",
1982
- "stuck_or_timeout_failure",
1983
- ],
1984
- },
1985
- "script": [
1986
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
1987
- ],
1988
- "stage": "build",
1989
- "variables": {},
1990
- },
1991
- },
1992
- "stages": [
1993
- "setup",
1994
- "setup dev",
1995
- "setup review",
1996
- "setup stage",
1997
- "setup prod",
1998
- "setup local",
1999
- "test",
2000
- "test dev",
2001
- "test review",
2002
- "test stage",
2003
- "test prod",
2004
- "test local",
2005
- "build",
2006
- "build dev",
2007
- "build review",
2008
- "build stage",
2009
- "build prod",
2010
- "build local",
2011
- "deploy",
2012
- "deploy dev",
2013
- "deploy review",
2014
- "deploy stage",
2015
- "deploy prod",
2016
- "deploy local",
2017
- "verify",
2018
- "verify dev",
2019
- "verify review",
2020
- "verify stage",
2021
- "verify prod",
2022
- "verify local",
2023
- "rollback",
2024
- "rollback dev",
2025
- "rollback review",
2026
- "rollback stage",
2027
- "rollback prod",
2028
- "rollback local",
2029
- "stop",
2030
- "stop dev",
2031
- "stop review",
2032
- "stop stage",
2033
- "stop prod",
2034
- "stop local",
2035
- ],
2036
- "variables": {
2037
- "FF_USE_FASTZIP": "true",
2038
- },
2039
- "workflow": {
2040
- "rules": [
2041
- {
2042
- "if": "$CI_COMMIT_TAG",
2043
- },
2044
- {
2045
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2046
- "when": "never",
2047
- },
2048
- {
2049
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2050
- },
2051
- {
2052
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2053
- },
2054
- {
2055
- "if": "$CI_MERGE_REQUEST_ID",
2056
- },
2057
- ],
2058
- },
2059
- },
2060
- "taggedRelease": {
2061
- "image": "path/to/docker/jobs-default:the-version",
2062
- "jobs": {
2063
- "api 🔨 app | prod ": {
2064
- "artifacts": {
2065
- "expire_in": "1 day",
2066
- "paths": [
2067
- "api/__build_info.json",
2068
- "api/dist",
2069
- "api/.next",
2070
- ],
2071
- "reports": {
2072
- "junit": undefined,
2073
- },
2074
- },
2075
- "cache": [
2076
- {
2077
- "key": "api-yarn",
2078
- "paths": [
2079
- "api/.yarn",
2080
- ],
2081
- "policy": "pull-push",
2082
- },
2083
- {
2084
- "key": "api-node-modules",
2085
- "paths": [
2086
- "api/node_modules",
2087
- ],
2088
- "policy": "pull-push",
2089
- },
2090
- {
2091
- "key": "api-next-cache",
2092
- "paths": [
2093
- "api/.next/cache/",
2094
- ],
2095
- "policy": "pull-push",
2096
- },
2097
- ],
2098
- "image": "path/to/docker/jobs-default:the-version",
2099
- "interruptible": true,
2100
- "needs": [],
2101
- "retry": {
2102
- "max": 2,
2103
- "when": [
2104
- "runner_system_failure",
2105
- "stuck_or_timeout_failure",
2106
- ],
2107
- },
2108
- "script": [
2109
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2110
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2111
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2112
- "cd api",
2113
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2114
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2115
- "yarn install --immutable",
2116
- "yarn build",
2117
- ],
2118
- "stage": "build",
2119
- "variables": {
2120
- "APP_DIR": "api",
2121
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2122
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2123
- "BUILD_INFO_ID": "some-id",
2124
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-migration:run",
2125
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run",
2126
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2127
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2128
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2129
- "DB_NAME": "pan-test-app-prod-api",
2130
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2131
- "DB_USER": "my-user",
2132
- "ENV_SHORT": "prod",
2133
- "ENV_TYPE": "prod",
2134
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
2135
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
2136
- "HOST": "pan-test-app-prod-api-unknown-host.example.com",
2137
- "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
2138
- "KUBERNETES_CPU_LIMIT": "2",
2139
- "KUBERNETES_CPU_REQUEST": "0.5",
2140
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2141
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2142
- "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
2143
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2144
- },
2145
- },
2146
- "api 🔨 app | stage ": {
2147
- "artifacts": {
2148
- "expire_in": "1 day",
2149
- "paths": [
2150
- "api/__build_info.json",
2151
- "api/dist",
2152
- "api/.next",
2153
- ],
2154
- "reports": {
2155
- "junit": undefined,
2156
- },
2157
- },
2158
- "cache": [
2159
- {
2160
- "key": "api-yarn",
2161
- "paths": [
2162
- "api/.yarn",
2163
- ],
2164
- "policy": "pull-push",
2165
- },
2166
- {
2167
- "key": "api-node-modules",
2168
- "paths": [
2169
- "api/node_modules",
2170
- ],
2171
- "policy": "pull-push",
2172
- },
2173
- {
2174
- "key": "api-next-cache",
2175
- "paths": [
2176
- "api/.next/cache/",
2177
- ],
2178
- "policy": "pull-push",
2179
- },
2180
- ],
2181
- "image": "path/to/docker/jobs-default:the-version",
2182
- "interruptible": true,
2183
- "needs": [],
2184
- "retry": {
2185
- "max": 2,
2186
- "when": [
2187
- "runner_system_failure",
2188
- "stuck_or_timeout_failure",
2189
- ],
2190
- },
2191
- "script": [
2192
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2193
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2194
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2195
- "cd api",
2196
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2197
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2198
- "yarn install --immutable",
2199
- "yarn build",
2200
- ],
2201
- "stage": "build",
2202
- "variables": {
2203
- "APP_DIR": "api",
2204
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2205
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2206
- "BUILD_INFO_ID": "some-id",
2207
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-migration:run",
2208
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run",
2209
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2210
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2211
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2212
- "DB_NAME": "pan-test-app-stage-api",
2213
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
2214
- "DB_USER": "my-user",
2215
- "ENV_SHORT": "stage",
2216
- "ENV_TYPE": "stage",
2217
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
2218
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
2219
- "HOST": "pan-test-app-stage-api-unknown-host.example.com",
2220
- "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
2221
- "KUBERNETES_CPU_LIMIT": "2",
2222
- "KUBERNETES_CPU_REQUEST": "0.5",
2223
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2224
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2225
- "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
2226
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2227
- },
2228
- },
2229
- "api 🔨 docker | prod ": {
2230
- "cache": [
2231
- {
2232
- "key": "api-yarn",
2233
- "paths": [
2234
- "api/.yarn",
2235
- ],
2236
- "policy": "pull",
2237
- },
2238
- ],
2239
- "image": "path/to/docker/docker-build:the-version",
2240
- "interruptible": true,
2241
- "needs": [
2242
- "api 🔨 app | prod ",
2243
- ],
2244
- "retry": {
2245
- "max": 2,
2246
- "when": [
2247
- "runner_system_failure",
2248
- "stuck_or_timeout_failure",
2249
- ],
2250
- },
2251
- "script": [
2252
- "ensureNodeDockerfile",
2253
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2254
- "docker version",
2255
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2256
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2257
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2258
- "docker push $DOCKER_CACHE_IMAGE",
2259
- ],
2260
- "services": [
2261
- {
2262
- "command": [
2263
- "--tls=false",
2264
- ],
2265
- "name": "docker:20-dind",
2266
- },
2267
- ],
2268
- "stage": "build",
2269
- "variables": {
2270
- "APP_DIR": "api",
2271
- "DOCKERFILE_ADDITIONS": undefined,
2272
- "DOCKERFILE_ADDITIONS_END": undefined,
2273
- "DOCKER_BUILDKIT": "1",
2274
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
2275
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
2276
- RUN yarn plugin import workspace-tools
2277
- RUN yarn workspaces focus --production && yarn rebuild",
2278
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
2279
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
2280
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
2281
- COPY --chown=node:node .yarn /app/.yarn",
2282
- "DOCKER_DIR": ".",
2283
- "DOCKER_DRIVER": "overlay2",
2284
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2285
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2286
- "DOCKER_IMAGE_NAME": "prod/api",
2287
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2288
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2289
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2290
- "DOCKER_TLS_CERTDIR": "",
2291
- "KUBERNETES_CPU_LIMIT": "1",
2292
- "KUBERNETES_CPU_REQUEST": "0.5",
2293
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2294
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2295
- },
2296
- },
2297
- "api 🔨 docker | stage ": {
2298
- "cache": [
2299
- {
2300
- "key": "api-yarn",
2301
- "paths": [
2302
- "api/.yarn",
2303
- ],
2304
- "policy": "pull",
2305
- },
2306
- ],
2307
- "image": "path/to/docker/docker-build:the-version",
2308
- "interruptible": true,
2309
- "needs": [
2310
- "api 🔨 app | stage ",
2311
- ],
2312
- "retry": {
2313
- "max": 2,
2314
- "when": [
2315
- "runner_system_failure",
2316
- "stuck_or_timeout_failure",
2317
- ],
2318
- },
2319
- "script": [
2320
- "ensureNodeDockerfile",
2321
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2322
- "docker version",
2323
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2324
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2325
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2326
- "docker push $DOCKER_CACHE_IMAGE",
2327
- ],
2328
- "services": [
2329
- {
2330
- "command": [
2331
- "--tls=false",
2332
- ],
2333
- "name": "docker:20-dind",
2334
- },
2335
- ],
2336
- "stage": "build",
2337
- "variables": {
2338
- "APP_DIR": "api",
2339
- "DOCKERFILE_ADDITIONS": undefined,
2340
- "DOCKERFILE_ADDITIONS_END": undefined,
2341
- "DOCKER_BUILDKIT": "1",
2342
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
2343
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
2344
- RUN yarn plugin import workspace-tools
2345
- RUN yarn workspaces focus --production && yarn rebuild",
2346
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
2347
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
2348
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
2349
- COPY --chown=node:node .yarn /app/.yarn",
2350
- "DOCKER_DIR": ".",
2351
- "DOCKER_DRIVER": "overlay2",
2352
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2353
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2354
- "DOCKER_IMAGE_NAME": "stage/api",
2355
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2356
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2357
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2358
- "DOCKER_TLS_CERTDIR": "",
2359
- "KUBERNETES_CPU_LIMIT": "1",
2360
- "KUBERNETES_CPU_REQUEST": "0.5",
2361
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2362
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2363
- },
2364
- },
2365
- "api 🚀 Deploy | prod ": {
2366
- "allow_failure": true,
2367
- "artifacts": {
2368
- "paths": [
2369
- "____envvars.yaml",
2370
- ],
2371
- },
2372
- "environment": {
2373
- "auto_stop_in": undefined,
2374
- "name": "prod/api",
2375
- "on_stop": "api 🛑 Stop ⚠️ | prod ",
2376
- "url": "https://pan-test-app-prod-api-unknown-host.example.com",
2377
- },
2378
- "image": "path/to/docker/gcloud:the-version",
2379
- "interruptible": true,
2380
- "needs": [
2381
- {
2382
- "artifacts": false,
2383
- "job": "api 🔨 app | prod ",
2384
- },
2385
- {
2386
- "artifacts": false,
2387
- "job": "api 🔨 docker | prod ",
2388
- },
2389
- {
2390
- "artifacts": true,
2391
- "job": "api 🧾 sbom | prod ",
2392
- },
2393
- ],
2394
- "retry": {
2395
- "max": 2,
2396
- "when": [
2397
- "runner_system_failure",
2398
- "stuck_or_timeout_failure",
2399
- ],
2400
- },
2401
- "rules": [
2402
- {
2403
- "when": "manual",
2404
- },
2405
- ],
2406
- "script": [
2407
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
2408
- "echo $CL_prod_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
2409
- ",
2410
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
2411
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
2412
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
2413
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
2414
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
2415
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2416
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
2417
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2418
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG",
2419
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG",
2420
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
2421
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
2422
- "echo "$ENV_VARS" > ____envvars.yaml",
2423
- "set +e",
2424
- "echo "ensuring Database..."",
2425
- "gcloud sql databases create pan-test-app-prod-api --instance=instancename --project projectId",
2426
- "set -e",
2427
- "set +e",
2428
- "gcloud scheduler jobs create http pan-test-app-prod-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2429
- "set -e",
2430
- "gcloud scheduler jobs update http pan-test-app-prod-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2431
- "set +e",
2432
- "gcloud beta run jobs create pan-test-app-prod-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node --memory=512Mi --task-timeout=10m",
2433
- "set -e",
2434
- "gcloud beta run jobs update pan-test-app-prod-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node --memory=512Mi --task-timeout=10m --env-vars-file=____envvars.yaml",
2435
- "set +e",
2436
- "gcloud beta run jobs create pan-test-app-prod-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node --memory=512Mi --task-timeout=15m",
2437
- "set -e",
2438
- "gcloud beta run jobs update pan-test-app-prod-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node --memory=512Mi --task-timeout=15m --env-vars-file=____envvars.yaml",
2439
- "gcloud run deploy pan-test-app-prod-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --cpu-boost",
2440
- "gcloud beta run jobs execute pan-test-app-prod-api-migration --project=google-project-id --region=europe-west6",
2441
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
2442
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG",
2443
- "echo Uploading SBOM to Dependency Track",
2444
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" "__sbom.json" vex.json || true",
2445
- ],
2446
- "services": [
2447
- {
2448
- "command": [
2449
- "--tls=false",
2450
- ],
2451
- "name": "docker:20-dind",
2452
- },
2453
- ],
2454
- "stage": "deploy prod",
2455
- "variables": {
2456
- "APP_DIR": "api",
2457
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2458
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2459
- "BUILD_INFO_ID": "some-id",
2460
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2461
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-migration:run",
2462
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run",
2463
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2464
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2465
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2466
- "DB_NAME": "pan-test-app-prod-api",
2467
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2468
- "DB_USER": "my-user",
2469
- "DOCKER_BUILDKIT": "1",
2470
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
2471
- "DOCKER_DRIVER": "overlay2",
2472
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2473
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2474
- "DOCKER_IMAGE_NAME": "prod/api",
2475
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2476
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2477
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2478
- "DOCKER_TLS_CERTDIR": "",
2479
- "ENV_SHORT": "prod",
2480
- "ENV_TYPE": "prod",
2481
- "ENV_VARS": "ENV_SHORT: 'prod'
2482
- APP_DIR: 'api'
2483
- ENV_TYPE: 'prod'
2484
- BUILD_INFO_ID: 'some-id'
2485
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2486
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2487
- HOST: 'pan-test-app-prod-api-unknown-host.example.com'
2488
- ROOT_URL: 'https://pan-test-app-prod-api-unknown-host.example.com'
2489
- HOST_CANONICAL: 'pan-test-app-prod-api-unknown-host.example.com'
2490
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
2491
- DB_NAME: 'pan-test-app-prod-api'
2492
- DB_USER: 'my-user'
2493
- DB_PASSWORD: '$CL_prod_api_DB_PASSWORD'
2494
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
2495
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
2496
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-migration:run'
2497
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run'
2498
- GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix'
2499
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
2500
- ",
2501
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
2502
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
2503
- "HOST": "pan-test-app-prod-api-unknown-host.example.com",
2504
- "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
2505
- "KUBERNETES_CPU_LIMIT": "1",
2506
- "KUBERNETES_CPU_REQUEST": "0.5",
2507
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2508
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2509
- "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
2510
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2511
- },
2512
- },
2513
- "api 🚀 Deploy | stage ": {
2514
- "allow_failure": false,
2515
- "artifacts": {
2516
- "paths": [
2517
- "____envvars.yaml",
2518
- ],
2519
- },
2520
- "environment": {
2521
- "auto_stop_in": undefined,
2522
- "name": "stage/api",
2523
- "on_stop": "api 🛑 Stop ⚠️ | stage ",
2524
- "url": "https://pan-test-app-stage-api-unknown-host.example.com",
2525
- },
2526
- "image": "path/to/docker/gcloud:the-version",
2527
- "interruptible": true,
2528
- "needs": [
2529
- {
2530
- "artifacts": false,
2531
- "job": "api 🔨 app | stage ",
2532
- },
2533
- {
2534
- "artifacts": false,
2535
- "job": "api 🔨 docker | stage ",
2536
- },
2537
- {
2538
- "artifacts": true,
2539
- "job": "api 🧾 sbom | stage ",
2540
- },
2541
- ],
2542
- "retry": {
2543
- "max": 2,
2544
- "when": [
2545
- "runner_system_failure",
2546
- "stuck_or_timeout_failure",
2547
- ],
2548
- },
2549
- "rules": [
2550
- {
2551
- "when": "on_success",
2552
- },
2553
- ],
2554
- "script": [
2555
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
2556
- "echo $CL_stage_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
2557
- ",
2558
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
2559
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
2560
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
2561
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
2562
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
2563
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2564
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
2565
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2566
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG",
2567
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG",
2568
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
2569
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
2570
- "echo "$ENV_VARS" > ____envvars.yaml",
2571
- "set +e",
2572
- "echo "ensuring Database..."",
2573
- "gcloud sql databases create pan-test-app-stage-api --instance=instancename --project projectId",
2574
- "set -e",
2575
- "set +e",
2576
- "gcloud scheduler jobs create http pan-test-app-stage-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2577
- "set -e",
2578
- "gcloud scheduler jobs update http pan-test-app-stage-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2579
- "set +e",
2580
- "gcloud beta run jobs create pan-test-app-stage-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node --memory=512Mi --task-timeout=10m",
2581
- "set -e",
2582
- "gcloud beta run jobs update pan-test-app-stage-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node --memory=512Mi --task-timeout=10m --env-vars-file=____envvars.yaml",
2583
- "set +e",
2584
- "gcloud beta run jobs create pan-test-app-stage-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node --memory=512Mi --task-timeout=15m",
2585
- "set -e",
2586
- "gcloud beta run jobs update pan-test-app-stage-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node --memory=512Mi --task-timeout=15m --env-vars-file=____envvars.yaml",
2587
- "gcloud run deploy pan-test-app-stage-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --cpu-boost",
2588
- "gcloud beta run jobs execute pan-test-app-stage-api-migration --project=google-project-id --region=europe-west6",
2589
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
2590
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG",
2591
- "echo Uploading SBOM to Dependency Track",
2592
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" "__sbom.json" vex.json || true",
2593
- ],
2594
- "services": [
2595
- {
2596
- "command": [
2597
- "--tls=false",
2598
- ],
2599
- "name": "docker:20-dind",
2600
- },
2601
- ],
2602
- "stage": "deploy stage",
2603
- "variables": {
2604
- "APP_DIR": "api",
2605
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2606
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2607
- "BUILD_INFO_ID": "some-id",
2608
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2609
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-migration:run",
2610
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run",
2611
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2612
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2613
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2614
- "DB_NAME": "pan-test-app-stage-api",
2615
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
2616
- "DB_USER": "my-user",
2617
- "DOCKER_BUILDKIT": "1",
2618
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
2619
- "DOCKER_DRIVER": "overlay2",
2620
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2621
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2622
- "DOCKER_IMAGE_NAME": "stage/api",
2623
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2624
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2625
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2626
- "DOCKER_TLS_CERTDIR": "",
2627
- "ENV_SHORT": "stage",
2628
- "ENV_TYPE": "stage",
2629
- "ENV_VARS": "ENV_SHORT: 'stage'
2630
- APP_DIR: 'api'
2631
- ENV_TYPE: 'stage'
2632
- BUILD_INFO_ID: 'some-id'
2633
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2634
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2635
- HOST: 'pan-test-app-stage-api-unknown-host.example.com'
2636
- ROOT_URL: 'https://pan-test-app-stage-api-unknown-host.example.com'
2637
- HOST_CANONICAL: 'pan-test-app-stage-api-unknown-host.example.com'
2638
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
2639
- DB_NAME: 'pan-test-app-stage-api'
2640
- DB_USER: 'my-user'
2641
- DB_PASSWORD: '$CL_stage_api_DB_PASSWORD'
2642
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
2643
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
2644
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-migration:run'
2645
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run'
2646
- GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix'
2647
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
2648
- ",
2649
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
2650
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
2651
- "HOST": "pan-test-app-stage-api-unknown-host.example.com",
2652
- "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
2653
- "KUBERNETES_CPU_LIMIT": "1",
2654
- "KUBERNETES_CPU_REQUEST": "0.5",
2655
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2656
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2657
- "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
2658
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2659
- },
2660
- },
2661
- "api 🛑 Stop ⚠️ | prod ": {
2662
- "environment": {
2663
- "action": "stop",
2664
- "name": "prod/api",
2665
- "url": "https://pan-test-app-prod-api-unknown-host.example.com",
2666
- },
2667
- "image": "path/to/docker/gcloud:the-version",
2668
- "interruptible": true,
2669
- "needs": [],
2670
- "retry": {
2671
- "max": 2,
2672
- "when": [
2673
- "runner_system_failure",
2674
- "stuck_or_timeout_failure",
2675
- ],
2676
- },
2677
- "rules": [
2678
- {
2679
- "allow_failure": true,
2680
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2681
- "when": "on_success",
2682
- },
2683
- {
2684
- "allow_failure": true,
2685
- "when": "manual",
2686
- },
2687
- ],
2688
- "script": [
2689
- "set +e",
2690
- "echo $CL_prod_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
2691
- ",
2692
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
2693
- "gcloud run services delete pan-test-app-prod-api --project=google-project-id --region=europe-west6",
2694
- "gcloud scheduler jobs delete pan-test-app-prod-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
2695
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-prod-api-migration --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2696
- "gcloud beta run jobs delete pan-test-app-prod-api-migration --project=google-project-id --region=europe-west6",
2697
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-prod-api-send-reminders --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2698
- "gcloud beta run jobs delete pan-test-app-prod-api-send-reminders --project=google-project-id --region=europe-west6",
2699
- "echo Disabling component in Dependency Track",
2700
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" || true",
2701
- "set -e",
2702
- ],
2703
- "stage": "stop prod",
2704
- "variables": {
2705
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2706
- "GIT_STRATEGY": "none",
2707
- "KUBERNETES_CPU_LIMIT": "1",
2708
- "KUBERNETES_CPU_REQUEST": "0.5",
2709
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2710
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2711
- },
2712
- },
2713
- "api 🛑 Stop ⚠️ | stage ": {
2714
- "environment": {
2715
- "action": "stop",
2716
- "name": "stage/api",
2717
- "url": "https://pan-test-app-stage-api-unknown-host.example.com",
2718
- },
2719
- "image": "path/to/docker/gcloud:the-version",
2720
- "interruptible": true,
2721
- "needs": [],
2722
- "retry": {
2723
- "max": 2,
2724
- "when": [
2725
- "runner_system_failure",
2726
- "stuck_or_timeout_failure",
2727
- ],
2728
- },
2729
- "rules": [
2730
- {
2731
- "allow_failure": true,
2732
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2733
- "when": "on_success",
2734
- },
2735
- {
2736
- "allow_failure": true,
2737
- "when": "manual",
2738
- },
2739
- ],
2740
- "script": [
2741
- "set +e",
2742
- "echo $CL_stage_api_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
2743
- ",
2744
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
2745
- "gcloud run services delete pan-test-app-stage-api --project=google-project-id --region=europe-west6",
2746
- "gcloud scheduler jobs delete pan-test-app-stage-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
2747
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-stage-api-migration --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2748
- "gcloud beta run jobs delete pan-test-app-stage-api-migration --project=google-project-id --region=europe-west6",
2749
- "gcloud beta run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-stage-api-send-reminders --format="value(name)" | xargs -I {} gcloud beta run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2750
- "gcloud beta run jobs delete pan-test-app-stage-api-send-reminders --project=google-project-id --region=europe-west6",
2751
- "echo Disabling component in Dependency Track",
2752
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" || true",
2753
- "set -e",
2754
- ],
2755
- "stage": "stop stage",
2756
- "variables": {
2757
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2758
- "GIT_STRATEGY": "none",
2759
- "KUBERNETES_CPU_LIMIT": "1",
2760
- "KUBERNETES_CPU_REQUEST": "0.5",
2761
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2762
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2763
- },
2764
- },
2765
- "api 🧾 sbom | prod ": {
2766
- "allow_failure": true,
2767
- "artifacts": {
2768
- "paths": [
2769
- "__sbom.json",
2770
- ],
2771
- },
2772
- "image": "aquasec/trivy:0.38.3",
2773
- "interruptible": true,
2774
- "needs": [],
2775
- "retry": {
2776
- "max": 2,
2777
- "when": [
2778
- "runner_system_failure",
2779
- "stuck_or_timeout_failure",
2780
- ],
2781
- },
2782
- "script": [
2783
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2784
- ],
2785
- "stage": "build",
2786
- "variables": {},
2787
- },
2788
- "api 🧾 sbom | stage ": {
2789
- "allow_failure": true,
2790
- "artifacts": {
2791
- "paths": [
2792
- "__sbom.json",
2793
- ],
2794
- },
2795
- "image": "aquasec/trivy:0.38.3",
2796
- "interruptible": true,
2797
- "needs": [],
2798
- "retry": {
2799
- "max": 2,
2800
- "when": [
2801
- "runner_system_failure",
2802
- "stuck_or_timeout_failure",
2803
- ],
2804
- },
2805
- "script": [
2806
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2807
- ],
2808
- "stage": "build",
2809
- "variables": {},
2810
- },
2811
- "www 🔨 app | prod ": {
2812
- "artifacts": {
2813
- "expire_in": "1 day",
2814
- "paths": [
2815
- "www/__build_info.json",
2816
- "www/dist",
2817
- "www/.next",
2818
- ],
2819
- "reports": {
2820
- "junit": undefined,
2821
- },
2822
- },
2823
- "cache": [
2824
- {
2825
- "key": "www-yarn",
2826
- "paths": [
2827
- "www/.yarn",
2828
- ],
2829
- "policy": "pull-push",
2830
- },
2831
- {
2832
- "key": "www-node-modules",
2833
- "paths": [
2834
- "www/node_modules",
2835
- ],
2836
- "policy": "pull-push",
2837
- },
2838
- {
2839
- "key": "www-next-cache",
2840
- "paths": [
2841
- "www/.next/cache/",
2842
- ],
2843
- "policy": "pull-push",
2844
- },
2845
- ],
2846
- "image": "path/to/docker/jobs-default:the-version",
2847
- "interruptible": true,
2848
- "needs": [],
2849
- "retry": {
2850
- "max": 2,
2851
- "when": [
2852
- "runner_system_failure",
2853
- "stuck_or_timeout_failure",
2854
- ],
2855
- },
2856
- "script": [
2857
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
2858
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2859
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2860
- "cd www",
2861
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2862
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2863
- "yarn install --immutable",
2864
- "yarn build",
2865
- ],
2866
- "stage": "build",
2867
- "variables": {
2868
- "API_URL": "https://pan-test-app-prod-api-unknown-host.example.com/graphql",
2869
- "APP_DIR": "www",
2870
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2871
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2872
- "BUILD_INFO_ID": "some-id",
2873
- "ENV_SHORT": "prod",
2874
- "ENV_TYPE": "prod",
2875
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey",
2876
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_www_GCLOUD_RUN_canonicalHostSuffix",
2877
- "HOST": "pan-test-app-prod-www-unknown-host.example.com",
2878
- "HOST_CANONICAL": "pan-test-app-prod-www-unknown-host.example.com",
2879
- "KUBERNETES_CPU_LIMIT": "2",
2880
- "KUBERNETES_CPU_REQUEST": "0.5",
2881
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2882
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2883
- "ROOT_URL": "https://pan-test-app-prod-www-unknown-host.example.com",
2884
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
2885
- },
2886
- },
2887
- "www 🔨 app | stage ": {
2888
- "artifacts": {
2889
- "expire_in": "1 day",
2890
- "paths": [
2891
- "www/__build_info.json",
2892
- "www/dist",
2893
- "www/.next",
2894
- ],
2895
- "reports": {
2896
- "junit": undefined,
2897
- },
2898
- },
2899
- "cache": [
2900
- {
2901
- "key": "www-yarn",
2902
- "paths": [
2903
- "www/.yarn",
2904
- ],
2905
- "policy": "pull-push",
2906
- },
2907
- {
2908
- "key": "www-node-modules",
2909
- "paths": [
2910
- "www/node_modules",
2911
- ],
2912
- "policy": "pull-push",
2913
- },
2914
- {
2915
- "key": "www-next-cache",
2916
- "paths": [
2917
- "www/.next/cache/",
2918
- ],
2919
- "policy": "pull-push",
2920
- },
2921
- ],
2922
- "image": "path/to/docker/jobs-default:the-version",
2923
- "interruptible": true,
2924
- "needs": [],
2925
- "retry": {
2926
- "max": 2,
2927
- "when": [
2928
- "runner_system_failure",
2929
- "stuck_or_timeout_failure",
2930
- ],
2931
- },
2932
- "script": [
2933
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
2934
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2935
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2936
- "cd www",
2937
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2938
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2939
- "yarn install --immutable",
2940
- "yarn build",
2941
- ],
2942
- "stage": "build",
2943
- "variables": {
2944
- "API_URL": "https://pan-test-app-stage-api-unknown-host.example.com/graphql",
2945
- "APP_DIR": "www",
2946
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2947
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2948
- "BUILD_INFO_ID": "some-id",
2949
- "ENV_SHORT": "stage",
2950
- "ENV_TYPE": "stage",
2951
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey",
2952
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_www_GCLOUD_RUN_canonicalHostSuffix",
2953
- "HOST": "pan-test-app-stage-www-unknown-host.example.com",
2954
- "HOST_CANONICAL": "pan-test-app-stage-www-unknown-host.example.com",
2955
- "KUBERNETES_CPU_LIMIT": "2",
2956
- "KUBERNETES_CPU_REQUEST": "0.5",
2957
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2958
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2959
- "ROOT_URL": "https://pan-test-app-stage-www-unknown-host.example.com",
2960
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
2961
- },
2962
- },
2963
- "www 🔨 docker | prod ": {
2964
- "cache": [
2965
- {
2966
- "key": "www-yarn",
2967
- "paths": [
2968
- "www/.yarn",
2969
- ],
2970
- "policy": "pull",
2971
- },
2972
- ],
2973
- "image": "path/to/docker/docker-build:the-version",
2974
- "interruptible": true,
2975
- "needs": [
2976
- "www 🔨 app | prod ",
2977
- ],
2978
- "retry": {
2979
- "max": 2,
2980
- "when": [
2981
- "runner_system_failure",
2982
- "stuck_or_timeout_failure",
2983
- ],
2984
- },
2985
- "script": [
2986
- "ensureNodeDockerfile",
2987
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
2988
- "docker version",
2989
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2990
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2991
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2992
- "docker push $DOCKER_CACHE_IMAGE",
2993
- ],
2994
- "services": [
2995
- {
2996
- "command": [
2997
- "--tls=false",
2998
- ],
2999
- "name": "docker:20-dind",
3000
- },
3001
- ],
3002
- "stage": "build",
3003
- "variables": {
3004
- "APP_DIR": "www",
3005
- "DOCKERFILE_ADDITIONS": undefined,
3006
- "DOCKERFILE_ADDITIONS_END": undefined,
3007
- "DOCKER_BUILDKIT": "1",
3008
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
3009
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
3010
- RUN yarn plugin import workspace-tools
3011
- RUN yarn workspaces focus --production && yarn rebuild",
3012
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
3013
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
3014
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
3015
- COPY --chown=node:node .yarn /app/.yarn",
3016
- "DOCKER_DIR": ".",
3017
- "DOCKER_DRIVER": "overlay2",
3018
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3019
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3020
- "DOCKER_IMAGE_NAME": "prod/www",
3021
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3022
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3023
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3024
- "DOCKER_TLS_CERTDIR": "",
3025
- "KUBERNETES_CPU_LIMIT": "1",
3026
- "KUBERNETES_CPU_REQUEST": "0.5",
3027
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3028
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3029
- },
3030
- },
3031
- "www 🔨 docker | stage ": {
3032
- "cache": [
3033
- {
3034
- "key": "www-yarn",
3035
- "paths": [
3036
- "www/.yarn",
3037
- ],
3038
- "policy": "pull",
3039
- },
3040
- ],
3041
- "image": "path/to/docker/docker-build:the-version",
3042
- "interruptible": true,
3043
- "needs": [
3044
- "www 🔨 app | stage ",
3045
- ],
3046
- "retry": {
3047
- "max": 2,
3048
- "when": [
3049
- "runner_system_failure",
3050
- "stuck_or_timeout_failure",
3051
- ],
3052
- },
3053
- "script": [
3054
- "ensureNodeDockerfile",
3055
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
3056
- "docker version",
3057
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3058
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3059
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3060
- "docker push $DOCKER_CACHE_IMAGE",
3061
- ],
3062
- "services": [
3063
- {
3064
- "command": [
3065
- "--tls=false",
3066
- ],
3067
- "name": "docker:20-dind",
3068
- },
3069
- ],
3070
- "stage": "build",
3071
- "variables": {
3072
- "APP_DIR": "www",
3073
- "DOCKERFILE_ADDITIONS": undefined,
3074
- "DOCKERFILE_ADDITIONS_END": undefined,
3075
- "DOCKER_BUILDKIT": "1",
3076
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
3077
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
3078
- RUN yarn plugin import workspace-tools
3079
- RUN yarn workspaces focus --production && yarn rebuild",
3080
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
3081
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
3082
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
3083
- COPY --chown=node:node .yarn /app/.yarn",
3084
- "DOCKER_DIR": ".",
3085
- "DOCKER_DRIVER": "overlay2",
3086
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3087
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3088
- "DOCKER_IMAGE_NAME": "stage/www",
3089
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3090
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3091
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3092
- "DOCKER_TLS_CERTDIR": "",
3093
- "KUBERNETES_CPU_LIMIT": "1",
3094
- "KUBERNETES_CPU_REQUEST": "0.5",
3095
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3096
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3097
- },
3098
- },
3099
- "www 🚀 Deploy | prod ": {
3100
- "allow_failure": true,
3101
- "artifacts": {
3102
- "paths": [
3103
- "____envvars.yaml",
3104
- ],
3105
- },
3106
- "environment": {
3107
- "auto_stop_in": undefined,
3108
- "name": "prod/www",
3109
- "on_stop": "www 🛑 Stop ⚠️ | prod ",
3110
- "url": "https://pan-test-app-prod-www-unknown-host.example.com",
3111
- },
3112
- "image": "path/to/docker/gcloud:the-version",
3113
- "interruptible": true,
3114
- "needs": [
3115
- {
3116
- "artifacts": false,
3117
- "job": "www 🔨 app | prod ",
3118
- },
3119
- {
3120
- "artifacts": false,
3121
- "job": "www 🔨 docker | prod ",
3122
- },
3123
- {
3124
- "artifacts": true,
3125
- "job": "www 🧾 sbom | prod ",
3126
- },
3127
- ],
3128
- "retry": {
3129
- "max": 2,
3130
- "when": [
3131
- "runner_system_failure",
3132
- "stuck_or_timeout_failure",
3133
- ],
3134
- },
3135
- "rules": [
3136
- {
3137
- "when": "manual",
3138
- },
3139
- ],
3140
- "script": [
3141
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
3142
- "echo $CL_prod_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
3143
- ",
3144
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
3145
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
3146
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
3147
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
3148
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
3149
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
3150
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
3151
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3152
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www:$DOCKER_IMAGE_TAG",
3153
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www:$DOCKER_IMAGE_TAG",
3154
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
3155
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
3156
- "echo "$ENV_VARS" > ____envvars.yaml",
3157
- "gcloud run deploy pan-test-app-prod-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=prod,env-name=prod,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
3158
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
3159
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www:$DOCKER_IMAGE_TAG",
3160
- "echo Uploading SBOM to Dependency Track",
3161
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" "__sbom.json" vex.json || true",
3162
- ],
3163
- "services": [
3164
- {
3165
- "command": [
3166
- "--tls=false",
3167
- ],
3168
- "name": "docker:20-dind",
3169
- },
3170
- ],
3171
- "stage": "deploy prod",
3172
- "variables": {
3173
- "API_URL": "https://pan-test-app-prod-api-unknown-host.example.com/graphql",
3174
- "APP_DIR": "www",
3175
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3176
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3177
- "BUILD_INFO_ID": "some-id",
3178
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3179
- "DOCKER_BUILDKIT": "1",
3180
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
3181
- "DOCKER_DRIVER": "overlay2",
3182
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3183
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3184
- "DOCKER_IMAGE_NAME": "prod/www",
3185
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3186
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3187
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3188
- "DOCKER_TLS_CERTDIR": "",
3189
- "ENV_SHORT": "prod",
3190
- "ENV_TYPE": "prod",
3191
- "ENV_VARS": "ENV_SHORT: 'prod'
3192
- APP_DIR: 'www'
3193
- ENV_TYPE: 'prod'
3194
- BUILD_INFO_ID: 'some-id'
3195
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3196
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3197
- HOST: 'pan-test-app-prod-www-unknown-host.example.com'
3198
- ROOT_URL: 'https://pan-test-app-prod-www-unknown-host.example.com'
3199
- HOST_CANONICAL: 'pan-test-app-prod-www-unknown-host.example.com'
3200
- GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_www_GCLOUD_RUN_canonicalHostSuffix'
3201
- API_URL: 'https://pan-test-app-prod-api-unknown-host.example.com/graphql'
3202
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
3203
- ",
3204
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey",
3205
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_www_GCLOUD_RUN_canonicalHostSuffix",
3206
- "HOST": "pan-test-app-prod-www-unknown-host.example.com",
3207
- "HOST_CANONICAL": "pan-test-app-prod-www-unknown-host.example.com",
3208
- "KUBERNETES_CPU_LIMIT": "1",
3209
- "KUBERNETES_CPU_REQUEST": "0.5",
3210
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3211
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3212
- "ROOT_URL": "https://pan-test-app-prod-www-unknown-host.example.com",
3213
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
3214
- },
3215
- },
3216
- "www 🚀 Deploy | stage ": {
3217
- "allow_failure": false,
3218
- "artifacts": {
3219
- "paths": [
3220
- "____envvars.yaml",
3221
- ],
3222
- },
3223
- "environment": {
3224
- "auto_stop_in": undefined,
3225
- "name": "stage/www",
3226
- "on_stop": "www 🛑 Stop ⚠️ | stage ",
3227
- "url": "https://pan-test-app-stage-www-unknown-host.example.com",
3228
- },
3229
- "image": "path/to/docker/gcloud:the-version",
3230
- "interruptible": true,
3231
- "needs": [
3232
- {
3233
- "artifacts": false,
3234
- "job": "www 🔨 app | stage ",
3235
- },
3236
- {
3237
- "artifacts": false,
3238
- "job": "www 🔨 docker | stage ",
3239
- },
3240
- {
3241
- "artifacts": true,
3242
- "job": "www 🧾 sbom | stage ",
3243
- },
3244
- ],
3245
- "retry": {
3246
- "max": 2,
3247
- "when": [
3248
- "runner_system_failure",
3249
- "stuck_or_timeout_failure",
3250
- ],
3251
- },
3252
- "rules": [
3253
- {
3254
- "when": "on_success",
3255
- },
3256
- ],
3257
- "script": [
3258
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
3259
- "echo $CL_stage_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
3260
- ",
3261
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
3262
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
3263
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
3264
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
3265
- "echo -e "\\e[0Ksection_start:$(date +%s):pushToArtifactRegistry[collapsed=true]\\r\\e[0KPushing image to artifacts registry"",
3266
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
3267
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
3268
- "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3269
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www:$DOCKER_IMAGE_TAG",
3270
- "docker push europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www:$DOCKER_IMAGE_TAG",
3271
- "echo -e "\\e[0Ksection_end:$(date +%s):pushToArtifactRegistry\\r\\e[0K"",
3272
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
3273
- "echo "$ENV_VARS" > ____envvars.yaml",
3274
- "gcloud run deploy pan-test-app-stage-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=stage,env-name=stage,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
3275
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
3276
- "docker image rm europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www:$DOCKER_IMAGE_TAG",
3277
- "echo Uploading SBOM to Dependency Track",
3278
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" "__sbom.json" vex.json || true",
3279
- ],
3280
- "services": [
3281
- {
3282
- "command": [
3283
- "--tls=false",
3284
- ],
3285
- "name": "docker:20-dind",
3286
- },
3287
- ],
3288
- "stage": "deploy stage",
3289
- "variables": {
3290
- "API_URL": "https://pan-test-app-stage-api-unknown-host.example.com/graphql",
3291
- "APP_DIR": "www",
3292
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3293
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3294
- "BUILD_INFO_ID": "some-id",
3295
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3296
- "DOCKER_BUILDKIT": "1",
3297
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/www",
3298
- "DOCKER_DRIVER": "overlay2",
3299
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3300
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
3301
- "DOCKER_IMAGE_NAME": "stage/www",
3302
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3303
- "DOCKER_REGISTRY": "$CI_REGISTRY",
3304
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
3305
- "DOCKER_TLS_CERTDIR": "",
3306
- "ENV_SHORT": "stage",
3307
- "ENV_TYPE": "stage",
3308
- "ENV_VARS": "ENV_SHORT: 'stage'
3309
- APP_DIR: 'www'
3310
- ENV_TYPE: 'stage'
3311
- BUILD_INFO_ID: 'some-id'
3312
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3313
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3314
- HOST: 'pan-test-app-stage-www-unknown-host.example.com'
3315
- ROOT_URL: 'https://pan-test-app-stage-www-unknown-host.example.com'
3316
- HOST_CANONICAL: 'pan-test-app-stage-www-unknown-host.example.com'
3317
- GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_www_GCLOUD_RUN_canonicalHostSuffix'
3318
- API_URL: 'https://pan-test-app-stage-api-unknown-host.example.com/graphql'
3319
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
3320
- ",
3321
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey",
3322
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_www_GCLOUD_RUN_canonicalHostSuffix",
3323
- "HOST": "pan-test-app-stage-www-unknown-host.example.com",
3324
- "HOST_CANONICAL": "pan-test-app-stage-www-unknown-host.example.com",
3325
- "KUBERNETES_CPU_LIMIT": "1",
3326
- "KUBERNETES_CPU_REQUEST": "0.5",
3327
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3328
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3329
- "ROOT_URL": "https://pan-test-app-stage-www-unknown-host.example.com",
3330
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
3331
- },
3332
- },
3333
- "www 🛑 Stop ⚠️ | prod ": {
3334
- "environment": {
3335
- "action": "stop",
3336
- "name": "prod/www",
3337
- "url": "https://pan-test-app-prod-www-unknown-host.example.com",
3338
- },
3339
- "image": "path/to/docker/gcloud:the-version",
3340
- "interruptible": true,
3341
- "needs": [],
3342
- "retry": {
3343
- "max": 2,
3344
- "when": [
3345
- "runner_system_failure",
3346
- "stuck_or_timeout_failure",
3347
- ],
3348
- },
3349
- "rules": [
3350
- {
3351
- "allow_failure": true,
3352
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3353
- "when": "on_success",
3354
- },
3355
- {
3356
- "allow_failure": true,
3357
- "when": "manual",
3358
- },
3359
- ],
3360
- "script": [
3361
- "set +e",
3362
- "echo $CL_prod_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
3363
- ",
3364
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
3365
- "gcloud run services delete pan-test-app-prod-www --project=google-project-id --region=europe-west6",
3366
- "echo Disabling component in Dependency Track",
3367
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" || true",
3368
- "set -e",
3369
- ],
3370
- "stage": "stop prod",
3371
- "variables": {
3372
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3373
- "GIT_STRATEGY": "none",
3374
- "KUBERNETES_CPU_LIMIT": "1",
3375
- "KUBERNETES_CPU_REQUEST": "0.5",
3376
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3377
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3378
- },
3379
- },
3380
- "www 🛑 Stop ⚠️ | stage ": {
3381
- "environment": {
3382
- "action": "stop",
3383
- "name": "stage/www",
3384
- "url": "https://pan-test-app-stage-www-unknown-host.example.com",
3385
- },
3386
- "image": "path/to/docker/gcloud:the-version",
3387
- "interruptible": true,
3388
- "needs": [],
3389
- "retry": {
3390
- "max": 2,
3391
- "when": [
3392
- "runner_system_failure",
3393
- "stuck_or_timeout_failure",
3394
- ],
3395
- },
3396
- "rules": [
3397
- {
3398
- "allow_failure": true,
3399
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3400
- "when": "on_success",
3401
- },
3402
- {
3403
- "allow_failure": true,
3404
- "when": "manual",
3405
- },
3406
- ],
3407
- "script": [
3408
- "set +e",
3409
- "echo $CL_stage_www_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
3410
- ",
3411
- "gcloud auth activate-service-account --key-file="./____keyfile.json"",
3412
- "gcloud run services delete pan-test-app-stage-www --project=google-project-id --region=europe-west6",
3413
- "echo Disabling component in Dependency Track",
3414
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" || true",
3415
- "set -e",
3416
- ],
3417
- "stage": "stop stage",
3418
- "variables": {
3419
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3420
- "GIT_STRATEGY": "none",
3421
- "KUBERNETES_CPU_LIMIT": "1",
3422
- "KUBERNETES_CPU_REQUEST": "0.5",
3423
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3424
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3425
- },
3426
- },
3427
- "www 🧾 sbom | prod ": {
3428
- "allow_failure": true,
3429
- "artifacts": {
3430
- "paths": [
3431
- "__sbom.json",
3432
- ],
3433
- },
3434
- "image": "aquasec/trivy:0.38.3",
3435
- "interruptible": true,
3436
- "needs": [],
3437
- "retry": {
3438
- "max": 2,
3439
- "when": [
3440
- "runner_system_failure",
3441
- "stuck_or_timeout_failure",
3442
- ],
3443
- },
3444
- "script": [
3445
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
3446
- ],
3447
- "stage": "build",
3448
- "variables": {},
3449
- },
3450
- "www 🧾 sbom | stage ": {
3451
- "allow_failure": true,
3452
- "artifacts": {
3453
- "paths": [
3454
- "__sbom.json",
3455
- ],
3456
- },
3457
- "image": "aquasec/trivy:0.38.3",
3458
- "interruptible": true,
3459
- "needs": [],
3460
- "retry": {
3461
- "max": 2,
3462
- "when": [
3463
- "runner_system_failure",
3464
- "stuck_or_timeout_failure",
3465
- ],
3466
- },
3467
- "script": [
3468
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
3469
- ],
3470
- "stage": "build",
3471
- "variables": {},
3472
- },
3473
- },
3474
- "stages": [
3475
- "setup",
3476
- "setup dev",
3477
- "setup review",
3478
- "setup stage",
3479
- "setup prod",
3480
- "setup local",
3481
- "test",
3482
- "test dev",
3483
- "test review",
3484
- "test stage",
3485
- "test prod",
3486
- "test local",
3487
- "build",
3488
- "build dev",
3489
- "build review",
3490
- "build stage",
3491
- "build prod",
3492
- "build local",
3493
- "deploy",
3494
- "deploy dev",
3495
- "deploy review",
3496
- "deploy stage",
3497
- "deploy prod",
3498
- "deploy local",
3499
- "verify",
3500
- "verify dev",
3501
- "verify review",
3502
- "verify stage",
3503
- "verify prod",
3504
- "verify local",
3505
- "rollback",
3506
- "rollback dev",
3507
- "rollback review",
3508
- "rollback stage",
3509
- "rollback prod",
3510
- "rollback local",
3511
- "stop",
3512
- "stop dev",
3513
- "stop review",
3514
- "stop stage",
3515
- "stop prod",
3516
- "stop local",
3517
- ],
3518
- "variables": {
3519
- "FF_USE_FASTZIP": "true",
3520
- },
3521
- "workflow": {
3522
- "rules": [
3523
- {
3524
- "if": "$CI_COMMIT_TAG",
3525
- },
3526
- {
3527
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
3528
- "when": "never",
3529
- },
3530
- {
3531
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
3532
- },
3533
- {
3534
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
3535
- },
3536
- {
3537
- "if": "$CI_MERGE_REQUEST_ID",
3538
- },
3539
- ],
3540
- },
3541
- },
3542
- }
3543
- `;