@catladder/pipeline 0.0.0-node16-ddfae617 → 0.0.0-perf-cli-reduce-bundle-size-with-tsconfig-optimization-3556aaa4

package/src/deploy/cloudRun/utils/createArgsString.ts

@@ -0,0 +1,34 @@
+import { isNil } from "lodash";
+import type { BashExpression } from "../../../bash/BashExpression";
+
+/**
+ * creates arguments string:
+ *
+ * --key=value
+ *
+ * - undefined or null values will get removed completly
+ * - true will just be "--key"
+ * @param args args record
+ * @returns
+ */
+export const createArgsString = (...args: keyValuesArg[]) =>
+  args
+    .map((argObj) =>
+      Object.entries(argObj)
+        .filter(([, value]) => !isNil(value))
+        .map(([key, value]) => {
+          if (value === true) {
+            return `--${key}`;
+          } else if (value === false) {
+            return `--no-${key}`;
+          }
+          return `--${key}=${value}`;
+        }),
+    )
+    .flat()
+    .join(" ");
+
+export type keyValuesArg = Record<
+  string,
+  string | number | true | false | undefined | BashExpression
+>;

package/src/deploy/cloudRun/utils/database.ts

@@ -0,0 +1,77 @@
+import type { ComponentContext } from "../../../types";
+import { allowFailureInScripts, repeatOnFailure } from "../../../utils/gitlab";
+import type {
+  DeployConfigCloudRun,
+  DeployConfigCloudRunCloudSql,
+} from "../../types";
+
+export const getDatabaseDeleteScript = (
+  context: ComponentContext,
+  deployConfig: DeployConfigCloudRun,
+): string[] => {
+  if (!deployConfig.cloudSql || !deployConfig.cloudSql.deleteDatabaseOnStop) {
+    throw new Error("not possible");
+  }
+  const DB_NAME = context.environment.envVars["DB_NAME"];
+
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
+
+  const [projectId, region, instanceId] =
+    deployConfig.cloudSql.instanceConnectionName.split(":");
+  // unfortunatly the database cannot be deleted right after the service has stopped, as it might still have connections
+  // we have to repeate this process
+  return [
+    `echo "deleting database ${DB_NAME}..."`,
+    `echo "👆 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down"`,
+    repeatOnFailure(
+      `gcloud sql databases delete ${DB_NAME} --instance=${instanceId} --project ${projectId}`,
+      {
+        pauseInSeconds: 10,
+      },
+    ),
+  ];
+};
+
+export const getDatabaseCreateScript = (
+  context: ComponentContext,
+  deployConfig: DeployConfigCloudRun,
+): string[] => {
+  if (!deployConfig.cloudSql) {
+    throw new Error("not possible");
+  }
+
+  const DB_NAME = context.environment.envVars["DB_NAME"];
+
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
+
+  const [projectId, region, instanceId] =
+    deployConfig.cloudSql.instanceConnectionName.split(":");
+  // may fail if it already exists
+  return allowFailureInScripts([
+    `echo "ensuring Database..."`,
+    `gcloud sql databases create ${DB_NAME} --instance=${instanceId} --project ${projectId}`,
+  ]);
+};
+
+export const DATABASE_JDBC_URL =
+  "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD";
+
+export const getDatabaseConnectionString = (
+  config: DeployConfigCloudRunCloudSql,
+): string => {
+  switch (config.dbConnectionStringFormat) {
+    case "jdbc":
+      return DATABASE_JDBC_URL;
+    case "rails":
+      return `postgresql://$DB_USER:$DB_PASSWORD@${encodeURIComponent(
+        `/cloudsql/${config.instanceConnectionName}`,
+      )}/$DB_NAME?`;
+    default:
+      // prisma
+      return "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME";
+  }
+};

package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts

@@ -0,0 +1,12 @@
+import { GCLOUD_DEPLOY_CREDENTIALS_KEY } from "..";
+import { getSecretVarNameForContext } from "../../../context";
+import type { ComponentContext } from "../../../types";
+
+export const gcloudServiceAccountLoginCommands = (
+  context: ComponentContext,
+) => [
+  `gcloud auth activate-service-account --key-file=<(echo "$${getSecretVarNameForContext(
+    context,
+    GCLOUD_DEPLOY_CREDENTIALS_KEY,
+  )}")`,
+];

package/src/deploy/cloudRun/utils/getServiceName.ts

@@ -0,0 +1,3 @@
+import type { ComponentContext } from "../../../types/context";
+export const getServiceName = (context: ComponentContext) =>
+  context.environment.fullName.toLowerCase();

package/src/deploy/cloudRun/utils/jobName.ts

@@ -0,0 +1,7 @@
+import type { StringOrBashExpression } from "../../../bash/BashExpression";
+
+export const getCloudRunJobName = (
+  fullAppName: StringOrBashExpression,
+  jobName: string,
+): StringOrBashExpression =>
+  fullAppName.toLowerCase().concat("-" + jobName.toLowerCase());

package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts

@@ -0,0 +1,12 @@
+/**
+ *
+ * takes a command and removes the first keep lines from the output
+ *
+ * @param cmd the command, its stdout is then limited
+ * @param removeFirstN how many lines to remove at the start of the command
+ * @returns
+ */
+export const removeFirstLinesFromCommandOutput = (
+  cmd: string,
+  removeFirstN: number,
+) => (removeFirstN === 0 ? cmd : `${cmd} | tail -n +${removeFirstN + 1}`);

package/src/deploy/cloudSql/utils.ts

@@ -0,0 +1,26 @@
+import type { Config } from "../..";
+import type { StringOrBashExpression } from "../../bash/BashExpression";
+import { joinBashExpressions } from "../../bash/BashExpression";
+import type {
+  DeployConfigCloudRunCloudSql,
+  DeployConfigKubernetesValuesCloudSQLUnmanaged,
+} from "../types";
+
+export const getFullDbName = (
+  cloudSqlConfig:
+    | DeployConfigCloudRunCloudSql
+    | DeployConfigKubernetesValuesCloudSQLUnmanaged,
+  fullConfig: Config<never>,
+  environmentSlugPrefix: StringOrBashExpression,
+  componentName: string,
+) => {
+  return joinBashExpressions(
+    [
+      cloudSqlConfig.dbNamePrefix ??
+        `${fullConfig.customerName}-${fullConfig.appName}`,
+      environmentSlugPrefix,
+      cloudSqlConfig.dbBaseName ?? componentName,
+    ].flatMap((part) => (part ? [part] : [])),
+    "-",
+  );
+};

package/src/deploy/custom/deployJob.ts

@@ -1,23 +1,48 @@
-import { merge } from "lodash";
-import { Context } from "../../types/context";
-import { CatladderJob } from "../../types/jobs";
-import { getBaseDeploymentJob } from "../base";
+import { getYarnInstall } from "../../build/node/yarn";
+import { getRunnerImage } from "../../runner";
+import type { ComponentContext } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
+import { createDeployementJobs } from "../base";
+import {
+  getDependencyTrackDeleteScript,
+  getDependencyTrackUploadScript,
+} from "../sbom";
 import { isOfDeployType } from "../types";
 
-export const createCustomDeployJobs = (context: Context): CatladderJob[] => {
-  const deployConfig = context.componentConfig.deploy;
-  if (deployConfig === false) {
-    return [];
-  }
+export const createCustomDeployJobs = (
+  context: ComponentContext,
+): CatladderJob[] => {
+  const deployConfig = context.deploy?.config;
+
   if (!isOfDeployType(deployConfig, "custom")) {
     // should not happen
     throw new Error("deploy config is not custom");
   }
-  const baseDeploymentJob = getBaseDeploymentJob(context);
-
-  return [
-    merge({}, baseDeploymentJob, {
-      script: [`cd ${context.componentConfig.dir}`, ...deployConfig.script],
-    }),
-  ];
+  // FIXME: custom deploy currently assumes yarn-based project
+  const yarnInstall = getYarnInstall(context, {
+    noCustomPostInstall: true,
+  });
+  return createDeployementJobs(context, {
+    deploy: {
+      image: deployConfig.jobImage ?? getRunnerImage("jobs-default"),
+      cache: deployConfig.jobCache ?? [],
+      script: [
+        `cd ${context.build.dir}`,
+        ...(deployConfig.requiresYarnInstall ? yarnInstall : []),
+        ...deployConfig.script,
+        ...getDependencyTrackUploadScript(context),
+      ],
+      variables: {},
+    },
+    stop: deployConfig.stopScript
+      ? {
+          image: deployConfig.jobImage ?? getRunnerImage("jobs-default"),
+          script: [
+            ...deployConfig.stopScript,
+            ...getDependencyTrackDeleteScript(context),
+          ],
+          variables: {},
+        }
+      : undefined,
+  });
 };

package/src/deploy/custom/index.ts

@@ -1 +1,9 @@
-export * from "./deployJob";
+import type { DeployConfigCustom, DeployTypeDefinition } from "..";
+import { createCustomDeployJobs } from "./deployJob";
+
+export const CUSTOM_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigCustom> = {
+  jobs: createCustomDeployJobs,
+  defaults: () => ({}),
+  additionalSecretKeys: () => [],
+  getAdditionalEnvVars: () => ({}),
+};

package/src/deploy/dockerTag/deployJob.ts

@@ -0,0 +1,29 @@
+import { getDockerJobBaseProps, gitlabDockerLogin } from "../../build/docker";
+
+import type { ComponentContext } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
+import { createDeployementJobs } from "../base";
+import { isOfDeployType } from "../types";
+
+export const createDockerTagDeployJobs = (
+  context: ComponentContext,
+): CatladderJob[] => {
+  const deployConfig = context.deploy?.config;
+  if (!isOfDeployType(deployConfig, "dockerTag")) {
+    // should not happen
+    throw new Error("deploy config is not dockerTag");
+  }
+  const tag = deployConfig.tag;
+  return createDeployementJobs(context, {
+    deploy: {
+      ...getDockerJobBaseProps(),
+      script: [
+        ...gitlabDockerLogin(context),
+        `docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG`,
+        `docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_IMAGE:${tag}`,
+        `docker push $DOCKER_IMAGE:${tag}`,
+        `echo "pushed as $DOCKER_IMAGE:${tag}"`,
+      ],
+    },
+  });
+};

package/src/deploy/dockerTag/index.ts

@@ -0,0 +1,10 @@
+import type { DeployConfigDockerTag, DeployTypeDefinition } from "..";
+import { createDockerTagDeployJobs } from "./deployJob";
+
+export const DOCKER_TAG_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigDockerTag> =
+  {
+    jobs: createDockerTagDeployJobs,
+    defaults: () => ({}),
+    additionalSecretKeys: () => [],
+    getAdditionalEnvVars: () => ({}),
+  };

package/src/deploy/index.ts

@@ -1,25 +1,40 @@
-import { Context } from "../types/context";
-import { CatladderJob } from "../types/jobs";
-import { createCustomDeployJobs } from "./custom";
-import { createKubernetesDeployJobs } from "./kubernetes";
-import { DeployConfig } from "./types";
+import type { BuildConfig, SecretEnvVar } from "..";
+import type { BashExpression } from "../bash/BashExpression";
+import type { ComponentContext } from "../types/context";
+import type { EnvironmentContext } from "../types/environmentContext";
+import type { CatladderJob } from "../types/jobs";
+import type { PartialDeep } from "../types/utils";
+import { GCLOUD_RUN_DEPLOY_TYPE } from "./cloudRun";
+import { CUSTOM_DEPLOY_TYPE } from "./custom";
+import { DOCKER_TAG_DEPLOY_TYPE } from "./dockerTag";
+import { KUBERNETES_DEPLOY_TYPE } from "./kubernetes";
+import type {
+  DeployConfig,
+  DeployConfigGeneric,
+  DeployConfigType,
+} from "./types";
+export * from "./cloudRun";
 export * from "./kubernetes";
 export * from "./types";
 export * from "./utils";
+
+export type DeployTypeDefinition<D extends DeployConfig> = {
+  jobs: (context: ComponentContext) => CatladderJob[];
+  defaults: (envContext: EnvironmentContext<BuildConfig, D>) => PartialDeep<D>;
+  additionalSecretKeys: (
+    envContext: EnvironmentContext<BuildConfig, D>,
+  ) => SecretEnvVar[];
+  getAdditionalEnvVars: (
+    envContext: EnvironmentContext<BuildConfig, D>,
+  ) => Record<string, string | BashExpression | undefined | null>;
+};
 export type DeployTypes = {
-  [type in DeployConfig["type"]]: {
-    jobs: (context: Context) => CatladderJob[];
-    defaults: () => Partial<Extract<DeployConfig, { type: type }>>;
-  };
+  [T in DeployConfigType]: DeployTypeDefinition<DeployConfigGeneric<T>>;
 };
 
 export const DEPLOY_TYPES: DeployTypes = {
-  kubernetes: {
-    jobs: createKubernetesDeployJobs,
-    defaults: () => ({}),
-  },
-  custom: {
-    jobs: createCustomDeployJobs,
-    defaults: () => ({}),
-  },
+  kubernetes: KUBERNETES_DEPLOY_TYPE,
+  custom: CUSTOM_DEPLOY_TYPE,
+  dockerTag: DOCKER_TAG_DEPLOY_TYPE,
+  "google-cloudrun": GCLOUD_RUN_DEPLOY_TYPE,
 };

package/src/deploy/kubernetes/additionalSecretKeys.ts

@@ -0,0 +1,25 @@
+import type { BuildConfig } from "../../build";
+import type { EnvironmentContext } from "../../types/environmentContext";
+import type { DeployConfigKubernetes } from "../types";
+
+export const additionalKubernetesSecretKeys = ({
+  deployConfigRaw,
+}: EnvironmentContext<BuildConfig, DeployConfigKubernetes>) => {
+  if (!deployConfigRaw) {
+    return [];
+  }
+  const keys = [];
+  if (deployConfigRaw.values?.mongodb?.enabled) {
+    keys.push("MONGODB_ROOT_PASSWORD");
+    if (deployConfigRaw.values.mongodb.architecture === "replicaset") {
+      keys.push("MONGODB_REPLICASET_KEY");
+    }
+  }
+
+  if (deployConfigRaw.values?.cloudsql?.enabled) {
+    keys.push("POSTGRESQL_PASSWORD");
+    keys.push("cloudsqlProxyCredentials");
+  }
+
+  return keys.map((key) => ({ key }));
+};

package/src/deploy/kubernetes/cloudSql/index.ts

@@ -0,0 +1,76 @@
+import type { StringOrBashExpression } from "../../../bash/BashExpression";
+import { getSecretVarNameForContext } from "../../../context";
+import type { ComponentContext } from "../../../types";
+import { getFullDbName } from "../../cloudSql/utils";
+import { isOfDeployType } from "../../types";
+
+export const hasKubernetesCloudSQL = (context: ComponentContext) => {
+  const deployConfig = context.deploy?.config;
+
+  if (isOfDeployType(deployConfig, "kubernetes")) {
+    return deployConfig.values?.cloudsql?.enabled;
+  }
+  return false;
+};
+
+type CloudSqlValues = {
+  enabled: boolean;
+  proxyCredentials: string;
+
+  instanceConnectionName: string;
+  fullDbName: StringOrBashExpression;
+  dbUser: string;
+};
+export const createKubernetesCloudsqlBaseValues = (
+  context: ComponentContext,
+): {
+  cloudsql: CloudSqlValues;
+} => {
+  const deployConfig = context.deploy?.config;
+  if (!isOfDeployType(deployConfig, "kubernetes")) {
+    throw new Error("cannot get cloud sql config");
+  }
+
+  const config = deployConfig.values?.cloudsql;
+
+  if (!config) {
+    throw new Error("cannot get cloud sql config");
+  }
+
+  const proxyCredentials = `$${getSecretVarNameForContext(
+    context,
+    "cloudsqlProxyCredentials",
+  )}`;
+  if (config?.type !== "unmanaged") {
+    const instanceConnectionName = `${config.projectId ?? "skynet-164509"}:${
+      config.region ?? "europe-west6"
+    }:${config.instanceId ?? context.environment.envVars.KUBE_NAMESPACE}`;
+
+    return {
+      cloudsql: {
+        enabled: config.enabled,
+        dbUser: "postgres",
+        instanceConnectionName,
+        proxyCredentials,
+        fullDbName: context.environment.envVars.KUBE_APP_NAME ?? "",
+      },
+    };
+  } else if (config.type === "unmanaged") {
+    return {
+      cloudsql: {
+        enabled: config.enabled,
+        dbUser: config.dbUser ?? "postgres",
+        instanceConnectionName: config.instanceConnectionName,
+        proxyCredentials,
+        fullDbName: getFullDbName(
+          config,
+          context.fullConfig,
+          context.environment.slugPrefix,
+          context.name,
+        ),
+      },
+    };
+  } else {
+    throw new Error("unknonw type");
+  }
+};

package/src/deploy/kubernetes/deployJob.ts

@@ -1,156 +1,102 @@
-import { dump } from "js-yaml";
-import { merge } from "lodash";
-import { DeployConfigKubernetesValues } from "..";
-import { getSecretVarNameForContext } from "../..";
+import { getSecretVarNameForContext } from "../../context/getEnvironmentVariables";
 import { getRunnerImage } from "../../runner";
-import { Context } from "../../types/context";
-import { CatladderJob } from "../../types/jobs";
-import { mergeWithMergingArrays } from "../../utils";
-import { getBaseDeploymentJob, getBaseDeploymentStopJob } from "../base";
+import type { ComponentContext } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
+import { createDeployementJobs } from "../base";
+import {
+  getDependencyTrackDeleteScript,
+  getDependencyTrackUploadScript,
+} from "../sbom";
 import { isOfDeployType } from "../types";
-import { createCloudsqlBaseConfig } from "./cloudsql";
-import { createMongodbBaseConfig } from "./mongodb";
-import { processSecretsAsFiles } from "./processSecretsAsFiles";
+import { createKubeValues } from "./kubeValues";
 
+import { writeBashYamlToFileScript } from "../../bash/bashYaml";
+import { collapseableSection } from "../../utils/gitlab";
+
+const ALL_VALUES_FILE = "__all_values.yml";
 export const createKubernetesDeployJobs = (
-  context: Context
+  context: ComponentContext,
 ): CatladderJob[] => {
-  const deployConfig = context.componentConfig.deploy;
-  if (deployConfig === false) {
-    return [];
-  }
+  const deployConfig = context.deploy?.config;
   if (!isOfDeployType(deployConfig, "kubernetes")) {
     // should not happen
     throw new Error("deploy config is not kubernetes");
   }
 
-  const allEnvVars = context.environment.envVars;
-  /**
-   * separate by secrets and public.
-   * we evalulate the actual values later, but want to store the secrets in kubernetes secrets
-   */
-  const env = Object.entries(allEnvVars).reduce<{
-    secret: Record<string, string>;
-    public: Record<string, string>;
-  }>(
-    (acc, [key, value]) => {
-      if (String(value)?.startsWith("$CL_")) {
-        acc.secret = {
-          ...acc.secret,
-          [key]: value,
-        };
-        return acc;
-      }
-      acc.public = {
-        ...acc.public,
-        [key]: value,
-      };
-      return acc;
-    },
-    {
-      secret: {},
-      public: {},
-    }
-  );
-
-  const defaultAppConfig: DeployConfigKubernetesValues["application"] = {
-    host: context.environment.host,
-    command: context.componentConfig.build.startCommand,
-    livenessProbe: {
-      httpGet: {
-        path: deployConfig.values?.application?.healthRoute ?? "__health",
-      },
-    },
-    readinessProbe: {
-      httpGet: {
-        path: deployConfig.values?.application?.healthRoute ?? "__health",
-      },
-    },
-    startupProbe: {
-      httpGet: {
-        path: deployConfig.values?.application?.healthRoute ?? "__health",
-      },
-    },
-  };
-
-  const defaultKubeValues = {
-    application: defaultAppConfig,
-
-    env: env,
-    ...(deployConfig.values?.cloudsql?.enabled
-      ? createCloudsqlBaseConfig(context)
-      : {}),
-    ...(deployConfig.values?.mongodb?.enabled
-      ? createMongodbBaseConfig(context)
-      : {}),
-  };
-
-  const kubeValues = processSecretsAsFiles(
-    mergeWithMergingArrays(defaultKubeValues, deployConfig.values)
-  );
-
-  const kubernetesEnvironment = {
-    namespace: context.environment.envVars.KUBE_NAMESPACE,
-  };
-  const shared = {
+  const shared: Pick<CatladderJob, "image" | "variables" | "artifacts"> = {
     image: getRunnerImage("kubernetes"),
+    ...(deployConfig.debug
+      ? {
+          artifacts: {
+            paths: [
+              ALL_VALUES_FILE, // debug
+            ],
+            when: "always",
+          },
+        }
+      : {}),
     variables: {
       ...context.environment.envVars,
+      RELEASE_NAME: context.environment.fullName,
       HELM_EXPERIMENTAL_OCI: "1",
-      IMAGE_PULL_SECRET: `gitlab-registry-${context.componentName}`,
-      KUBE_VALUES: dump(kubeValues, {
-        lineWidth: -1,
-        quotingType: "'",
-        forceQuotes: true,
-      }),
-      HELM_GITLAB_CHART_NAME: "the-panter-chart",
+      KUBE_DOCKER_IMAGE_PULL_SECRET: `gitlab-registry-${context.name}`,
+      HELM_GITLAB_CHART_NAME:
+        deployConfig.chartName ?? "/helm-charts/the-panter-chart",
       HELM_ARGS: [
         ...(deployConfig.debug ? ["--debug"] : []),
         ...(deployConfig.additionalHelmArgs ?? []),
       ].join(" "),
-      COMPONENT_NAME: context.componentName,
-      BUILD_ID: context.commitInfo?.buildId,
-      // TODO: unify with docker build stage
-      IMAGE_NAME: context.environment.shortName + "/" + context.componentName,
-      IMAGE_TAG: "$CI_COMMIT_SHA",
+      COMPONENT_NAME: context.name,
+      /** @deprecated */
+      BUILD_ID: context.environment.envVars.BUILD_INFO_BUILD_ID,
     },
   };
 
-  const baseDeploymentJob = getBaseDeploymentJob(context);
-  const baseStopJob = getBaseDeploymentStopJob(context);
   const clusterName = `kube-${context.environment.fullName}`;
   const connectContext = [
     `kubectl config set-cluster "${clusterName}" --server="$${getSecretVarNameForContext(
       context,
-      "KUBE_URL"
+      "KUBE_URL",
     )}" --certificate-authority <(echo $${getSecretVarNameForContext(
       context,
-      "KUBE_CA_PEM"
+      "KUBE_CA_PEM",
     )} | base64 -d) --embed-certs=true`,
     `kubectl config set-credentials "${clusterName}" --token="$${getSecretVarNameForContext(
       context,
-      "KUBE_TOKEN"
+      "KUBE_TOKEN",
     )}"`,
     `kubectl config set-context "${clusterName}" --cluster="${clusterName}" --user="${clusterName}" --namespace="${context.environment.envVars.KUBE_NAMESPACE}"`,
     `kubectl config use-context "${clusterName}"`,
   ];
-  return [
-    merge({}, baseDeploymentJob, shared, {
+
+  return createDeployementJobs(context, {
+    deploy: {
+      ...shared,
       script: [
         ...connectContext,
+        ...collapseableSection(
+          "writeallvalues",
+          "Write " + ALL_VALUES_FILE + " for helm deployment",
+        )(
+          writeBashYamlToFileScript(createKubeValues(context), ALL_VALUES_FILE),
+        ),
         "kubernetesCreateSecret",
         "kubernetesDeploy",
+        ...getDependencyTrackUploadScript(context),
         "echo deployment successful 😻",
       ],
-      environment: {
-        kubernetes: kubernetesEnvironment,
-      },
-    }),
-    merge({}, baseStopJob, shared, {
-      script: [...connectContext, "kubernetesDelete"],
-      environment: {
-        kubernetes: kubernetesEnvironment,
-      },
-    }),
-  ];
+    },
+    stop: {
+      ...shared,
+      script: [
+        ...connectContext,
+        "kubernetesDelete",
+        ...getDependencyTrackDeleteScript(context),
+      ],
+    },
+    rollback: {
+      ...shared,
+      script: [...connectContext, "kubernetesRollback"],
+    },
+  });
 };