@catladder/pipeline 0.0.0-more-collapse-deeb54d7 → 0.0.0-multiple-gitlab-includes-3df5566d

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (597) hide show
  1. package/README.md +17 -0
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +34 -0
  5. package/dist/bash/bashEscape.js +114 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.d.ts +0 -1
  18. package/dist/build/base/constants.js +4 -3
  19. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  20. package/dist/build/base/createAppBuildJob.js +18 -15
  21. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  22. package/dist/build/base/createArtifactsConfig.js +3 -1
  23. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  24. package/dist/build/base/createBuildJobDefinition.js +58 -0
  25. package/dist/build/base/index.d.ts +7 -4
  26. package/dist/build/base/index.js +17 -6
  27. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  28. package/dist/build/base/writeBuildInfo.js +4 -3
  29. package/dist/build/base/writeDotEnv.d.ts +3 -2
  30. package/dist/build/base/writeDotEnv.js +30 -6
  31. package/dist/build/cache/createJobCache.d.ts +7 -0
  32. package/dist/build/cache/createJobCache.js +115 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  34. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  35. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  36. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  37. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  38. package/dist/build/custom/buildJob.d.ts +2 -2
  39. package/dist/build/custom/buildJob.js +8 -67
  40. package/dist/build/custom/index.d.ts +2 -2
  41. package/dist/build/custom/index.js +3 -1
  42. package/dist/build/custom/testJob.d.ts +4 -4
  43. package/dist/build/custom/testJob.js +25 -21
  44. package/dist/build/docker.d.ts +48 -39
  45. package/dist/build/docker.js +112 -37
  46. package/dist/build/index.d.ts +14 -7
  47. package/dist/build/index.js +44 -16
  48. package/dist/build/node/buildJob.d.ts +6 -2
  49. package/dist/build/node/buildJob.js +39 -48
  50. package/dist/build/node/cache.d.ts +4 -5
  51. package/dist/build/node/cache.js +18 -23
  52. package/dist/build/node/constants.d.ts +0 -1
  53. package/dist/build/node/constants.js +5 -4
  54. package/dist/build/node/index.d.ts +4 -4
  55. package/dist/build/node/index.js +3 -1
  56. package/dist/build/node/meteor.d.ts +2 -2
  57. package/dist/build/node/meteor.js +10 -12
  58. package/dist/build/node/testJob.d.ts +3 -2
  59. package/dist/build/node/testJob.js +29 -19
  60. package/dist/build/node/yarn.d.ts +3 -2
  61. package/dist/build/node/yarn.js +13 -13
  62. package/dist/build/rails/build.d.ts +2 -2
  63. package/dist/build/rails/build.js +24 -8
  64. package/dist/build/rails/index.d.ts +2 -2
  65. package/dist/build/rails/index.js +3 -1
  66. package/dist/build/rails/test.d.ts +2 -2
  67. package/dist/build/rails/test.js +20 -12
  68. package/dist/build/sbom.d.ts +2 -2
  69. package/dist/build/sbom.js +9 -6
  70. package/dist/build/types.d.ts +152 -47
  71. package/dist/build/types.js +10 -2
  72. package/dist/catladder-gitlab.js +129 -49
  73. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  74. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  75. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  76. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  77. package/dist/config/configruedEnvs.js +3 -1
  78. package/dist/config/index.js +13 -7
  79. package/dist/config/readConfig.d.ts +2 -2
  80. package/dist/config/readConfig.js +191 -40
  81. package/dist/constants.js +5 -3
  82. package/dist/context/createAllComponentsContext.d.ts +12 -0
  83. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  84. package/dist/context/createComponentContext.d.ts +11 -0
  85. package/dist/context/createComponentContext.js +255 -0
  86. package/dist/context/createWorkspaceContext.d.ts +16 -0
  87. package/dist/context/createWorkspaceContext.js +173 -0
  88. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  89. package/dist/context/getBuildInfoVariables.js +55 -0
  90. package/dist/context/getEnvConfig.js +5 -2
  91. package/dist/context/getEnvType.js +3 -1
  92. package/dist/context/getEnvironment.d.ts +3 -3
  93. package/dist/context/getEnvironment.js +11 -12
  94. package/dist/context/getEnvironmentContext.d.ts +7 -3
  95. package/dist/context/getEnvironmentContext.js +21 -11
  96. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  97. package/dist/context/getEnvironmentVariables.js +81 -49
  98. package/dist/context/getLabels.d.ts +2 -2
  99. package/dist/context/getLabels.js +9 -7
  100. package/dist/context/getReviewSlug.d.ts +4 -0
  101. package/dist/context/getReviewSlug.js +21 -0
  102. package/dist/context/index.d.ts +2 -4
  103. package/dist/context/index.js +15 -162
  104. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  105. package/dist/context/transformJobOnlyVars.js +4 -2
  106. package/dist/context/utils/envVars.d.ts +1 -1
  107. package/dist/context/utils/envVars.js +5 -2
  108. package/dist/defaults/index.js +3 -1
  109. package/dist/deploy/base/deploy.d.ts +3 -3
  110. package/dist/deploy/base/deploy.js +38 -22
  111. package/dist/deploy/base/index.d.ts +3 -5
  112. package/dist/deploy/base/index.js +3 -1
  113. package/dist/deploy/base/rollback.d.ts +3 -3
  114. package/dist/deploy/base/rollback.js +13 -9
  115. package/dist/deploy/base/stop.d.ts +3 -3
  116. package/dist/deploy/base/stop.js +16 -11
  117. package/dist/deploy/base/types.d.ts +1 -1
  118. package/dist/deploy/base/types.js +3 -1
  119. package/dist/deploy/base/variables.d.ts +0 -1
  120. package/dist/deploy/base/variables.js +4 -3
  121. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +19 -0
  122. package/dist/deploy/cloudRun/artifactsRegistry.js +125 -0
  123. package/dist/deploy/cloudRun/cleanup.d.ts +2 -0
  124. package/dist/deploy/cloudRun/cleanup.js +53 -0
  125. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -0
  126. package/dist/deploy/cloudRun/cloudRunRevisions.js +62 -0
  127. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +7 -0
  128. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +207 -0
  129. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +4 -0
  130. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +96 -0
  131. package/dist/deploy/cloudRun/createJobs/common.d.ts +18 -0
  132. package/dist/deploy/cloudRun/createJobs/common.js +93 -0
  133. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  134. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  135. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +62 -0
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -0
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +54 -0
  139. package/dist/deploy/cloudRun/createJobs/index.d.ts +3 -0
  140. package/dist/deploy/cloudRun/createJobs/index.js +57 -0
  141. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  142. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  143. package/dist/deploy/cloudRun/index.d.ts +2 -2
  144. package/dist/deploy/cloudRun/index.js +17 -10
  145. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +3 -1
  146. package/dist/deploy/cloudRun/utils/createArgsString.js +25 -17
  147. package/dist/deploy/cloudRun/utils/database.d.ts +6 -4
  148. package/dist/deploy/cloudRun/utils/database.js +28 -15
  149. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  150. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +4 -2
  151. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -0
  152. package/dist/deploy/cloudRun/utils/getServiceName.js +10 -0
  153. package/dist/deploy/cloudRun/utils/jobName.d.ts +2 -1
  154. package/dist/deploy/cloudRun/utils/jobName.js +4 -2
  155. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.d.ts +9 -0
  156. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +18 -0
  157. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  158. package/dist/deploy/cloudSql/utils.js +7 -2
  159. package/dist/deploy/custom/deployJob.d.ts +2 -2
  160. package/dist/deploy/custom/deployJob.js +10 -9
  161. package/dist/deploy/custom/index.d.ts +2 -2
  162. package/dist/deploy/custom/index.js +3 -1
  163. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  164. package/dist/deploy/dockerTag/deployJob.js +38 -7
  165. package/dist/deploy/dockerTag/index.d.ts +2 -2
  166. package/dist/deploy/dockerTag/index.js +3 -1
  167. package/dist/deploy/index.d.ts +10 -9
  168. package/dist/deploy/index.js +13 -7
  169. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  170. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  171. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  172. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  173. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  174. package/dist/deploy/kubernetes/deployJob.js +23 -22
  175. package/dist/deploy/kubernetes/index.d.ts +2 -2
  176. package/dist/deploy/kubernetes/index.js +52 -15
  177. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  178. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  179. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  180. package/dist/deploy/kubernetes/kubeValues.js +16 -18
  181. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  182. package/dist/deploy/kubernetes/mongodb.js +14 -12
  183. package/dist/deploy/sbom.d.ts +4 -4
  184. package/dist/deploy/sbom.js +7 -4
  185. package/dist/deploy/types/base.d.ts +5 -5
  186. package/dist/deploy/types/base.js +3 -1
  187. package/dist/deploy/types/custom.d.ts +3 -7
  188. package/dist/deploy/types/custom.js +3 -1
  189. package/dist/deploy/types/dockerTag.d.ts +3 -1
  190. package/dist/deploy/types/dockerTag.js +3 -1
  191. package/dist/deploy/types/googleCloudRun.d.ts +127 -24
  192. package/dist/deploy/types/googleCloudRun.js +3 -1
  193. package/dist/deploy/types/index.d.ts +6 -6
  194. package/dist/deploy/types/index.js +14 -8
  195. package/dist/deploy/types/kubernetes.d.ts +25 -54
  196. package/dist/deploy/types/kubernetes.js +3 -1
  197. package/dist/deploy/utils.d.ts +2 -2
  198. package/dist/deploy/utils.js +5 -2
  199. package/dist/globalScriptFunctions/index.d.ts +14 -0
  200. package/dist/globalScriptFunctions/index.js +37 -0
  201. package/dist/index.d.ts +5 -2
  202. package/dist/index.js +18 -9
  203. package/dist/packageInfos.d.ts +4 -0
  204. package/dist/packageInfos.js +20 -0
  205. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  206. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  207. package/dist/pipeline/createAllJobs.d.ts +16 -6
  208. package/dist/pipeline/createAllJobs.js +99 -27
  209. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  210. package/dist/pipeline/createJobsForComponent.js +9 -149
  211. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  212. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  213. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  214. package/dist/pipeline/createMainPipeline.js +283 -0
  215. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  216. package/dist/pipeline/generatePipelineFiles.js +304 -0
  217. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  218. package/dist/pipeline/getPipelineStages.js +56 -0
  219. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  220. package/dist/pipeline/gitlab/createGitlabJobs.js +258 -74
  221. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  222. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  223. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  224. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  225. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  226. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  227. package/dist/pipeline/index.d.ts +3 -2
  228. package/dist/pipeline/index.js +16 -9
  229. package/dist/pipeline/packageManager.d.ts +3 -2
  230. package/dist/pipeline/packageManager.js +50 -24
  231. package/dist/pipeline/yarn/yarnUtils.d.ts +3 -2
  232. package/dist/pipeline/yarn/yarnUtils.js +65 -17
  233. package/dist/rules/index.d.ts +7 -2
  234. package/dist/rules/index.js +34 -16
  235. package/dist/runner/index.d.ts +1 -1
  236. package/dist/runner/index.js +3 -1
  237. package/dist/tsconfig.tsbuildinfo +1 -1
  238. package/dist/types/config.d.ts +44 -29
  239. package/dist/types/config.js +5 -2
  240. package/dist/types/context.d.ts +124 -40
  241. package/dist/types/context.js +12 -1
  242. package/dist/types/environmentContext.d.ts +15 -12
  243. package/dist/types/environmentContext.js +3 -1
  244. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  245. package/dist/types/gitlab-ci-yml.js +3 -2
  246. package/dist/types/gitlab-types.d.ts +8 -8
  247. package/dist/types/gitlab-types.js +3 -1
  248. package/dist/types/index.d.ts +1 -0
  249. package/dist/types/index.js +14 -7
  250. package/dist/types/jobDefinition.d.ts +11 -0
  251. package/dist/types/jobDefinition.js +5 -0
  252. package/dist/types/jobs.d.ts +30 -15
  253. package/dist/types/jobs.js +3 -1
  254. package/dist/types/pipeline.d.ts +3 -3
  255. package/dist/types/pipeline.js +3 -1
  256. package/dist/types/utils.d.ts +1 -1
  257. package/dist/types/utils.js +3 -1
  258. package/dist/utils/gitlab.js +7 -2
  259. package/dist/utils/index.d.ts +2 -1
  260. package/dist/utils/index.js +10 -3
  261. package/dist/utils/jsonParse.d.ts +1 -0
  262. package/dist/utils/jsonParse.js +14 -0
  263. package/dist/utils/removeUndefined.d.ts +1 -0
  264. package/dist/utils/removeUndefined.js +36 -0
  265. package/dist/utils/writeFiles.d.ts +11 -0
  266. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  267. package/dist/variables/VariableValue.d.ts +3 -0
  268. package/dist/variables/VariableValue.js +5 -0
  269. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  270. package/dist/variables/VariableValueContainingReferences.js +97 -0
  271. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  272. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  273. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  274. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  275. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  276. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  277. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  278. package/dist/variables/__tests__/variableValue.test.js +36 -0
  279. package/dist/variables/resolveAllReferences.d.ts +3 -0
  280. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -47
  281. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  282. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  283. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  284. package/dist/variables/resolveReferencesOnce.js +22 -0
  285. package/examples/.test-gen-ignore +1 -0
  286. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1418 -0
  287. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1418 -0
  288. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1418 -0
  289. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1434 -0
  290. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1418 -0
  291. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1526 -0
  292. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1418 -0
  293. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1436 -0
  294. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1418 -0
  295. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1418 -0
  296. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1418 -0
  297. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1418 -0
  298. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1490 -0
  299. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1302 -0
  300. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1418 -0
  301. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2998 -0
  302. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1733 -0
  303. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1426 -0
  304. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1285 -0
  305. package/examples/__snapshots__/custom-build-job.test.ts.snap +1174 -0
  306. package/examples/__snapshots__/custom-deploy.test.ts.snap +1168 -0
  307. package/examples/__snapshots__/custom-envs.test.ts.snap +798 -0
  308. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1182 -0
  309. package/examples/__snapshots__/git-submodule.test.ts.snap +1419 -0
  310. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1759 -0
  311. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1779 -0
  312. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3357 -0
  313. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1883 -0
  314. package/examples/__snapshots__/local-dot-env.test.ts.snap +1342 -0
  315. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1836 -0
  316. package/examples/__snapshots__/multiline-var.test.ts.snap +5679 -0
  317. package/examples/__snapshots__/native-app.test.ts.snap +2206 -0
  318. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1418 -0
  319. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1426 -0
  320. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1487 -0
  321. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1471 -0
  322. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4739 -0
  323. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1368 -0
  324. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2338 -0
  325. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2330 -0
  326. package/examples/__utils__/helpers.ts +9 -12
  327. package/examples/cloud-run-http2.test.ts +11 -0
  328. package/examples/cloud-run-http2.ts +29 -0
  329. package/examples/cloud-run-memory-limit.test.ts +11 -0
  330. package/examples/cloud-run-memory-limit.ts +10 -5
  331. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  332. package/examples/cloud-run-meteor-with-worker.ts +37 -0
  333. package/examples/cloud-run-nextjs.test.ts +11 -0
  334. package/examples/cloud-run-nextjs.ts +28 -0
  335. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  336. package/examples/cloud-run-no-cpu-throttling.ts +6 -4
  337. package/examples/cloud-run-no-service.test.ts +11 -0
  338. package/examples/cloud-run-no-service.ts +33 -0
  339. package/examples/cloud-run-non-public.test.ts +11 -0
  340. package/examples/cloud-run-non-public.ts +5 -4
  341. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  342. package/examples/cloud-run-post-stop-job.ts +42 -0
  343. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  344. package/examples/cloud-run-service-custom-vpc-connector.ts +30 -0
  345. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  346. package/examples/cloud-run-service-custom-vpc.ts +31 -0
  347. package/examples/cloud-run-service-gen2.test.ts +11 -0
  348. package/examples/cloud-run-service-gen2.ts +29 -0
  349. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  350. package/examples/cloud-run-service-increase-timout.ts +29 -0
  351. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  352. package/examples/cloud-run-service-with-volumes.ts +56 -0
  353. package/examples/cloud-run-storybook.test.ts +11 -0
  354. package/examples/cloud-run-storybook.ts +33 -0
  355. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  356. package/examples/cloud-run-with-ngnix.ts +29 -0
  357. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  358. package/examples/cloud-run-with-sql-reuse-db.ts +5 -4
  359. package/examples/cloud-run-with-sql.test.ts +11 -0
  360. package/examples/cloud-run-with-sql.ts +6 -20
  361. package/examples/cloud-run-with-worker.test.ts +11 -0
  362. package/examples/cloud-run-with-worker.ts +37 -0
  363. package/examples/custom-build-job-with-tests.test.ts +11 -0
  364. package/examples/custom-build-job-with-tests.ts +5 -4
  365. package/examples/custom-build-job.test.ts +11 -0
  366. package/examples/custom-build-job.ts +5 -4
  367. package/examples/custom-deploy.test.ts +11 -0
  368. package/examples/custom-deploy.ts +12 -4
  369. package/examples/custom-envs.test.ts +11 -0
  370. package/examples/custom-envs.ts +5 -4
  371. package/examples/custom-sbom-java.test.ts +11 -0
  372. package/examples/custom-sbom-java.ts +10 -6
  373. package/examples/git-submodule.test.ts +11 -0
  374. package/examples/git-submodule.ts +30 -0
  375. package/examples/kubernetes-application-customization.test.ts +11 -0
  376. package/examples/kubernetes-application-customization.ts +7 -4
  377. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  378. package/examples/kubernetes-with-cloud-sql.ts +7 -4
  379. package/examples/kubernetes-with-jobs.test.ts +11 -0
  380. package/examples/kubernetes-with-jobs.ts +7 -4
  381. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  382. package/examples/kubernetes-with-mongodb.ts +7 -4
  383. package/examples/local-dot-env.test.ts +11 -0
  384. package/examples/local-dot-env.ts +27 -0
  385. package/examples/meteor-kubernetes.test.ts +11 -0
  386. package/examples/meteor-kubernetes.ts +4 -5
  387. package/examples/multiline-var.test.ts +11 -0
  388. package/examples/multiline-var.ts +107 -0
  389. package/examples/native-app.test.ts +11 -0
  390. package/examples/native-app.ts +22 -17
  391. package/examples/node-build-with-custom-image.test.ts +11 -0
  392. package/examples/node-build-with-custom-image.ts +5 -4
  393. package/examples/node-build-with-docker-additions.test.ts +11 -0
  394. package/examples/node-build-with-docker-additions.ts +29 -0
  395. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  396. package/examples/rails-k8s-with-worker.test.ts +11 -0
  397. package/examples/rails-k8s-with-worker.ts +14 -11
  398. package/examples/referencing-other-vars.test.ts +11 -0
  399. package/examples/referencing-other-vars.ts +83 -0
  400. package/examples/wait-for-other-deploy.test.ts +11 -0
  401. package/examples/wait-for-other-deploy.ts +5 -4
  402. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  403. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  404. package/examples/workspace-api-www.test.ts +11 -0
  405. package/examples/workspace-api-www.ts +46 -0
  406. package/package.json +75 -26
  407. package/scripts/generate-examples-test.ts +84 -0
  408. package/scripts/generate-gitlab-ci-types.ts +2 -2
  409. package/scripts/tsconfig.json +7 -0
  410. package/src/bash/BashExpression.ts +78 -0
  411. package/src/bash/bashEscape.ts +158 -0
  412. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  413. package/src/bash/bashYaml.ts +80 -0
  414. package/src/bash/getInjectVarsScript.ts +21 -0
  415. package/src/bash/index.ts +2 -0
  416. package/src/build/artifacts/createBuildJobArtifact.ts +61 -0
  417. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  418. package/src/build/base/constants.ts +2 -2
  419. package/src/build/base/createAppBuildJob.ts +40 -24
  420. package/src/build/base/createArtifactsConfig.ts +2 -2
  421. package/src/build/base/createBuildJobDefinition.ts +37 -0
  422. package/src/build/base/index.ts +37 -8
  423. package/src/build/base/writeBuildInfo.ts +3 -3
  424. package/src/build/base/writeDotEnv.ts +25 -6
  425. package/src/build/cache/createJobCache.ts +83 -0
  426. package/src/build/cache/getAllCacheConfigsFromConfig.ts +28 -0
  427. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  428. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  429. package/src/build/custom/buildJob.ts +11 -37
  430. package/src/build/custom/index.ts +2 -2
  431. package/src/build/custom/testJob.ts +24 -22
  432. package/src/build/docker.ts +145 -49
  433. package/src/build/index.ts +42 -10
  434. package/src/build/node/buildJob.ts +65 -62
  435. package/src/build/node/cache.ts +30 -35
  436. package/src/build/node/constants.ts +2 -3
  437. package/src/build/node/index.ts +8 -4
  438. package/src/build/node/meteor.ts +16 -24
  439. package/src/build/node/testJob.ts +47 -26
  440. package/src/build/node/yarn.ts +32 -16
  441. package/src/build/rails/build.ts +21 -9
  442. package/src/build/rails/index.ts +2 -2
  443. package/src/build/rails/test.ts +22 -12
  444. package/src/build/sbom.ts +15 -10
  445. package/src/build/types.ts +190 -47
  446. package/src/catladder-gitlab.ts +7 -56
  447. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  448. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  449. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  450. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  451. package/src/config/configruedEnvs.ts +6 -6
  452. package/src/config/readConfig.ts +15 -22
  453. package/src/constants.ts +5 -2
  454. package/src/context/createAllComponentsContext.ts +31 -0
  455. package/src/context/createComponentContext.ts +134 -0
  456. package/src/context/createWorkspaceContext.ts +56 -0
  457. package/src/context/getBuildInfoVariables.ts +36 -0
  458. package/src/context/getEnvConfig.ts +3 -3
  459. package/src/context/getEnvType.ts +1 -1
  460. package/src/context/getEnvironment.ts +8 -24
  461. package/src/context/getEnvironmentContext.ts +25 -29
  462. package/src/context/getEnvironmentVariables.ts +104 -76
  463. package/src/context/getLabels.ts +5 -5
  464. package/src/context/getReviewSlug.ts +27 -0
  465. package/src/context/index.ts +1 -65
  466. package/src/context/transformJobOnlyVars.ts +6 -3
  467. package/src/context/utils/envVars.ts +5 -4
  468. package/src/deploy/base/deploy.ts +63 -47
  469. package/src/deploy/base/index.ts +11 -6
  470. package/src/deploy/base/rollback.ts +11 -16
  471. package/src/deploy/base/stop.ts +11 -15
  472. package/src/deploy/base/variables.ts +1 -2
  473. package/src/deploy/cloudRun/artifactsRegistry.ts +126 -0
  474. package/src/deploy/cloudRun/cleanup.ts +30 -0
  475. package/src/deploy/cloudRun/cloudRunRevisions.ts +65 -0
  476. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +227 -0
  477. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +86 -0
  478. package/src/deploy/cloudRun/createJobs/common.ts +59 -0
  479. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  480. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +71 -0
  481. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +34 -0
  482. package/src/deploy/cloudRun/createJobs/index.ts +51 -0
  483. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  484. package/src/deploy/cloudRun/index.ts +85 -59
  485. package/src/deploy/cloudRun/utils/createArgsString.ts +21 -13
  486. package/src/deploy/cloudRun/utils/database.ts +31 -9
  487. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +9 -11
  488. package/src/deploy/cloudRun/utils/getServiceName.ts +3 -0
  489. package/src/deploy/cloudRun/utils/jobName.ts +7 -2
  490. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +12 -0
  491. package/src/deploy/cloudSql/utils.ts +13 -10
  492. package/src/deploy/custom/deployJob.ts +15 -10
  493. package/src/deploy/custom/index.ts +2 -2
  494. package/src/deploy/dockerTag/deployJob.ts +7 -8
  495. package/src/deploy/dockerTag/index.ts +8 -7
  496. package/src/deploy/index.ts +15 -12
  497. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  498. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  499. package/src/deploy/kubernetes/deployJob.ts +30 -21
  500. package/src/deploy/kubernetes/index.ts +43 -35
  501. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  502. package/src/deploy/kubernetes/kubeValues.ts +15 -19
  503. package/src/deploy/kubernetes/mongodb.ts +15 -15
  504. package/src/deploy/sbom.ts +18 -10
  505. package/src/deploy/types/base.ts +3 -3
  506. package/src/deploy/types/custom.ts +3 -7
  507. package/src/deploy/types/dockerTag.ts +2 -0
  508. package/src/deploy/types/googleCloudRun.ts +133 -10
  509. package/src/deploy/types/index.ts +2 -2
  510. package/src/deploy/types/kubernetes.ts +5 -36
  511. package/src/deploy/utils.ts +5 -5
  512. package/src/globalScriptFunctions/index.ts +30 -0
  513. package/src/index.ts +4 -1
  514. package/src/packageInfos.ts +14 -0
  515. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  516. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  517. package/src/pipeline/createAllJobs.ts +67 -33
  518. package/src/pipeline/createJobsForComponent.ts +10 -38
  519. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  520. package/src/pipeline/createMainPipeline.ts +119 -0
  521. package/src/pipeline/generatePipelineFiles.ts +100 -0
  522. package/src/pipeline/getPipelineStages.ts +23 -0
  523. package/src/pipeline/gitlab/createGitlabJobs.ts +388 -108
  524. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  525. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  526. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  527. package/src/pipeline/index.ts +2 -1
  528. package/src/pipeline/packageManager.ts +44 -26
  529. package/src/pipeline/yarn/yarnUtils.ts +39 -10
  530. package/src/rules/index.ts +36 -9
  531. package/src/runner/index.ts +0 -1
  532. package/src/types/config.ts +43 -16
  533. package/src/types/context.ts +165 -37
  534. package/src/types/environmentContext.ts +18 -13
  535. package/src/types/gitlab-ci-yml.ts +0 -1
  536. package/src/types/gitlab-types.ts +10 -7
  537. package/src/types/index.ts +1 -0
  538. package/src/types/jobDefinition.ts +34 -0
  539. package/src/types/jobs.ts +31 -15
  540. package/src/types/utils.ts +4 -4
  541. package/src/utils/gitlab.ts +20 -3
  542. package/src/utils/index.ts +6 -3
  543. package/src/utils/jsonParse.ts +7 -0
  544. package/src/utils/removeUndefined.ts +4 -0
  545. package/src/utils/writeFiles.ts +52 -0
  546. package/src/variables/VariableValue.ts +6 -0
  547. package/src/variables/VariableValueContainingReferences.ts +89 -0
  548. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  549. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  550. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  551. package/src/variables/__tests__/variableValue.test.ts +73 -0
  552. package/src/variables/resolveAllReferences.ts +46 -0
  553. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  554. package/src/variables/resolveReferencesOnce.ts +29 -0
  555. package/bin/catladder-gitlab-dev.js +0 -3
  556. package/bin/catladder-gitlab.js +0 -3
  557. package/dist/bundles/catladder-gitlab/index.js +0 -33838
  558. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  559. package/dist/context/resolveReferences.d.ts +0 -4
  560. package/dist/context/resolveReferences.js +0 -254
  561. package/dist/deploy/cloudRun/deployJob.d.ts +0 -3
  562. package/dist/deploy/cloudRun/deployJob.js +0 -248
  563. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  564. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  565. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  566. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  567. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  568. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1780
  569. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1780
  570. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1780
  571. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3532
  572. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3543
  573. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1656
  574. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1362
  575. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1556
  576. package/examples/__snapshots__/custom-envs.ts.snap +0 -1050
  577. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1370
  578. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2468
  579. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2428
  580. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2440
  581. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4453
  582. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2632
  583. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2557
  584. package/examples/__snapshots__/native-app.ts.snap +0 -2878
  585. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1780
  586. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4189
  587. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -1922
  588. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  589. package/scripts/bundle +0 -2
  590. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  591. package/src/context/resolveReferences.ts +0 -70
  592. package/src/deploy/cloudRun/deployJob.ts +0 -301
  593. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  594. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  595. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  596. package/src/pipeline/createChildPipeline.ts +0 -45
  597. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap DELETED
@@ -1,2440 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "api ↩️ Rollback ⚠️ | dev ": {
9
- "environment": {
10
- "action": "access",
11
- "name": "dev/api",
12
- "url": "https://api.dev.test-app.pan.panter.cloud",
13
- },
14
- "image": "path/to/docker/kubernetes:the-version",
15
- "interruptible": true,
16
- "needs": [],
17
- "retry": {
18
- "max": 2,
19
- "when": [
20
- "runner_system_failure",
21
- "stuck_or_timeout_failure",
22
- ],
23
- },
24
- "rules": [
25
- {
26
- "allow_failure": true,
27
- "when": "manual",
28
- },
29
- ],
30
- "script": [
31
- "kubectl config set-cluster "kube-pan-test-app-dev-api" --server="$CL_dev_api_KUBE_URL" --certificate-authority <(echo $CL_dev_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
32
- "kubectl config set-credentials "kube-pan-test-app-dev-api" --token="$CL_dev_api_KUBE_TOKEN"",
33
- "kubectl config set-context "kube-pan-test-app-dev-api" --cluster="kube-pan-test-app-dev-api" --user="kube-pan-test-app-dev-api" --namespace="pan-test-app-dev"",
34
- "kubectl config use-context "kube-pan-test-app-dev-api"",
35
- "kubernetesRollback",
36
- ],
37
- "stage": "rollback dev",
38
- "variables": {
39
- "APP_DIR": "api",
40
- "BUILD_ID": "some-id",
41
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
42
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
43
- "BUILD_INFO_ID": "some-id",
44
- "COMPONENT_NAME": "api",
45
- "ENV_SHORT": "dev",
46
- "ENV_TYPE": "dev",
47
- "GIT_STRATEGY": "none",
48
- "HELM_ARGS": "",
49
- "HELM_EXPERIMENTAL_OCI": "1",
50
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
51
- "HOST": "api.dev.test-app.pan.panter.cloud",
52
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
53
- "KUBERNETES_CPU_LIMIT": "1",
54
- "KUBERNETES_CPU_REQUEST": "0.5",
55
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
56
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
57
- "KUBE_APP_NAME": "api",
58
- "KUBE_APP_NAME_PREFIX": "",
59
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
60
- "KUBE_NAMESPACE": "pan-test-app-dev",
61
- "KUBE_VALUES": "env:
62
- secret:
63
- POSTGRESQL_PASSWORD: '$CL_dev_api_POSTGRESQL_PASSWORD'
64
- cloudsqlProxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
65
- public:
66
- ENV_SHORT: 'dev'
67
- APP_DIR: 'api'
68
- ENV_TYPE: 'dev'
69
- BUILD_INFO_ID: 'some-id'
70
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
71
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
72
- HOST: 'api.dev.test-app.pan.panter.cloud'
73
- ROOT_URL: 'https://api.dev.test-app.pan.panter.cloud'
74
- KUBE_NAMESPACE: 'pan-test-app-dev'
75
- KUBE_APP_NAME: 'api'
76
- KUBE_APP_NAME_PREFIX: ''
77
- HOST_CANONICAL: 'api.dev.test-app.pan.panter.cloud'
78
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
79
- application:
80
- host: 'api.dev.test-app.pan.panter.cloud'
81
- command: 'yarn start'
82
- livenessProbe:
83
- httpGet:
84
- path: '__health'
85
- readinessProbe:
86
- httpGet:
87
- path: '__health'
88
- startupProbe:
89
- httpGet:
90
- path: '__health'
91
- cloudsql:
92
- enabled: true
93
- dbUser: 'postgres'
94
- instanceConnectionName: 'myproject:europe-west6:instance-name'
95
- proxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
96
- fullDbName: 'pan-test-app-dev-api'
97
- type: 'unmanaged'
98
- ",
99
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
100
- "RELEASE_NAME": "pan-test-app-dev-api",
101
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
102
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
103
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
104
- },
105
- },
106
- "api 👮 lint": {
107
- "cache": [
108
- {
109
- "key": "api-yarn",
110
- "paths": [
111
- "api/.yarn",
112
- ],
113
- "policy": "pull-push",
114
- },
115
- {
116
- "key": "api-node-modules",
117
- "paths": [
118
- "api/node_modules",
119
- ],
120
- "policy": "pull-push",
121
- },
122
- ],
123
- "image": "path/to/docker/jobs-default:the-version",
124
- "interruptible": true,
125
- "needs": [],
126
- "retry": {
127
- "max": 2,
128
- "when": [
129
- "runner_system_failure",
130
- "stuck_or_timeout_failure",
131
- ],
132
- },
133
- "script": [
134
- "cd api",
135
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
136
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
137
- "yarn install --immutable",
138
- "yarn lint",
139
- ],
140
- "stage": "test",
141
- "variables": {
142
- "APP_PATH": "api",
143
- "KUBERNETES_CPU_LIMIT": "2",
144
- "KUBERNETES_CPU_REQUEST": "0.5",
145
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
146
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
147
- },
148
- },
149
- "api 🔨 app | dev ": {
150
- "artifacts": {
151
- "expire_in": "1 day",
152
- "paths": [
153
- "api/__build_info.json",
154
- "api/dist",
155
- "api/.next",
156
- ],
157
- "reports": {
158
- "junit": undefined,
159
- },
160
- },
161
- "cache": [
162
- {
163
- "key": "api-yarn",
164
- "paths": [
165
- "api/.yarn",
166
- ],
167
- "policy": "pull-push",
168
- },
169
- {
170
- "key": "api-node-modules",
171
- "paths": [
172
- "api/node_modules",
173
- ],
174
- "policy": "pull-push",
175
- },
176
- {
177
- "key": "api-next-cache",
178
- "paths": [
179
- "api/.next/cache/",
180
- ],
181
- "policy": "pull-push",
182
- },
183
- ],
184
- "image": "path/to/docker/jobs-default:the-version",
185
- "interruptible": true,
186
- "needs": [],
187
- "retry": {
188
- "max": 2,
189
- "when": [
190
- "runner_system_failure",
191
- "stuck_or_timeout_failure",
192
- ],
193
- },
194
- "script": [
195
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
196
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
197
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
198
- "cd api",
199
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
200
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
201
- "yarn install --immutable",
202
- "yarn build",
203
- ],
204
- "stage": "build",
205
- "variables": {
206
- "APP_DIR": "api",
207
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
208
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
209
- "BUILD_INFO_ID": "some-id",
210
- "ENV_SHORT": "dev",
211
- "ENV_TYPE": "dev",
212
- "HOST": "api.dev.test-app.pan.panter.cloud",
213
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
214
- "KUBERNETES_CPU_LIMIT": "2",
215
- "KUBERNETES_CPU_REQUEST": "0.5",
216
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
217
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
218
- "KUBE_APP_NAME": "api",
219
- "KUBE_APP_NAME_PREFIX": "",
220
- "KUBE_NAMESPACE": "pan-test-app-dev",
221
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
222
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
223
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
224
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
225
- },
226
- },
227
- "api 🔨 docker | dev ": {
228
- "cache": [
229
- {
230
- "key": "api-yarn",
231
- "paths": [
232
- "api/.yarn",
233
- ],
234
- "policy": "pull",
235
- },
236
- ],
237
- "image": "path/to/docker/docker-build:the-version",
238
- "interruptible": true,
239
- "needs": [
240
- "api 🔨 app | dev ",
241
- ],
242
- "retry": {
243
- "max": 2,
244
- "when": [
245
- "runner_system_failure",
246
- "stuck_or_timeout_failure",
247
- ],
248
- },
249
- "script": [
250
- "ensureNodeDockerfile",
251
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
252
- "docker version",
253
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
254
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
255
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
256
- "docker push $DOCKER_CACHE_IMAGE",
257
- ],
258
- "services": [
259
- {
260
- "command": [
261
- "--tls=false",
262
- ],
263
- "name": "docker:20-dind",
264
- },
265
- ],
266
- "stage": "build",
267
- "variables": {
268
- "APP_DIR": "api",
269
- "DOCKERFILE_ADDITIONS": undefined,
270
- "DOCKERFILE_ADDITIONS_END": undefined,
271
- "DOCKER_BUILDKIT": "1",
272
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
273
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
274
- RUN yarn plugin import workspace-tools
275
- RUN yarn workspaces focus --production && yarn rebuild",
276
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
277
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
278
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
279
- COPY --chown=node:node .yarn /app/.yarn",
280
- "DOCKER_DIR": ".",
281
- "DOCKER_DRIVER": "overlay2",
282
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
283
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
284
- "DOCKER_IMAGE_NAME": "dev/api",
285
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
286
- "DOCKER_REGISTRY": "$CI_REGISTRY",
287
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
288
- "DOCKER_TLS_CERTDIR": "",
289
- "KUBERNETES_CPU_LIMIT": "1",
290
- "KUBERNETES_CPU_REQUEST": "0.5",
291
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
292
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
293
- },
294
- },
295
- "api 🚀 Deploy | dev ": {
296
- "allow_failure": false,
297
- "environment": {
298
- "auto_stop_in": "4 weeks",
299
- "name": "dev/api",
300
- "on_stop": "api 🛑 Stop ⚠️ | dev ",
301
- "url": "https://api.dev.test-app.pan.panter.cloud",
302
- },
303
- "image": "path/to/docker/kubernetes:the-version",
304
- "interruptible": true,
305
- "needs": [
306
- {
307
- "artifacts": false,
308
- "job": "api 👮 lint",
309
- },
310
- {
311
- "artifacts": false,
312
- "job": "api 🔨 app | dev ",
313
- },
314
- {
315
- "artifacts": false,
316
- "job": "api 🔨 docker | dev ",
317
- },
318
- {
319
- "artifacts": false,
320
- "job": "api 🧪 test",
321
- },
322
- {
323
- "artifacts": true,
324
- "job": "api 🧾 sbom | dev ",
325
- },
326
- {
327
- "artifacts": false,
328
- "job": "api 🛡 audit",
329
- },
330
- ],
331
- "retry": {
332
- "max": 2,
333
- "when": [
334
- "runner_system_failure",
335
- "stuck_or_timeout_failure",
336
- ],
337
- },
338
- "rules": [
339
- {
340
- "when": "on_success",
341
- },
342
- ],
343
- "script": [
344
- "kubectl config set-cluster "kube-pan-test-app-dev-api" --server="$CL_dev_api_KUBE_URL" --certificate-authority <(echo $CL_dev_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
345
- "kubectl config set-credentials "kube-pan-test-app-dev-api" --token="$CL_dev_api_KUBE_TOKEN"",
346
- "kubectl config set-context "kube-pan-test-app-dev-api" --cluster="kube-pan-test-app-dev-api" --user="kube-pan-test-app-dev-api" --namespace="pan-test-app-dev"",
347
- "kubectl config use-context "kube-pan-test-app-dev-api"",
348
- "kubernetesCreateSecret",
349
- "kubernetesDeploy",
350
- "echo Uploading SBOM to Dependency Track",
351
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.dev.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
352
- "echo deployment successful 😻",
353
- ],
354
- "stage": "deploy dev",
355
- "variables": {
356
- "APP_DIR": "api",
357
- "BUILD_ID": "some-id",
358
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
359
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
360
- "BUILD_INFO_ID": "some-id",
361
- "COMPONENT_NAME": "api",
362
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
363
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
364
- "DOCKER_IMAGE_NAME": "dev/api",
365
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
366
- "DOCKER_REGISTRY": "$CI_REGISTRY",
367
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
368
- "ENV_SHORT": "dev",
369
- "ENV_TYPE": "dev",
370
- "HELM_ARGS": "",
371
- "HELM_EXPERIMENTAL_OCI": "1",
372
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
373
- "HOST": "api.dev.test-app.pan.panter.cloud",
374
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
375
- "KUBERNETES_CPU_LIMIT": "1",
376
- "KUBERNETES_CPU_REQUEST": "0.5",
377
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
378
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
379
- "KUBE_APP_NAME": "api",
380
- "KUBE_APP_NAME_PREFIX": "",
381
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
382
- "KUBE_NAMESPACE": "pan-test-app-dev",
383
- "KUBE_VALUES": "env:
384
- secret:
385
- POSTGRESQL_PASSWORD: '$CL_dev_api_POSTGRESQL_PASSWORD'
386
- cloudsqlProxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
387
- public:
388
- ENV_SHORT: 'dev'
389
- APP_DIR: 'api'
390
- ENV_TYPE: 'dev'
391
- BUILD_INFO_ID: 'some-id'
392
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
393
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
394
- HOST: 'api.dev.test-app.pan.panter.cloud'
395
- ROOT_URL: 'https://api.dev.test-app.pan.panter.cloud'
396
- KUBE_NAMESPACE: 'pan-test-app-dev'
397
- KUBE_APP_NAME: 'api'
398
- KUBE_APP_NAME_PREFIX: ''
399
- HOST_CANONICAL: 'api.dev.test-app.pan.panter.cloud'
400
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
401
- application:
402
- host: 'api.dev.test-app.pan.panter.cloud'
403
- command: 'yarn start'
404
- livenessProbe:
405
- httpGet:
406
- path: '__health'
407
- readinessProbe:
408
- httpGet:
409
- path: '__health'
410
- startupProbe:
411
- httpGet:
412
- path: '__health'
413
- cloudsql:
414
- enabled: true
415
- dbUser: 'postgres'
416
- instanceConnectionName: 'myproject:europe-west6:instance-name'
417
- proxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
418
- fullDbName: 'pan-test-app-dev-api'
419
- type: 'unmanaged'
420
- ",
421
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
422
- "RELEASE_NAME": "pan-test-app-dev-api",
423
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
424
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
425
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
426
- },
427
- },
428
- "api 🛑 Stop ⚠️ | dev ": {
429
- "environment": {
430
- "action": "stop",
431
- "name": "dev/api",
432
- "url": "https://api.dev.test-app.pan.panter.cloud",
433
- },
434
- "image": "path/to/docker/kubernetes:the-version",
435
- "interruptible": true,
436
- "needs": [],
437
- "retry": {
438
- "max": 2,
439
- "when": [
440
- "runner_system_failure",
441
- "stuck_or_timeout_failure",
442
- ],
443
- },
444
- "rules": [
445
- {
446
- "allow_failure": true,
447
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
448
- "when": "on_success",
449
- },
450
- {
451
- "allow_failure": true,
452
- "when": "manual",
453
- },
454
- ],
455
- "script": [
456
- "kubectl config set-cluster "kube-pan-test-app-dev-api" --server="$CL_dev_api_KUBE_URL" --certificate-authority <(echo $CL_dev_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
457
- "kubectl config set-credentials "kube-pan-test-app-dev-api" --token="$CL_dev_api_KUBE_TOKEN"",
458
- "kubectl config set-context "kube-pan-test-app-dev-api" --cluster="kube-pan-test-app-dev-api" --user="kube-pan-test-app-dev-api" --namespace="pan-test-app-dev"",
459
- "kubectl config use-context "kube-pan-test-app-dev-api"",
460
- "kubernetesDelete",
461
- "echo Disabling component in Dependency Track",
462
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.dev.test-app.pan.panter.cloud" || true",
463
- ],
464
- "stage": "stop dev",
465
- "variables": {
466
- "APP_DIR": "api",
467
- "BUILD_ID": "some-id",
468
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
469
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
470
- "BUILD_INFO_ID": "some-id",
471
- "COMPONENT_NAME": "api",
472
- "ENV_SHORT": "dev",
473
- "ENV_TYPE": "dev",
474
- "GIT_STRATEGY": "none",
475
- "HELM_ARGS": "",
476
- "HELM_EXPERIMENTAL_OCI": "1",
477
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
478
- "HOST": "api.dev.test-app.pan.panter.cloud",
479
- "HOST_CANONICAL": "api.dev.test-app.pan.panter.cloud",
480
- "KUBERNETES_CPU_LIMIT": "1",
481
- "KUBERNETES_CPU_REQUEST": "0.5",
482
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
483
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
484
- "KUBE_APP_NAME": "api",
485
- "KUBE_APP_NAME_PREFIX": "",
486
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
487
- "KUBE_NAMESPACE": "pan-test-app-dev",
488
- "KUBE_VALUES": "env:
489
- secret:
490
- POSTGRESQL_PASSWORD: '$CL_dev_api_POSTGRESQL_PASSWORD'
491
- cloudsqlProxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
492
- public:
493
- ENV_SHORT: 'dev'
494
- APP_DIR: 'api'
495
- ENV_TYPE: 'dev'
496
- BUILD_INFO_ID: 'some-id'
497
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
498
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
499
- HOST: 'api.dev.test-app.pan.panter.cloud'
500
- ROOT_URL: 'https://api.dev.test-app.pan.panter.cloud'
501
- KUBE_NAMESPACE: 'pan-test-app-dev'
502
- KUBE_APP_NAME: 'api'
503
- KUBE_APP_NAME_PREFIX: ''
504
- HOST_CANONICAL: 'api.dev.test-app.pan.panter.cloud'
505
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
506
- application:
507
- host: 'api.dev.test-app.pan.panter.cloud'
508
- command: 'yarn start'
509
- livenessProbe:
510
- httpGet:
511
- path: '__health'
512
- readinessProbe:
513
- httpGet:
514
- path: '__health'
515
- startupProbe:
516
- httpGet:
517
- path: '__health'
518
- cloudsql:
519
- enabled: true
520
- dbUser: 'postgres'
521
- instanceConnectionName: 'myproject:europe-west6:instance-name'
522
- proxyCredentials: '$CL_dev_api_cloudsqlProxyCredentials'
523
- fullDbName: 'pan-test-app-dev-api'
524
- type: 'unmanaged'
525
- ",
526
- "POSTGRESQL_PASSWORD": "$CL_dev_api_POSTGRESQL_PASSWORD",
527
- "RELEASE_NAME": "pan-test-app-dev-api",
528
- "ROOT_URL": "https://api.dev.test-app.pan.panter.cloud",
529
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
530
- "cloudsqlProxyCredentials": "$CL_dev_api_cloudsqlProxyCredentials",
531
- },
532
- },
533
- "api 🛡 audit": {
534
- "allow_failure": true,
535
- "image": "path/to/docker/jobs-default:the-version",
536
- "interruptible": true,
537
- "needs": [],
538
- "retry": {
539
- "max": 2,
540
- "when": [
541
- "runner_system_failure",
542
- "stuck_or_timeout_failure",
543
- ],
544
- },
545
- "script": [
546
- "cd api",
547
- "yarn npm audit --environment production",
548
- ],
549
- "stage": "test",
550
- "variables": {
551
- "APP_PATH": "api",
552
- "KUBERNETES_CPU_LIMIT": "2",
553
- "KUBERNETES_CPU_REQUEST": "0.5",
554
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
555
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
556
- },
557
- },
558
- "api 🧪 test": {
559
- "cache": [
560
- {
561
- "key": "api-yarn",
562
- "paths": [
563
- "api/.yarn",
564
- ],
565
- "policy": "pull-push",
566
- },
567
- {
568
- "key": "api-node-modules",
569
- "paths": [
570
- "api/node_modules",
571
- ],
572
- "policy": "pull-push",
573
- },
574
- ],
575
- "image": "path/to/docker/jobs-testing-chrome:the-version",
576
- "interruptible": true,
577
- "needs": [],
578
- "retry": {
579
- "max": 2,
580
- "when": [
581
- "runner_system_failure",
582
- "stuck_or_timeout_failure",
583
- ],
584
- },
585
- "script": [
586
- "cd api",
587
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
588
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
589
- "yarn install --immutable",
590
- "yarn test",
591
- ],
592
- "stage": "test",
593
- "variables": {
594
- "APP_PATH": "api",
595
- "KUBERNETES_CPU_LIMIT": "2",
596
- "KUBERNETES_CPU_REQUEST": "0.5",
597
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
598
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
599
- },
600
- },
601
- "api 🧾 sbom | dev ": {
602
- "allow_failure": true,
603
- "artifacts": {
604
- "paths": [
605
- "__sbom.json",
606
- ],
607
- },
608
- "image": "aquasec/trivy:0.38.3",
609
- "interruptible": true,
610
- "needs": [],
611
- "retry": {
612
- "max": 2,
613
- "when": [
614
- "runner_system_failure",
615
- "stuck_or_timeout_failure",
616
- ],
617
- },
618
- "script": [
619
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
620
- ],
621
- "stage": "build",
622
- "variables": {},
623
- },
624
- },
625
- "stages": [
626
- "setup",
627
- "setup dev",
628
- "setup review",
629
- "setup stage",
630
- "setup prod",
631
- "setup local",
632
- "test",
633
- "test dev",
634
- "test review",
635
- "test stage",
636
- "test prod",
637
- "test local",
638
- "build",
639
- "build dev",
640
- "build review",
641
- "build stage",
642
- "build prod",
643
- "build local",
644
- "deploy",
645
- "deploy dev",
646
- "deploy review",
647
- "deploy stage",
648
- "deploy prod",
649
- "deploy local",
650
- "verify",
651
- "verify dev",
652
- "verify review",
653
- "verify stage",
654
- "verify prod",
655
- "verify local",
656
- "rollback",
657
- "rollback dev",
658
- "rollback review",
659
- "rollback stage",
660
- "rollback prod",
661
- "rollback local",
662
- "stop",
663
- "stop dev",
664
- "stop review",
665
- "stop stage",
666
- "stop prod",
667
- "stop local",
668
- ],
669
- "variables": {
670
- "FF_USE_FASTZIP": "true",
671
- },
672
- "workflow": {
673
- "rules": [
674
- {
675
- "if": "$CI_COMMIT_TAG",
676
- },
677
- {
678
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
679
- "when": "never",
680
- },
681
- {
682
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
683
- },
684
- {
685
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
686
- },
687
- {
688
- "if": "$CI_MERGE_REQUEST_ID",
689
- },
690
- ],
691
- },
692
- },
693
- "mr": {
694
- "image": "path/to/docker/jobs-default:the-version",
695
- "jobs": {
696
- "api ↩️ Rollback ⚠️ | review ": {
697
- "environment": {
698
- "action": "access",
699
- "name": "review/some-commit/api",
700
- "url": "https://api.mr1234.review.test-app.pan.panter.cloud",
701
- },
702
- "image": "path/to/docker/kubernetes:the-version",
703
- "interruptible": true,
704
- "needs": [],
705
- "retry": {
706
- "max": 2,
707
- "when": [
708
- "runner_system_failure",
709
- "stuck_or_timeout_failure",
710
- ],
711
- },
712
- "rules": [
713
- {
714
- "allow_failure": true,
715
- "when": "manual",
716
- },
717
- ],
718
- "script": [
719
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-api" --server="$CL_review_api_KUBE_URL" --certificate-authority <(echo $CL_review_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
720
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-api" --token="$CL_review_api_KUBE_TOKEN"",
721
- "kubectl config set-context "kube-pan-test-app-review-mr1234-api" --cluster="kube-pan-test-app-review-mr1234-api" --user="kube-pan-test-app-review-mr1234-api" --namespace="pan-test-app-review"",
722
- "kubectl config use-context "kube-pan-test-app-review-mr1234-api"",
723
- "kubernetesRollback",
724
- ],
725
- "stage": "rollback review",
726
- "variables": {
727
- "APP_DIR": "api",
728
- "BUILD_ID": "some-id",
729
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
730
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
731
- "BUILD_INFO_ID": "some-id",
732
- "COMPONENT_NAME": "api",
733
- "ENV_SHORT": "review",
734
- "ENV_TYPE": "review",
735
- "GIT_STRATEGY": "none",
736
- "HELM_ARGS": "",
737
- "HELM_EXPERIMENTAL_OCI": "1",
738
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
739
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
740
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
741
- "KUBERNETES_CPU_LIMIT": "1",
742
- "KUBERNETES_CPU_REQUEST": "0.5",
743
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
744
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
745
- "KUBE_APP_NAME": "mr1234-api",
746
- "KUBE_APP_NAME_PREFIX": "mr1234-",
747
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
748
- "KUBE_NAMESPACE": "pan-test-app-review",
749
- "KUBE_VALUES": "env:
750
- secret:
751
- POSTGRESQL_PASSWORD: '$CL_review_api_POSTGRESQL_PASSWORD'
752
- cloudsqlProxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
753
- public:
754
- ENV_SHORT: 'review'
755
- APP_DIR: 'api'
756
- ENV_TYPE: 'review'
757
- BUILD_INFO_ID: 'some-id'
758
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
759
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
760
- HOST: 'api.mr1234.review.test-app.pan.panter.cloud'
761
- ROOT_URL: 'https://api.mr1234.review.test-app.pan.panter.cloud'
762
- KUBE_NAMESPACE: 'pan-test-app-review'
763
- KUBE_APP_NAME: 'mr1234-api'
764
- KUBE_APP_NAME_PREFIX: 'mr1234-'
765
- HOST_CANONICAL: 'api.mr1234.review.test-app.pan.panter.cloud'
766
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
767
- application:
768
- host: 'api.mr1234.review.test-app.pan.panter.cloud'
769
- command: 'yarn start'
770
- livenessProbe:
771
- httpGet:
772
- path: '__health'
773
- readinessProbe:
774
- httpGet:
775
- path: '__health'
776
- startupProbe:
777
- httpGet:
778
- path: '__health'
779
- cloudsql:
780
- enabled: true
781
- dbUser: 'postgres'
782
- instanceConnectionName: 'myproject:europe-west6:instance-name'
783
- proxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
784
- fullDbName: 'pan-test-app-review-mr1234-api'
785
- type: 'unmanaged'
786
- ",
787
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
788
- "RELEASE_NAME": "pan-test-app-review-mr1234-api",
789
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
790
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
791
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
792
- },
793
- },
794
- "api 👮 lint": {
795
- "cache": [
796
- {
797
- "key": "api-yarn",
798
- "paths": [
799
- "api/.yarn",
800
- ],
801
- "policy": "pull-push",
802
- },
803
- {
804
- "key": "api-node-modules",
805
- "paths": [
806
- "api/node_modules",
807
- ],
808
- "policy": "pull-push",
809
- },
810
- ],
811
- "image": "path/to/docker/jobs-default:the-version",
812
- "interruptible": true,
813
- "needs": [],
814
- "retry": {
815
- "max": 2,
816
- "when": [
817
- "runner_system_failure",
818
- "stuck_or_timeout_failure",
819
- ],
820
- },
821
- "script": [
822
- "cd api",
823
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
824
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
825
- "yarn install --immutable",
826
- "yarn lint",
827
- ],
828
- "stage": "test",
829
- "variables": {
830
- "APP_PATH": "api",
831
- "KUBERNETES_CPU_LIMIT": "2",
832
- "KUBERNETES_CPU_REQUEST": "0.5",
833
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
834
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
835
- },
836
- },
837
- "api 🔨 app | review ": {
838
- "artifacts": {
839
- "expire_in": "1 day",
840
- "paths": [
841
- "api/__build_info.json",
842
- "api/dist",
843
- "api/.next",
844
- ],
845
- "reports": {
846
- "junit": undefined,
847
- },
848
- },
849
- "cache": [
850
- {
851
- "key": "api-yarn",
852
- "paths": [
853
- "api/.yarn",
854
- ],
855
- "policy": "pull-push",
856
- },
857
- {
858
- "key": "api-node-modules",
859
- "paths": [
860
- "api/node_modules",
861
- ],
862
- "policy": "pull-push",
863
- },
864
- {
865
- "key": "api-next-cache",
866
- "paths": [
867
- "api/.next/cache/",
868
- ],
869
- "policy": "pull-push",
870
- },
871
- ],
872
- "image": "path/to/docker/jobs-default:the-version",
873
- "interruptible": true,
874
- "needs": [],
875
- "retry": {
876
- "max": 2,
877
- "when": [
878
- "runner_system_failure",
879
- "stuck_or_timeout_failure",
880
- ],
881
- },
882
- "script": [
883
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
884
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
885
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
886
- "cd api",
887
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
888
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
889
- "yarn install --immutable",
890
- "yarn build",
891
- ],
892
- "stage": "build",
893
- "variables": {
894
- "APP_DIR": "api",
895
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
896
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
897
- "BUILD_INFO_ID": "some-id",
898
- "ENV_SHORT": "review",
899
- "ENV_TYPE": "review",
900
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
901
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
902
- "KUBERNETES_CPU_LIMIT": "2",
903
- "KUBERNETES_CPU_REQUEST": "0.5",
904
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
905
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
906
- "KUBE_APP_NAME": "mr1234-api",
907
- "KUBE_APP_NAME_PREFIX": "mr1234-",
908
- "KUBE_NAMESPACE": "pan-test-app-review",
909
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
910
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
911
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
912
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
913
- },
914
- },
915
- "api 🔨 docker | review ": {
916
- "cache": [
917
- {
918
- "key": "api-yarn",
919
- "paths": [
920
- "api/.yarn",
921
- ],
922
- "policy": "pull",
923
- },
924
- ],
925
- "image": "path/to/docker/docker-build:the-version",
926
- "interruptible": true,
927
- "needs": [
928
- "api 🔨 app | review ",
929
- ],
930
- "retry": {
931
- "max": 2,
932
- "when": [
933
- "runner_system_failure",
934
- "stuck_or_timeout_failure",
935
- ],
936
- },
937
- "script": [
938
- "ensureNodeDockerfile",
939
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
940
- "docker version",
941
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
942
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
943
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
944
- "docker push $DOCKER_CACHE_IMAGE",
945
- ],
946
- "services": [
947
- {
948
- "command": [
949
- "--tls=false",
950
- ],
951
- "name": "docker:20-dind",
952
- },
953
- ],
954
- "stage": "build",
955
- "variables": {
956
- "APP_DIR": "api",
957
- "DOCKERFILE_ADDITIONS": undefined,
958
- "DOCKERFILE_ADDITIONS_END": undefined,
959
- "DOCKER_BUILDKIT": "1",
960
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
961
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
962
- RUN yarn plugin import workspace-tools
963
- RUN yarn workspaces focus --production && yarn rebuild",
964
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
965
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
966
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
967
- COPY --chown=node:node .yarn /app/.yarn",
968
- "DOCKER_DIR": ".",
969
- "DOCKER_DRIVER": "overlay2",
970
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
971
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
972
- "DOCKER_IMAGE_NAME": "review/api",
973
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
974
- "DOCKER_REGISTRY": "$CI_REGISTRY",
975
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
976
- "DOCKER_TLS_CERTDIR": "",
977
- "KUBERNETES_CPU_LIMIT": "1",
978
- "KUBERNETES_CPU_REQUEST": "0.5",
979
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
980
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
981
- },
982
- },
983
- "api 🚀 Deploy | review ": {
984
- "allow_failure": false,
985
- "environment": {
986
- "auto_stop_in": "2 week",
987
- "name": "review/some-commit/api",
988
- "on_stop": "api 🛑 Stop ⚠️ | review ",
989
- "url": "https://api.mr1234.review.test-app.pan.panter.cloud",
990
- },
991
- "image": "path/to/docker/kubernetes:the-version",
992
- "interruptible": true,
993
- "needs": [
994
- {
995
- "artifacts": false,
996
- "job": "api 👮 lint",
997
- },
998
- {
999
- "artifacts": false,
1000
- "job": "api 🔨 app | review ",
1001
- },
1002
- {
1003
- "artifacts": false,
1004
- "job": "api 🔨 docker | review ",
1005
- },
1006
- {
1007
- "artifacts": false,
1008
- "job": "api 🧪 test",
1009
- },
1010
- {
1011
- "artifacts": true,
1012
- "job": "api 🧾 sbom | review ",
1013
- },
1014
- {
1015
- "artifacts": false,
1016
- "job": "api 🛡 audit",
1017
- },
1018
- ],
1019
- "retry": {
1020
- "max": 2,
1021
- "when": [
1022
- "runner_system_failure",
1023
- "stuck_or_timeout_failure",
1024
- ],
1025
- },
1026
- "rules": [
1027
- {
1028
- "when": "on_success",
1029
- },
1030
- ],
1031
- "script": [
1032
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-api" --server="$CL_review_api_KUBE_URL" --certificate-authority <(echo $CL_review_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1033
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-api" --token="$CL_review_api_KUBE_TOKEN"",
1034
- "kubectl config set-context "kube-pan-test-app-review-mr1234-api" --cluster="kube-pan-test-app-review-mr1234-api" --user="kube-pan-test-app-review-mr1234-api" --namespace="pan-test-app-review"",
1035
- "kubectl config use-context "kube-pan-test-app-review-mr1234-api"",
1036
- "kubernetesCreateSecret",
1037
- "kubernetesDeploy",
1038
- "echo Uploading SBOM to Dependency Track",
1039
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.mr1234.review.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
1040
- "echo deployment successful 😻",
1041
- ],
1042
- "stage": "deploy review",
1043
- "variables": {
1044
- "APP_DIR": "api",
1045
- "BUILD_ID": "some-id",
1046
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1047
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1048
- "BUILD_INFO_ID": "some-id",
1049
- "COMPONENT_NAME": "api",
1050
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1051
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1052
- "DOCKER_IMAGE_NAME": "review/api",
1053
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1054
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1055
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1056
- "ENV_SHORT": "review",
1057
- "ENV_TYPE": "review",
1058
- "HELM_ARGS": "",
1059
- "HELM_EXPERIMENTAL_OCI": "1",
1060
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1061
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
1062
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
1063
- "KUBERNETES_CPU_LIMIT": "1",
1064
- "KUBERNETES_CPU_REQUEST": "0.5",
1065
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1066
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1067
- "KUBE_APP_NAME": "mr1234-api",
1068
- "KUBE_APP_NAME_PREFIX": "mr1234-",
1069
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1070
- "KUBE_NAMESPACE": "pan-test-app-review",
1071
- "KUBE_VALUES": "env:
1072
- secret:
1073
- POSTGRESQL_PASSWORD: '$CL_review_api_POSTGRESQL_PASSWORD'
1074
- cloudsqlProxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1075
- public:
1076
- ENV_SHORT: 'review'
1077
- APP_DIR: 'api'
1078
- ENV_TYPE: 'review'
1079
- BUILD_INFO_ID: 'some-id'
1080
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1081
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1082
- HOST: 'api.mr1234.review.test-app.pan.panter.cloud'
1083
- ROOT_URL: 'https://api.mr1234.review.test-app.pan.panter.cloud'
1084
- KUBE_NAMESPACE: 'pan-test-app-review'
1085
- KUBE_APP_NAME: 'mr1234-api'
1086
- KUBE_APP_NAME_PREFIX: 'mr1234-'
1087
- HOST_CANONICAL: 'api.mr1234.review.test-app.pan.panter.cloud'
1088
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1089
- application:
1090
- host: 'api.mr1234.review.test-app.pan.panter.cloud'
1091
- command: 'yarn start'
1092
- livenessProbe:
1093
- httpGet:
1094
- path: '__health'
1095
- readinessProbe:
1096
- httpGet:
1097
- path: '__health'
1098
- startupProbe:
1099
- httpGet:
1100
- path: '__health'
1101
- cloudsql:
1102
- enabled: true
1103
- dbUser: 'postgres'
1104
- instanceConnectionName: 'myproject:europe-west6:instance-name'
1105
- proxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1106
- fullDbName: 'pan-test-app-review-mr1234-api'
1107
- type: 'unmanaged'
1108
- ",
1109
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
1110
- "RELEASE_NAME": "pan-test-app-review-mr1234-api",
1111
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
1112
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1113
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
1114
- },
1115
- },
1116
- "api 🛑 Stop ⚠️ | review ": {
1117
- "environment": {
1118
- "action": "stop",
1119
- "name": "review/some-commit/api",
1120
- "url": "https://api.mr1234.review.test-app.pan.panter.cloud",
1121
- },
1122
- "image": "path/to/docker/kubernetes:the-version",
1123
- "interruptible": true,
1124
- "needs": [],
1125
- "retry": {
1126
- "max": 2,
1127
- "when": [
1128
- "runner_system_failure",
1129
- "stuck_or_timeout_failure",
1130
- ],
1131
- },
1132
- "rules": [
1133
- {
1134
- "allow_failure": true,
1135
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1136
- "when": "on_success",
1137
- },
1138
- {
1139
- "allow_failure": true,
1140
- "when": "manual",
1141
- },
1142
- ],
1143
- "script": [
1144
- "kubectl config set-cluster "kube-pan-test-app-review-mr1234-api" --server="$CL_review_api_KUBE_URL" --certificate-authority <(echo $CL_review_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1145
- "kubectl config set-credentials "kube-pan-test-app-review-mr1234-api" --token="$CL_review_api_KUBE_TOKEN"",
1146
- "kubectl config set-context "kube-pan-test-app-review-mr1234-api" --cluster="kube-pan-test-app-review-mr1234-api" --user="kube-pan-test-app-review-mr1234-api" --namespace="pan-test-app-review"",
1147
- "kubectl config use-context "kube-pan-test-app-review-mr1234-api"",
1148
- "kubernetesDelete",
1149
- "echo Disabling component in Dependency Track",
1150
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.mr1234.review.test-app.pan.panter.cloud" || true",
1151
- ],
1152
- "stage": "stop review",
1153
- "variables": {
1154
- "APP_DIR": "api",
1155
- "BUILD_ID": "some-id",
1156
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1157
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1158
- "BUILD_INFO_ID": "some-id",
1159
- "COMPONENT_NAME": "api",
1160
- "ENV_SHORT": "review",
1161
- "ENV_TYPE": "review",
1162
- "GIT_STRATEGY": "none",
1163
- "HELM_ARGS": "",
1164
- "HELM_EXPERIMENTAL_OCI": "1",
1165
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1166
- "HOST": "api.mr1234.review.test-app.pan.panter.cloud",
1167
- "HOST_CANONICAL": "api.mr1234.review.test-app.pan.panter.cloud",
1168
- "KUBERNETES_CPU_LIMIT": "1",
1169
- "KUBERNETES_CPU_REQUEST": "0.5",
1170
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1171
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1172
- "KUBE_APP_NAME": "mr1234-api",
1173
- "KUBE_APP_NAME_PREFIX": "mr1234-",
1174
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1175
- "KUBE_NAMESPACE": "pan-test-app-review",
1176
- "KUBE_VALUES": "env:
1177
- secret:
1178
- POSTGRESQL_PASSWORD: '$CL_review_api_POSTGRESQL_PASSWORD'
1179
- cloudsqlProxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1180
- public:
1181
- ENV_SHORT: 'review'
1182
- APP_DIR: 'api'
1183
- ENV_TYPE: 'review'
1184
- BUILD_INFO_ID: 'some-id'
1185
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1186
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1187
- HOST: 'api.mr1234.review.test-app.pan.panter.cloud'
1188
- ROOT_URL: 'https://api.mr1234.review.test-app.pan.panter.cloud'
1189
- KUBE_NAMESPACE: 'pan-test-app-review'
1190
- KUBE_APP_NAME: 'mr1234-api'
1191
- KUBE_APP_NAME_PREFIX: 'mr1234-'
1192
- HOST_CANONICAL: 'api.mr1234.review.test-app.pan.panter.cloud'
1193
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1194
- application:
1195
- host: 'api.mr1234.review.test-app.pan.panter.cloud'
1196
- command: 'yarn start'
1197
- livenessProbe:
1198
- httpGet:
1199
- path: '__health'
1200
- readinessProbe:
1201
- httpGet:
1202
- path: '__health'
1203
- startupProbe:
1204
- httpGet:
1205
- path: '__health'
1206
- cloudsql:
1207
- enabled: true
1208
- dbUser: 'postgres'
1209
- instanceConnectionName: 'myproject:europe-west6:instance-name'
1210
- proxyCredentials: '$CL_review_api_cloudsqlProxyCredentials'
1211
- fullDbName: 'pan-test-app-review-mr1234-api'
1212
- type: 'unmanaged'
1213
- ",
1214
- "POSTGRESQL_PASSWORD": "$CL_review_api_POSTGRESQL_PASSWORD",
1215
- "RELEASE_NAME": "pan-test-app-review-mr1234-api",
1216
- "ROOT_URL": "https://api.mr1234.review.test-app.pan.panter.cloud",
1217
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1218
- "cloudsqlProxyCredentials": "$CL_review_api_cloudsqlProxyCredentials",
1219
- },
1220
- },
1221
- "api 🛡 audit": {
1222
- "allow_failure": true,
1223
- "image": "path/to/docker/jobs-default:the-version",
1224
- "interruptible": true,
1225
- "needs": [],
1226
- "retry": {
1227
- "max": 2,
1228
- "when": [
1229
- "runner_system_failure",
1230
- "stuck_or_timeout_failure",
1231
- ],
1232
- },
1233
- "script": [
1234
- "cd api",
1235
- "yarn npm audit --environment production",
1236
- ],
1237
- "stage": "test",
1238
- "variables": {
1239
- "APP_PATH": "api",
1240
- "KUBERNETES_CPU_LIMIT": "2",
1241
- "KUBERNETES_CPU_REQUEST": "0.5",
1242
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1243
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1244
- },
1245
- },
1246
- "api 🧪 test": {
1247
- "cache": [
1248
- {
1249
- "key": "api-yarn",
1250
- "paths": [
1251
- "api/.yarn",
1252
- ],
1253
- "policy": "pull-push",
1254
- },
1255
- {
1256
- "key": "api-node-modules",
1257
- "paths": [
1258
- "api/node_modules",
1259
- ],
1260
- "policy": "pull-push",
1261
- },
1262
- ],
1263
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1264
- "interruptible": true,
1265
- "needs": [],
1266
- "retry": {
1267
- "max": 2,
1268
- "when": [
1269
- "runner_system_failure",
1270
- "stuck_or_timeout_failure",
1271
- ],
1272
- },
1273
- "script": [
1274
- "cd api",
1275
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1276
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1277
- "yarn install --immutable",
1278
- "yarn test",
1279
- ],
1280
- "stage": "test",
1281
- "variables": {
1282
- "APP_PATH": "api",
1283
- "KUBERNETES_CPU_LIMIT": "2",
1284
- "KUBERNETES_CPU_REQUEST": "0.5",
1285
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1286
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1287
- },
1288
- },
1289
- "api 🧾 sbom | review ": {
1290
- "allow_failure": true,
1291
- "artifacts": {
1292
- "paths": [
1293
- "__sbom.json",
1294
- ],
1295
- },
1296
- "image": "aquasec/trivy:0.38.3",
1297
- "interruptible": true,
1298
- "needs": [],
1299
- "retry": {
1300
- "max": 2,
1301
- "when": [
1302
- "runner_system_failure",
1303
- "stuck_or_timeout_failure",
1304
- ],
1305
- },
1306
- "script": [
1307
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
1308
- ],
1309
- "stage": "build",
1310
- "variables": {},
1311
- },
1312
- },
1313
- "stages": [
1314
- "setup",
1315
- "setup dev",
1316
- "setup review",
1317
- "setup stage",
1318
- "setup prod",
1319
- "setup local",
1320
- "test",
1321
- "test dev",
1322
- "test review",
1323
- "test stage",
1324
- "test prod",
1325
- "test local",
1326
- "build",
1327
- "build dev",
1328
- "build review",
1329
- "build stage",
1330
- "build prod",
1331
- "build local",
1332
- "deploy",
1333
- "deploy dev",
1334
- "deploy review",
1335
- "deploy stage",
1336
- "deploy prod",
1337
- "deploy local",
1338
- "verify",
1339
- "verify dev",
1340
- "verify review",
1341
- "verify stage",
1342
- "verify prod",
1343
- "verify local",
1344
- "rollback",
1345
- "rollback dev",
1346
- "rollback review",
1347
- "rollback stage",
1348
- "rollback prod",
1349
- "rollback local",
1350
- "stop",
1351
- "stop dev",
1352
- "stop review",
1353
- "stop stage",
1354
- "stop prod",
1355
- "stop local",
1356
- ],
1357
- "variables": {
1358
- "FF_USE_FASTZIP": "true",
1359
- },
1360
- "workflow": {
1361
- "rules": [
1362
- {
1363
- "if": "$CI_COMMIT_TAG",
1364
- },
1365
- {
1366
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1367
- "when": "never",
1368
- },
1369
- {
1370
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1371
- },
1372
- {
1373
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1374
- },
1375
- {
1376
- "if": "$CI_MERGE_REQUEST_ID",
1377
- },
1378
- ],
1379
- },
1380
- },
1381
- "taggedRelease": {
1382
- "image": "path/to/docker/jobs-default:the-version",
1383
- "jobs": {
1384
- "api ↩️ Rollback ⚠️ | prod ": {
1385
- "environment": {
1386
- "action": "access",
1387
- "name": "prod/api",
1388
- "url": "https://api.prod.test-app.pan.panter.cloud",
1389
- },
1390
- "image": "path/to/docker/kubernetes:the-version",
1391
- "interruptible": true,
1392
- "needs": [],
1393
- "retry": {
1394
- "max": 2,
1395
- "when": [
1396
- "runner_system_failure",
1397
- "stuck_or_timeout_failure",
1398
- ],
1399
- },
1400
- "rules": [
1401
- {
1402
- "allow_failure": true,
1403
- "when": "manual",
1404
- },
1405
- ],
1406
- "script": [
1407
- "kubectl config set-cluster "kube-pan-test-app-prod-api" --server="$CL_prod_api_KUBE_URL" --certificate-authority <(echo $CL_prod_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1408
- "kubectl config set-credentials "kube-pan-test-app-prod-api" --token="$CL_prod_api_KUBE_TOKEN"",
1409
- "kubectl config set-context "kube-pan-test-app-prod-api" --cluster="kube-pan-test-app-prod-api" --user="kube-pan-test-app-prod-api" --namespace="pan-test-app-prod"",
1410
- "kubectl config use-context "kube-pan-test-app-prod-api"",
1411
- "kubernetesRollback",
1412
- ],
1413
- "stage": "rollback prod",
1414
- "variables": {
1415
- "APP_DIR": "api",
1416
- "BUILD_ID": "some-id",
1417
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1418
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1419
- "BUILD_INFO_ID": "some-id",
1420
- "COMPONENT_NAME": "api",
1421
- "ENV_SHORT": "prod",
1422
- "ENV_TYPE": "prod",
1423
- "GIT_STRATEGY": "none",
1424
- "HELM_ARGS": "",
1425
- "HELM_EXPERIMENTAL_OCI": "1",
1426
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1427
- "HOST": "api.prod.test-app.pan.panter.cloud",
1428
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
1429
- "KUBERNETES_CPU_LIMIT": "1",
1430
- "KUBERNETES_CPU_REQUEST": "0.5",
1431
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1432
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1433
- "KUBE_APP_NAME": "api",
1434
- "KUBE_APP_NAME_PREFIX": "",
1435
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1436
- "KUBE_NAMESPACE": "pan-test-app-prod",
1437
- "KUBE_VALUES": "env:
1438
- secret:
1439
- POSTGRESQL_PASSWORD: '$CL_prod_api_POSTGRESQL_PASSWORD'
1440
- cloudsqlProxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1441
- public:
1442
- ENV_SHORT: 'prod'
1443
- APP_DIR: 'api'
1444
- ENV_TYPE: 'prod'
1445
- BUILD_INFO_ID: 'some-id'
1446
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1447
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1448
- HOST: 'api.prod.test-app.pan.panter.cloud'
1449
- ROOT_URL: 'https://api.prod.test-app.pan.panter.cloud'
1450
- KUBE_NAMESPACE: 'pan-test-app-prod'
1451
- KUBE_APP_NAME: 'api'
1452
- KUBE_APP_NAME_PREFIX: ''
1453
- HOST_CANONICAL: 'api.prod.test-app.pan.panter.cloud'
1454
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1455
- application:
1456
- host: 'api.prod.test-app.pan.panter.cloud'
1457
- command: 'yarn start'
1458
- livenessProbe:
1459
- httpGet:
1460
- path: '__health'
1461
- readinessProbe:
1462
- httpGet:
1463
- path: '__health'
1464
- startupProbe:
1465
- httpGet:
1466
- path: '__health'
1467
- cloudsql:
1468
- enabled: true
1469
- dbUser: 'postgres'
1470
- instanceConnectionName: 'myproject:europe-west6:instance-name'
1471
- proxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1472
- fullDbName: 'pan-test-app-prod-api'
1473
- type: 'unmanaged'
1474
- ",
1475
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
1476
- "RELEASE_NAME": "pan-test-app-prod-api",
1477
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
1478
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1479
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
1480
- },
1481
- },
1482
- "api ↩️ Rollback ⚠️ | stage ": {
1483
- "environment": {
1484
- "action": "access",
1485
- "name": "stage/api",
1486
- "url": "https://api.stage.test-app.pan.panter.cloud",
1487
- },
1488
- "image": "path/to/docker/kubernetes:the-version",
1489
- "interruptible": true,
1490
- "needs": [],
1491
- "retry": {
1492
- "max": 2,
1493
- "when": [
1494
- "runner_system_failure",
1495
- "stuck_or_timeout_failure",
1496
- ],
1497
- },
1498
- "rules": [
1499
- {
1500
- "allow_failure": true,
1501
- "when": "manual",
1502
- },
1503
- ],
1504
- "script": [
1505
- "kubectl config set-cluster "kube-pan-test-app-stage-api" --server="$CL_stage_api_KUBE_URL" --certificate-authority <(echo $CL_stage_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1506
- "kubectl config set-credentials "kube-pan-test-app-stage-api" --token="$CL_stage_api_KUBE_TOKEN"",
1507
- "kubectl config set-context "kube-pan-test-app-stage-api" --cluster="kube-pan-test-app-stage-api" --user="kube-pan-test-app-stage-api" --namespace="pan-test-app-stage"",
1508
- "kubectl config use-context "kube-pan-test-app-stage-api"",
1509
- "kubernetesRollback",
1510
- ],
1511
- "stage": "rollback stage",
1512
- "variables": {
1513
- "APP_DIR": "api",
1514
- "BUILD_ID": "some-id",
1515
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1516
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1517
- "BUILD_INFO_ID": "some-id",
1518
- "COMPONENT_NAME": "api",
1519
- "ENV_SHORT": "stage",
1520
- "ENV_TYPE": "stage",
1521
- "GIT_STRATEGY": "none",
1522
- "HELM_ARGS": "",
1523
- "HELM_EXPERIMENTAL_OCI": "1",
1524
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1525
- "HOST": "api.stage.test-app.pan.panter.cloud",
1526
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
1527
- "KUBERNETES_CPU_LIMIT": "1",
1528
- "KUBERNETES_CPU_REQUEST": "0.5",
1529
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1530
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1531
- "KUBE_APP_NAME": "api",
1532
- "KUBE_APP_NAME_PREFIX": "",
1533
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1534
- "KUBE_NAMESPACE": "pan-test-app-stage",
1535
- "KUBE_VALUES": "env:
1536
- secret:
1537
- POSTGRESQL_PASSWORD: '$CL_stage_api_POSTGRESQL_PASSWORD'
1538
- cloudsqlProxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
1539
- public:
1540
- ENV_SHORT: 'stage'
1541
- APP_DIR: 'api'
1542
- ENV_TYPE: 'stage'
1543
- BUILD_INFO_ID: 'some-id'
1544
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1545
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1546
- HOST: 'api.stage.test-app.pan.panter.cloud'
1547
- ROOT_URL: 'https://api.stage.test-app.pan.panter.cloud'
1548
- KUBE_NAMESPACE: 'pan-test-app-stage'
1549
- KUBE_APP_NAME: 'api'
1550
- KUBE_APP_NAME_PREFIX: ''
1551
- HOST_CANONICAL: 'api.stage.test-app.pan.panter.cloud'
1552
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1553
- application:
1554
- host: 'api.stage.test-app.pan.panter.cloud'
1555
- command: 'yarn start'
1556
- livenessProbe:
1557
- httpGet:
1558
- path: '__health'
1559
- readinessProbe:
1560
- httpGet:
1561
- path: '__health'
1562
- startupProbe:
1563
- httpGet:
1564
- path: '__health'
1565
- cloudsql:
1566
- enabled: true
1567
- dbUser: 'postgres'
1568
- instanceConnectionName: 'myproject:europe-west6:instance-name'
1569
- proxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
1570
- fullDbName: 'pan-test-app-stage-api'
1571
- type: 'unmanaged'
1572
- ",
1573
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
1574
- "RELEASE_NAME": "pan-test-app-stage-api",
1575
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
1576
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1577
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
1578
- },
1579
- },
1580
- "api 🔨 app | prod ": {
1581
- "artifacts": {
1582
- "expire_in": "1 day",
1583
- "paths": [
1584
- "api/__build_info.json",
1585
- "api/dist",
1586
- "api/.next",
1587
- ],
1588
- "reports": {
1589
- "junit": undefined,
1590
- },
1591
- },
1592
- "cache": [
1593
- {
1594
- "key": "api-yarn",
1595
- "paths": [
1596
- "api/.yarn",
1597
- ],
1598
- "policy": "pull-push",
1599
- },
1600
- {
1601
- "key": "api-node-modules",
1602
- "paths": [
1603
- "api/node_modules",
1604
- ],
1605
- "policy": "pull-push",
1606
- },
1607
- {
1608
- "key": "api-next-cache",
1609
- "paths": [
1610
- "api/.next/cache/",
1611
- ],
1612
- "policy": "pull-push",
1613
- },
1614
- ],
1615
- "image": "path/to/docker/jobs-default:the-version",
1616
- "interruptible": true,
1617
- "needs": [],
1618
- "retry": {
1619
- "max": 2,
1620
- "when": [
1621
- "runner_system_failure",
1622
- "stuck_or_timeout_failure",
1623
- ],
1624
- },
1625
- "script": [
1626
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1627
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1628
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1629
- "cd api",
1630
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1631
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1632
- "yarn install --immutable",
1633
- "yarn build",
1634
- ],
1635
- "stage": "build",
1636
- "variables": {
1637
- "APP_DIR": "api",
1638
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1639
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1640
- "BUILD_INFO_ID": "some-id",
1641
- "ENV_SHORT": "prod",
1642
- "ENV_TYPE": "prod",
1643
- "HOST": "api.prod.test-app.pan.panter.cloud",
1644
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
1645
- "KUBERNETES_CPU_LIMIT": "2",
1646
- "KUBERNETES_CPU_REQUEST": "0.5",
1647
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1648
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1649
- "KUBE_APP_NAME": "api",
1650
- "KUBE_APP_NAME_PREFIX": "",
1651
- "KUBE_NAMESPACE": "pan-test-app-prod",
1652
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
1653
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
1654
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1655
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
1656
- },
1657
- },
1658
- "api 🔨 app | stage ": {
1659
- "artifacts": {
1660
- "expire_in": "1 day",
1661
- "paths": [
1662
- "api/__build_info.json",
1663
- "api/dist",
1664
- "api/.next",
1665
- ],
1666
- "reports": {
1667
- "junit": undefined,
1668
- },
1669
- },
1670
- "cache": [
1671
- {
1672
- "key": "api-yarn",
1673
- "paths": [
1674
- "api/.yarn",
1675
- ],
1676
- "policy": "pull-push",
1677
- },
1678
- {
1679
- "key": "api-node-modules",
1680
- "paths": [
1681
- "api/node_modules",
1682
- ],
1683
- "policy": "pull-push",
1684
- },
1685
- {
1686
- "key": "api-next-cache",
1687
- "paths": [
1688
- "api/.next/cache/",
1689
- ],
1690
- "policy": "pull-push",
1691
- },
1692
- ],
1693
- "image": "path/to/docker/jobs-default:the-version",
1694
- "interruptible": true,
1695
- "needs": [],
1696
- "retry": {
1697
- "max": 2,
1698
- "when": [
1699
- "runner_system_failure",
1700
- "stuck_or_timeout_failure",
1701
- ],
1702
- },
1703
- "script": [
1704
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1705
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1706
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1707
- "cd api",
1708
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1709
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1710
- "yarn install --immutable",
1711
- "yarn build",
1712
- ],
1713
- "stage": "build",
1714
- "variables": {
1715
- "APP_DIR": "api",
1716
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1717
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1718
- "BUILD_INFO_ID": "some-id",
1719
- "ENV_SHORT": "stage",
1720
- "ENV_TYPE": "stage",
1721
- "HOST": "api.stage.test-app.pan.panter.cloud",
1722
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
1723
- "KUBERNETES_CPU_LIMIT": "2",
1724
- "KUBERNETES_CPU_REQUEST": "0.5",
1725
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1726
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1727
- "KUBE_APP_NAME": "api",
1728
- "KUBE_APP_NAME_PREFIX": "",
1729
- "KUBE_NAMESPACE": "pan-test-app-stage",
1730
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
1731
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
1732
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1733
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
1734
- },
1735
- },
1736
- "api 🔨 docker | prod ": {
1737
- "cache": [
1738
- {
1739
- "key": "api-yarn",
1740
- "paths": [
1741
- "api/.yarn",
1742
- ],
1743
- "policy": "pull",
1744
- },
1745
- ],
1746
- "image": "path/to/docker/docker-build:the-version",
1747
- "interruptible": true,
1748
- "needs": [
1749
- "api 🔨 app | prod ",
1750
- ],
1751
- "retry": {
1752
- "max": 2,
1753
- "when": [
1754
- "runner_system_failure",
1755
- "stuck_or_timeout_failure",
1756
- ],
1757
- },
1758
- "script": [
1759
- "ensureNodeDockerfile",
1760
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1761
- "docker version",
1762
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1763
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1764
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1765
- "docker push $DOCKER_CACHE_IMAGE",
1766
- ],
1767
- "services": [
1768
- {
1769
- "command": [
1770
- "--tls=false",
1771
- ],
1772
- "name": "docker:20-dind",
1773
- },
1774
- ],
1775
- "stage": "build",
1776
- "variables": {
1777
- "APP_DIR": "api",
1778
- "DOCKERFILE_ADDITIONS": undefined,
1779
- "DOCKERFILE_ADDITIONS_END": undefined,
1780
- "DOCKER_BUILDKIT": "1",
1781
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1782
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1783
- RUN yarn plugin import workspace-tools
1784
- RUN yarn workspaces focus --production && yarn rebuild",
1785
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1786
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1787
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1788
- COPY --chown=node:node .yarn /app/.yarn",
1789
- "DOCKER_DIR": ".",
1790
- "DOCKER_DRIVER": "overlay2",
1791
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1792
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1793
- "DOCKER_IMAGE_NAME": "prod/api",
1794
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1795
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1796
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1797
- "DOCKER_TLS_CERTDIR": "",
1798
- "KUBERNETES_CPU_LIMIT": "1",
1799
- "KUBERNETES_CPU_REQUEST": "0.5",
1800
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1801
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1802
- },
1803
- },
1804
- "api 🔨 docker | stage ": {
1805
- "cache": [
1806
- {
1807
- "key": "api-yarn",
1808
- "paths": [
1809
- "api/.yarn",
1810
- ],
1811
- "policy": "pull",
1812
- },
1813
- ],
1814
- "image": "path/to/docker/docker-build:the-version",
1815
- "interruptible": true,
1816
- "needs": [
1817
- "api 🔨 app | stage ",
1818
- ],
1819
- "retry": {
1820
- "max": 2,
1821
- "when": [
1822
- "runner_system_failure",
1823
- "stuck_or_timeout_failure",
1824
- ],
1825
- },
1826
- "script": [
1827
- "ensureNodeDockerfile",
1828
- "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
1829
- "docker version",
1830
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1831
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1832
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1833
- "docker push $DOCKER_CACHE_IMAGE",
1834
- ],
1835
- "services": [
1836
- {
1837
- "command": [
1838
- "--tls=false",
1839
- ],
1840
- "name": "docker:20-dind",
1841
- },
1842
- ],
1843
- "stage": "build",
1844
- "variables": {
1845
- "APP_DIR": "api",
1846
- "DOCKERFILE_ADDITIONS": undefined,
1847
- "DOCKERFILE_ADDITIONS_END": undefined,
1848
- "DOCKER_BUILDKIT": "1",
1849
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1850
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1851
- RUN yarn plugin import workspace-tools
1852
- RUN yarn workspaces focus --production && yarn rebuild",
1853
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1854
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1855
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1856
- COPY --chown=node:node .yarn /app/.yarn",
1857
- "DOCKER_DIR": ".",
1858
- "DOCKER_DRIVER": "overlay2",
1859
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1860
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1861
- "DOCKER_IMAGE_NAME": "stage/api",
1862
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1863
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1864
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1865
- "DOCKER_TLS_CERTDIR": "",
1866
- "KUBERNETES_CPU_LIMIT": "1",
1867
- "KUBERNETES_CPU_REQUEST": "0.5",
1868
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1869
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1870
- },
1871
- },
1872
- "api 🚀 Deploy | prod ": {
1873
- "allow_failure": true,
1874
- "environment": {
1875
- "auto_stop_in": undefined,
1876
- "name": "prod/api",
1877
- "on_stop": "api 🛑 Stop ⚠️ | prod ",
1878
- "url": "https://api.prod.test-app.pan.panter.cloud",
1879
- },
1880
- "image": "path/to/docker/kubernetes:the-version",
1881
- "interruptible": true,
1882
- "needs": [
1883
- {
1884
- "artifacts": false,
1885
- "job": "api 🔨 app | prod ",
1886
- },
1887
- {
1888
- "artifacts": false,
1889
- "job": "api 🔨 docker | prod ",
1890
- },
1891
- {
1892
- "artifacts": true,
1893
- "job": "api 🧾 sbom | prod ",
1894
- },
1895
- ],
1896
- "retry": {
1897
- "max": 2,
1898
- "when": [
1899
- "runner_system_failure",
1900
- "stuck_or_timeout_failure",
1901
- ],
1902
- },
1903
- "rules": [
1904
- {
1905
- "when": "manual",
1906
- },
1907
- ],
1908
- "script": [
1909
- "kubectl config set-cluster "kube-pan-test-app-prod-api" --server="$CL_prod_api_KUBE_URL" --certificate-authority <(echo $CL_prod_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
1910
- "kubectl config set-credentials "kube-pan-test-app-prod-api" --token="$CL_prod_api_KUBE_TOKEN"",
1911
- "kubectl config set-context "kube-pan-test-app-prod-api" --cluster="kube-pan-test-app-prod-api" --user="kube-pan-test-app-prod-api" --namespace="pan-test-app-prod"",
1912
- "kubectl config use-context "kube-pan-test-app-prod-api"",
1913
- "kubernetesCreateSecret",
1914
- "kubernetesDeploy",
1915
- "echo Uploading SBOM to Dependency Track",
1916
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.prod.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
1917
- "echo deployment successful 😻",
1918
- ],
1919
- "stage": "deploy prod",
1920
- "variables": {
1921
- "APP_DIR": "api",
1922
- "BUILD_ID": "some-id",
1923
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1924
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1925
- "BUILD_INFO_ID": "some-id",
1926
- "COMPONENT_NAME": "api",
1927
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
1928
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
1929
- "DOCKER_IMAGE_NAME": "prod/api",
1930
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1931
- "DOCKER_REGISTRY": "$CI_REGISTRY",
1932
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
1933
- "ENV_SHORT": "prod",
1934
- "ENV_TYPE": "prod",
1935
- "HELM_ARGS": "",
1936
- "HELM_EXPERIMENTAL_OCI": "1",
1937
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
1938
- "HOST": "api.prod.test-app.pan.panter.cloud",
1939
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
1940
- "KUBERNETES_CPU_LIMIT": "1",
1941
- "KUBERNETES_CPU_REQUEST": "0.5",
1942
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1943
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1944
- "KUBE_APP_NAME": "api",
1945
- "KUBE_APP_NAME_PREFIX": "",
1946
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
1947
- "KUBE_NAMESPACE": "pan-test-app-prod",
1948
- "KUBE_VALUES": "env:
1949
- secret:
1950
- POSTGRESQL_PASSWORD: '$CL_prod_api_POSTGRESQL_PASSWORD'
1951
- cloudsqlProxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1952
- public:
1953
- ENV_SHORT: 'prod'
1954
- APP_DIR: 'api'
1955
- ENV_TYPE: 'prod'
1956
- BUILD_INFO_ID: 'some-id'
1957
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1958
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1959
- HOST: 'api.prod.test-app.pan.panter.cloud'
1960
- ROOT_URL: 'https://api.prod.test-app.pan.panter.cloud'
1961
- KUBE_NAMESPACE: 'pan-test-app-prod'
1962
- KUBE_APP_NAME: 'api'
1963
- KUBE_APP_NAME_PREFIX: ''
1964
- HOST_CANONICAL: 'api.prod.test-app.pan.panter.cloud'
1965
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
1966
- application:
1967
- host: 'api.prod.test-app.pan.panter.cloud'
1968
- command: 'yarn start'
1969
- livenessProbe:
1970
- httpGet:
1971
- path: '__health'
1972
- readinessProbe:
1973
- httpGet:
1974
- path: '__health'
1975
- startupProbe:
1976
- httpGet:
1977
- path: '__health'
1978
- cloudsql:
1979
- enabled: true
1980
- dbUser: 'postgres'
1981
- instanceConnectionName: 'myproject:europe-west6:instance-name'
1982
- proxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
1983
- fullDbName: 'pan-test-app-prod-api'
1984
- type: 'unmanaged'
1985
- ",
1986
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
1987
- "RELEASE_NAME": "pan-test-app-prod-api",
1988
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
1989
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
1990
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
1991
- },
1992
- },
1993
- "api 🚀 Deploy | stage ": {
1994
- "allow_failure": false,
1995
- "environment": {
1996
- "auto_stop_in": undefined,
1997
- "name": "stage/api",
1998
- "on_stop": "api 🛑 Stop ⚠️ | stage ",
1999
- "url": "https://api.stage.test-app.pan.panter.cloud",
2000
- },
2001
- "image": "path/to/docker/kubernetes:the-version",
2002
- "interruptible": true,
2003
- "needs": [
2004
- {
2005
- "artifacts": false,
2006
- "job": "api 🔨 app | stage ",
2007
- },
2008
- {
2009
- "artifacts": false,
2010
- "job": "api 🔨 docker | stage ",
2011
- },
2012
- {
2013
- "artifacts": true,
2014
- "job": "api 🧾 sbom | stage ",
2015
- },
2016
- ],
2017
- "retry": {
2018
- "max": 2,
2019
- "when": [
2020
- "runner_system_failure",
2021
- "stuck_or_timeout_failure",
2022
- ],
2023
- },
2024
- "rules": [
2025
- {
2026
- "when": "on_success",
2027
- },
2028
- ],
2029
- "script": [
2030
- "kubectl config set-cluster "kube-pan-test-app-stage-api" --server="$CL_stage_api_KUBE_URL" --certificate-authority <(echo $CL_stage_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2031
- "kubectl config set-credentials "kube-pan-test-app-stage-api" --token="$CL_stage_api_KUBE_TOKEN"",
2032
- "kubectl config set-context "kube-pan-test-app-stage-api" --cluster="kube-pan-test-app-stage-api" --user="kube-pan-test-app-stage-api" --namespace="pan-test-app-stage"",
2033
- "kubectl config use-context "kube-pan-test-app-stage-api"",
2034
- "kubernetesCreateSecret",
2035
- "kubernetesDeploy",
2036
- "echo Uploading SBOM to Dependency Track",
2037
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://api.stage.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
2038
- "echo deployment successful 😻",
2039
- ],
2040
- "stage": "deploy stage",
2041
- "variables": {
2042
- "APP_DIR": "api",
2043
- "BUILD_ID": "some-id",
2044
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2045
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2046
- "BUILD_INFO_ID": "some-id",
2047
- "COMPONENT_NAME": "api",
2048
- "DOCKER_CACHE_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/caches/api",
2049
- "DOCKER_IMAGE": "$DOCKER_REGISTRY_IMAGE_PATH/$DOCKER_IMAGE_NAME",
2050
- "DOCKER_IMAGE_NAME": "stage/api",
2051
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2052
- "DOCKER_REGISTRY": "$CI_REGISTRY",
2053
- "DOCKER_REGISTRY_IMAGE_PATH": "$CI_REGISTRY_IMAGE",
2054
- "ENV_SHORT": "stage",
2055
- "ENV_TYPE": "stage",
2056
- "HELM_ARGS": "",
2057
- "HELM_EXPERIMENTAL_OCI": "1",
2058
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2059
- "HOST": "api.stage.test-app.pan.panter.cloud",
2060
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
2061
- "KUBERNETES_CPU_LIMIT": "1",
2062
- "KUBERNETES_CPU_REQUEST": "0.5",
2063
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2064
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2065
- "KUBE_APP_NAME": "api",
2066
- "KUBE_APP_NAME_PREFIX": "",
2067
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
2068
- "KUBE_NAMESPACE": "pan-test-app-stage",
2069
- "KUBE_VALUES": "env:
2070
- secret:
2071
- POSTGRESQL_PASSWORD: '$CL_stage_api_POSTGRESQL_PASSWORD'
2072
- cloudsqlProxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2073
- public:
2074
- ENV_SHORT: 'stage'
2075
- APP_DIR: 'api'
2076
- ENV_TYPE: 'stage'
2077
- BUILD_INFO_ID: 'some-id'
2078
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2079
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2080
- HOST: 'api.stage.test-app.pan.panter.cloud'
2081
- ROOT_URL: 'https://api.stage.test-app.pan.panter.cloud'
2082
- KUBE_NAMESPACE: 'pan-test-app-stage'
2083
- KUBE_APP_NAME: 'api'
2084
- KUBE_APP_NAME_PREFIX: ''
2085
- HOST_CANONICAL: 'api.stage.test-app.pan.panter.cloud'
2086
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
2087
- application:
2088
- host: 'api.stage.test-app.pan.panter.cloud'
2089
- command: 'yarn start'
2090
- livenessProbe:
2091
- httpGet:
2092
- path: '__health'
2093
- readinessProbe:
2094
- httpGet:
2095
- path: '__health'
2096
- startupProbe:
2097
- httpGet:
2098
- path: '__health'
2099
- cloudsql:
2100
- enabled: true
2101
- dbUser: 'postgres'
2102
- instanceConnectionName: 'myproject:europe-west6:instance-name'
2103
- proxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2104
- fullDbName: 'pan-test-app-stage-api'
2105
- type: 'unmanaged'
2106
- ",
2107
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
2108
- "RELEASE_NAME": "pan-test-app-stage-api",
2109
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
2110
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
2111
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
2112
- },
2113
- },
2114
- "api 🛑 Stop ⚠️ | prod ": {
2115
- "environment": {
2116
- "action": "stop",
2117
- "name": "prod/api",
2118
- "url": "https://api.prod.test-app.pan.panter.cloud",
2119
- },
2120
- "image": "path/to/docker/kubernetes:the-version",
2121
- "interruptible": true,
2122
- "needs": [],
2123
- "retry": {
2124
- "max": 2,
2125
- "when": [
2126
- "runner_system_failure",
2127
- "stuck_or_timeout_failure",
2128
- ],
2129
- },
2130
- "rules": [
2131
- {
2132
- "allow_failure": true,
2133
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2134
- "when": "on_success",
2135
- },
2136
- {
2137
- "allow_failure": true,
2138
- "when": "manual",
2139
- },
2140
- ],
2141
- "script": [
2142
- "kubectl config set-cluster "kube-pan-test-app-prod-api" --server="$CL_prod_api_KUBE_URL" --certificate-authority <(echo $CL_prod_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2143
- "kubectl config set-credentials "kube-pan-test-app-prod-api" --token="$CL_prod_api_KUBE_TOKEN"",
2144
- "kubectl config set-context "kube-pan-test-app-prod-api" --cluster="kube-pan-test-app-prod-api" --user="kube-pan-test-app-prod-api" --namespace="pan-test-app-prod"",
2145
- "kubectl config use-context "kube-pan-test-app-prod-api"",
2146
- "kubernetesDelete",
2147
- "echo Disabling component in Dependency Track",
2148
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.prod.test-app.pan.panter.cloud" || true",
2149
- ],
2150
- "stage": "stop prod",
2151
- "variables": {
2152
- "APP_DIR": "api",
2153
- "BUILD_ID": "some-id",
2154
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2155
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2156
- "BUILD_INFO_ID": "some-id",
2157
- "COMPONENT_NAME": "api",
2158
- "ENV_SHORT": "prod",
2159
- "ENV_TYPE": "prod",
2160
- "GIT_STRATEGY": "none",
2161
- "HELM_ARGS": "",
2162
- "HELM_EXPERIMENTAL_OCI": "1",
2163
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2164
- "HOST": "api.prod.test-app.pan.panter.cloud",
2165
- "HOST_CANONICAL": "api.prod.test-app.pan.panter.cloud",
2166
- "KUBERNETES_CPU_LIMIT": "1",
2167
- "KUBERNETES_CPU_REQUEST": "0.5",
2168
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2169
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2170
- "KUBE_APP_NAME": "api",
2171
- "KUBE_APP_NAME_PREFIX": "",
2172
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
2173
- "KUBE_NAMESPACE": "pan-test-app-prod",
2174
- "KUBE_VALUES": "env:
2175
- secret:
2176
- POSTGRESQL_PASSWORD: '$CL_prod_api_POSTGRESQL_PASSWORD'
2177
- cloudsqlProxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
2178
- public:
2179
- ENV_SHORT: 'prod'
2180
- APP_DIR: 'api'
2181
- ENV_TYPE: 'prod'
2182
- BUILD_INFO_ID: 'some-id'
2183
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2184
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2185
- HOST: 'api.prod.test-app.pan.panter.cloud'
2186
- ROOT_URL: 'https://api.prod.test-app.pan.panter.cloud'
2187
- KUBE_NAMESPACE: 'pan-test-app-prod'
2188
- KUBE_APP_NAME: 'api'
2189
- KUBE_APP_NAME_PREFIX: ''
2190
- HOST_CANONICAL: 'api.prod.test-app.pan.panter.cloud'
2191
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
2192
- application:
2193
- host: 'api.prod.test-app.pan.panter.cloud'
2194
- command: 'yarn start'
2195
- livenessProbe:
2196
- httpGet:
2197
- path: '__health'
2198
- readinessProbe:
2199
- httpGet:
2200
- path: '__health'
2201
- startupProbe:
2202
- httpGet:
2203
- path: '__health'
2204
- cloudsql:
2205
- enabled: true
2206
- dbUser: 'postgres'
2207
- instanceConnectionName: 'myproject:europe-west6:instance-name'
2208
- proxyCredentials: '$CL_prod_api_cloudsqlProxyCredentials'
2209
- fullDbName: 'pan-test-app-prod-api'
2210
- type: 'unmanaged'
2211
- ",
2212
- "POSTGRESQL_PASSWORD": "$CL_prod_api_POSTGRESQL_PASSWORD",
2213
- "RELEASE_NAME": "pan-test-app-prod-api",
2214
- "ROOT_URL": "https://api.prod.test-app.pan.panter.cloud",
2215
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
2216
- "cloudsqlProxyCredentials": "$CL_prod_api_cloudsqlProxyCredentials",
2217
- },
2218
- },
2219
- "api 🛑 Stop ⚠️ | stage ": {
2220
- "environment": {
2221
- "action": "stop",
2222
- "name": "stage/api",
2223
- "url": "https://api.stage.test-app.pan.panter.cloud",
2224
- },
2225
- "image": "path/to/docker/kubernetes:the-version",
2226
- "interruptible": true,
2227
- "needs": [],
2228
- "retry": {
2229
- "max": 2,
2230
- "when": [
2231
- "runner_system_failure",
2232
- "stuck_or_timeout_failure",
2233
- ],
2234
- },
2235
- "rules": [
2236
- {
2237
- "allow_failure": true,
2238
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2239
- "when": "on_success",
2240
- },
2241
- {
2242
- "allow_failure": true,
2243
- "when": "manual",
2244
- },
2245
- ],
2246
- "script": [
2247
- "kubectl config set-cluster "kube-pan-test-app-stage-api" --server="$CL_stage_api_KUBE_URL" --certificate-authority <(echo $CL_stage_api_KUBE_CA_PEM | base64 -d) --embed-certs=true",
2248
- "kubectl config set-credentials "kube-pan-test-app-stage-api" --token="$CL_stage_api_KUBE_TOKEN"",
2249
- "kubectl config set-context "kube-pan-test-app-stage-api" --cluster="kube-pan-test-app-stage-api" --user="kube-pan-test-app-stage-api" --namespace="pan-test-app-stage"",
2250
- "kubectl config use-context "kube-pan-test-app-stage-api"",
2251
- "kubernetesDelete",
2252
- "echo Disabling component in Dependency Track",
2253
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://api.stage.test-app.pan.panter.cloud" || true",
2254
- ],
2255
- "stage": "stop stage",
2256
- "variables": {
2257
- "APP_DIR": "api",
2258
- "BUILD_ID": "some-id",
2259
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2260
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2261
- "BUILD_INFO_ID": "some-id",
2262
- "COMPONENT_NAME": "api",
2263
- "ENV_SHORT": "stage",
2264
- "ENV_TYPE": "stage",
2265
- "GIT_STRATEGY": "none",
2266
- "HELM_ARGS": "",
2267
- "HELM_EXPERIMENTAL_OCI": "1",
2268
- "HELM_GITLAB_CHART_NAME": "/helm-charts/the-panter-chart",
2269
- "HOST": "api.stage.test-app.pan.panter.cloud",
2270
- "HOST_CANONICAL": "api.stage.test-app.pan.panter.cloud",
2271
- "KUBERNETES_CPU_LIMIT": "1",
2272
- "KUBERNETES_CPU_REQUEST": "0.5",
2273
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2274
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2275
- "KUBE_APP_NAME": "api",
2276
- "KUBE_APP_NAME_PREFIX": "",
2277
- "KUBE_DOCKER_IMAGE_PULL_SECRET": "gitlab-registry-api",
2278
- "KUBE_NAMESPACE": "pan-test-app-stage",
2279
- "KUBE_VALUES": "env:
2280
- secret:
2281
- POSTGRESQL_PASSWORD: '$CL_stage_api_POSTGRESQL_PASSWORD'
2282
- cloudsqlProxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2283
- public:
2284
- ENV_SHORT: 'stage'
2285
- APP_DIR: 'api'
2286
- ENV_TYPE: 'stage'
2287
- BUILD_INFO_ID: 'some-id'
2288
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2289
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2290
- HOST: 'api.stage.test-app.pan.panter.cloud'
2291
- ROOT_URL: 'https://api.stage.test-app.pan.panter.cloud'
2292
- KUBE_NAMESPACE: 'pan-test-app-stage'
2293
- KUBE_APP_NAME: 'api'
2294
- KUBE_APP_NAME_PREFIX: ''
2295
- HOST_CANONICAL: 'api.stage.test-app.pan.panter.cloud'
2296
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]'
2297
- application:
2298
- host: 'api.stage.test-app.pan.panter.cloud'
2299
- command: 'yarn start'
2300
- livenessProbe:
2301
- httpGet:
2302
- path: '__health'
2303
- readinessProbe:
2304
- httpGet:
2305
- path: '__health'
2306
- startupProbe:
2307
- httpGet:
2308
- path: '__health'
2309
- cloudsql:
2310
- enabled: true
2311
- dbUser: 'postgres'
2312
- instanceConnectionName: 'myproject:europe-west6:instance-name'
2313
- proxyCredentials: '$CL_stage_api_cloudsqlProxyCredentials'
2314
- fullDbName: 'pan-test-app-stage-api'
2315
- type: 'unmanaged'
2316
- ",
2317
- "POSTGRESQL_PASSWORD": "$CL_stage_api_POSTGRESQL_PASSWORD",
2318
- "RELEASE_NAME": "pan-test-app-stage-api",
2319
- "ROOT_URL": "https://api.stage.test-app.pan.panter.cloud",
2320
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL","POSTGRESQL_PASSWORD","cloudsqlProxyCredentials"]",
2321
- "cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
2322
- },
2323
- },
2324
- "api 🧾 sbom | prod ": {
2325
- "allow_failure": true,
2326
- "artifacts": {
2327
- "paths": [
2328
- "__sbom.json",
2329
- ],
2330
- },
2331
- "image": "aquasec/trivy:0.38.3",
2332
- "interruptible": true,
2333
- "needs": [],
2334
- "retry": {
2335
- "max": 2,
2336
- "when": [
2337
- "runner_system_failure",
2338
- "stuck_or_timeout_failure",
2339
- ],
2340
- },
2341
- "script": [
2342
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2343
- ],
2344
- "stage": "build",
2345
- "variables": {},
2346
- },
2347
- "api 🧾 sbom | stage ": {
2348
- "allow_failure": true,
2349
- "artifacts": {
2350
- "paths": [
2351
- "__sbom.json",
2352
- ],
2353
- },
2354
- "image": "aquasec/trivy:0.38.3",
2355
- "interruptible": true,
2356
- "needs": [],
2357
- "retry": {
2358
- "max": 2,
2359
- "when": [
2360
- "runner_system_failure",
2361
- "stuck_or_timeout_failure",
2362
- ],
2363
- },
2364
- "script": [
2365
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2366
- ],
2367
- "stage": "build",
2368
- "variables": {},
2369
- },
2370
- },
2371
- "stages": [
2372
- "setup",
2373
- "setup dev",
2374
- "setup review",
2375
- "setup stage",
2376
- "setup prod",
2377
- "setup local",
2378
- "test",
2379
- "test dev",
2380
- "test review",
2381
- "test stage",
2382
- "test prod",
2383
- "test local",
2384
- "build",
2385
- "build dev",
2386
- "build review",
2387
- "build stage",
2388
- "build prod",
2389
- "build local",
2390
- "deploy",
2391
- "deploy dev",
2392
- "deploy review",
2393
- "deploy stage",
2394
- "deploy prod",
2395
- "deploy local",
2396
- "verify",
2397
- "verify dev",
2398
- "verify review",
2399
- "verify stage",
2400
- "verify prod",
2401
- "verify local",
2402
- "rollback",
2403
- "rollback dev",
2404
- "rollback review",
2405
- "rollback stage",
2406
- "rollback prod",
2407
- "rollback local",
2408
- "stop",
2409
- "stop dev",
2410
- "stop review",
2411
- "stop stage",
2412
- "stop prod",
2413
- "stop local",
2414
- ],
2415
- "variables": {
2416
- "FF_USE_FASTZIP": "true",
2417
- },
2418
- "workflow": {
2419
- "rules": [
2420
- {
2421
- "if": "$CI_COMMIT_TAG",
2422
- },
2423
- {
2424
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2425
- "when": "never",
2426
- },
2427
- {
2428
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2429
- },
2430
- {
2431
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2432
- },
2433
- {
2434
- "if": "$CI_MERGE_REQUEST_ID",
2435
- },
2436
- ],
2437
- },
2438
- },
2439
- }
2440
- `;