@catladder/pipeline 0.0.0-node16-ddfae617 → 0.0.0-refactor-env-context-9e652b63

package/dist/deploy/cloudRun/deployJob.js

@@ -0,0 +1,139 @@
+"use strict";
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createGoogleCloudRunDeployJobs = void 0;
+
+var js_yaml_1 = require("js-yaml");
+
+var lodash_1 = require("lodash");
+
+var _1 = require(".");
+
+var docker_1 = require("../../build/docker");
+
+var getLabels_1 = require("../../context/getLabels");
+
+var runner_1 = require("../../runner");
+
+var base_1 = require("../base");
+
+var types_1 = require("../types");
+
+var gcloudServiceAccountLoginCommands_1 = require("./utils/gcloudServiceAccountLoginCommands");
+
+var createGoogleCloudRunDeployJobs = function (context) {
+  var deployConfig = context.componentConfig.deploy;
+
+  if (deployConfig === false) {
+    return [];
+  }
+
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun", "google-cloudrun-job")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+
+  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
+  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
+  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
+  var gcloudImageName = "".concat(dockerUrl, "/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG");
+
+  var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
+
+  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
+  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
+    var _b = __read(_a, 2),
+        key = _b[0],
+        value = _b[1];
+
+    return "".concat(key, "=").concat(value);
+  }).join(",");
+  var commonArgs = "--project ".concat(deployConfig.projectId, " --region=").concat(deployConfig.region);
+
+  var getDeployCommand = function () {
+    var _a;
+
+    var name = context.environment.fullName.toLowerCase();
+    var command = (_a = deployConfig.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand;
+    var commandArg = command ? "--command=\"".concat(command.split(" ").join(","), "\"") : "";
+    var commonDeployArgs = "".concat(commandArg, " --image ").concat(gcloudImageName, " ").concat(commonArgs, " --env-vars-file=____envvars.yaml --labels ").concat(labelsString);
+
+    if (deployConfig.type === "google-cloudrun") {
+      return "gcloud run deploy ".concat(name, " ").concat(commonDeployArgs, " --allow-unauthenticated");
+    }
+
+    if (deployConfig.type === "google-cloudrun-job") {
+      return "gcloud beta run jobs create ".concat(name, " ").concat(commonDeployArgs);
+    }
+  };
+
+  var getStopCommand = function () {
+    var name = context.environment.fullName.toLowerCase();
+    var commonStopArgs = "".concat(commonArgs, " --quiet");
+
+    if (deployConfig.type === "google-cloudrun") {
+      return "gcloud run services delete ".concat(name, " ").concat(commonStopArgs);
+    }
+
+    if (deployConfig.type === "google-cloudrun-job") {
+      return "gcloud beta run jobs delete ".concat(name, " ").concat(commonStopArgs);
+    }
+  };
+
+  var cloudRunDeploy = ["echo \"$ENV_VARS\" > ____envvars.yaml", getDeployCommand(), "docker image rm ".concat(gcloudImageName)];
+  var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
+  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
+    artifacts: {
+      paths: ["____envvars.yaml"]
+    },
+    variables: {
+      ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
+        lineWidth: -1,
+        quotingType: "'",
+        forceQuotes: true
+      })
+    },
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeploy), false)
+  }), (0, lodash_1.merge)({}, baseStopJob, {
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), [getStopCommand()], false)
+  })];
+};
+
+exports.createGoogleCloudRunDeployJobs = createGoogleCloudRunDeployJobs;

package/dist/deploy/cloudRun/index.d.ts

@@ -0,0 +1,9 @@
+import type { DeployTypeDefinition } from "..";
+export declare const GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
+export declare const GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
+export declare const GCLOUD_RUN_DEPLOY_TYPE: DeployTypeDefinition<"google-cloudrun">;
+export declare const GCLOUD_RUN_JOB_DEPLOY_TYPE: DeployTypeDefinition<"google-cloudrun-job">;
+export declare const GCLOUD_RUN_DEPLOY_TYPES: {
+  "google-cloudrun": DeployTypeDefinition<"google-cloudrun">;
+  "google-cloudrun-job": DeployTypeDefinition<"google-cloudrun-job">;
+};

package/dist/deploy/cloudRun/index.js

@@ -0,0 +1,56 @@
+"use strict";
+
+exports.__esModule = true;
+exports.GCLOUD_RUN_DEPLOY_TYPES = exports.GCLOUD_RUN_JOB_DEPLOY_TYPE = exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+
+var context_1 = require("../../context");
+
+var deployJob_1 = require("./deployJob");
+
+exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
+exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
+exports.GCLOUD_RUN_DEPLOY_TYPE = {
+  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
+  defaults: function () {
+    return {};
+  },
+  additionalSecretKeys: function () {
+    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
+  },
+  getAdditionalEnvVars: function (_a) {
+    var fullName = _a.fullName,
+        env = _a.env,
+        componentName = _a.componentName;
+    var HOST_CANONICAL = fullName.toLowerCase() + "-" + process.env[(0, context_1.getSecretVarName)(env, componentName, exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)];
+    return {
+      HOST_CANONICAL: HOST_CANONICAL
+    };
+  }
+};
+exports.GCLOUD_RUN_JOB_DEPLOY_TYPE = {
+  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
+  defaults: function () {
+    return {};
+  },
+  additionalSecretKeys: function () {
+    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
+  },
+  getAdditionalEnvVars: function (_a) {
+    var deployConfigRaw = _a.deployConfigRaw,
+        fullName = _a.fullName;
+
+    if (!deployConfigRaw) {
+      return {};
+    }
+
+    var jobName = fullName.toLowerCase();
+    var CLOUD_RUN_JOB_TRIGGER_URL = "https://".concat(deployConfigRaw.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfigRaw.projectId, "/jobs/").concat(jobName, ":run");
+    return {
+      CLOUD_RUN_JOB_TRIGGER_URL: CLOUD_RUN_JOB_TRIGGER_URL
+    };
+  }
+};
+exports.GCLOUD_RUN_DEPLOY_TYPES = {
+  "google-cloudrun": exports.GCLOUD_RUN_DEPLOY_TYPE,
+  "google-cloudrun-job": exports.GCLOUD_RUN_JOB_DEPLOY_TYPE
+};

package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts

@@ -0,0 +1,2 @@
+import type { Context } from "../../../types";
+export declare const gcloudServiceAccountLoginCommands: (context: Context) => string[];

package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js

@@ -0,0 +1,14 @@
+"use strict";
+
+exports.__esModule = true;
+exports.gcloudServiceAccountLoginCommands = void 0;
+
+var __1 = require("..");
+
+var context_1 = require("../../../context");
+
+var gcloudServiceAccountLoginCommands = function (context) {
+  return ["echo $".concat((0, context_1.getSecretVarNameForContext)(context, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY), " > ./____keyfile.json\n          "), "gcloud auth activate-service-account --key-file=\"./____keyfile.json\""];
+};
+
+exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;

package/dist/deploy/cloudSql/index.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from "../../types";
+export declare const hasCloudSQL: (context: Context) => boolean | undefined;
+export declare const getCloudSQLConfig: (context: Context) => {
+  enabled: boolean;
+  instanceId?: string | undefined;
+  projectId?: string | undefined;
+  region?: string | undefined;
+} | undefined;

package/dist/deploy/cloudSql/index.js

@@ -0,0 +1,30 @@
+"use strict";
+
+exports.__esModule = true;
+exports.getCloudSQLConfig = exports.hasCloudSQL = void 0;
+
+var types_1 = require("../types");
+
+var hasCloudSQL = function (context) {
+  var _a, _b;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
+  }
+
+  return false;
+};
+
+exports.hasCloudSQL = hasCloudSQL;
+
+var getCloudSQLConfig = function (context) {
+  var _a;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
+  }
+
+  throw new Error("cannot get cloud sql config");
+};
+
+exports.getCloudSQLConfig = getCloudSQLConfig;

package/dist/deploy/custom/deployJob.d.ts

@@ -1,3 +1,3 @@
-import { Context } from "../../types/context";
-import { CatladderJob } from "../../types/jobs";
+import type { Context } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
 export declare const createCustomDeployJobs: (context: Context) => CatladderJob[];

package/dist/deploy/custom/deployJob.js

@@ -40,6 +40,8 @@ exports.createCustomDeployJobs = void 0;
 
 var lodash_1 = require("lodash");
 
+var yarn_1 = require("../../build/node/yarn");
+
 var base_1 = require("../base");
 
 var types_1 = require("../types");
@@ -57,8 +59,9 @@ var createCustomDeployJobs = function (context) {
   }
 
   var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
+  var yarnInstall = (0, yarn_1.getYarnInstall)(context);
   return [(0, lodash_1.merge)({}, baseDeploymentJob, {
-    script: __spreadArray(["cd ".concat(context.componentConfig.dir)], __read(deployConfig.script), false)
+    script: __spreadArray(__spreadArray(["cd ".concat(context.componentConfig.dir)], __read(deployConfig.requiresYarnInstall ? yarnInstall : []), false), __read(deployConfig.script), false)
   })];
 };
 

package/dist/deploy/custom/index.d.ts

@@ -1 +1,2 @@
-export * from "./deployJob";
+import type { DeployTypeDefinition } from "..";
+export declare const CUSTOM_DEPLOY_TYPE: DeployTypeDefinition<"custom">;

package/dist/deploy/custom/index.js

@@ -1,22 +1,19 @@
 "use strict";
 
-var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
-  if (k2 === undefined) k2 = k;
-  Object.defineProperty(o, k2, {
-    enumerable: true,
-    get: function () {
-      return m[k];
-    }
-  });
-} : function (o, m, k, k2) {
-  if (k2 === undefined) k2 = k;
-  o[k2] = m[k];
-});
-
-var __exportStar = this && this.__exportStar || function (m, exports) {
-  for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-
 exports.__esModule = true;
+exports.CUSTOM_DEPLOY_TYPE = void 0;
+
+var deployJob_1 = require("./deployJob");
 
-__exportStar(require("./deployJob"), exports);
+exports.CUSTOM_DEPLOY_TYPE = {
+  jobs: deployJob_1.createCustomDeployJobs,
+  defaults: function () {
+    return {};
+  },
+  additionalSecretKeys: function () {
+    return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
+  }
+};

package/dist/deploy/dockerTag/deployJob.d.ts

@@ -0,0 +1,3 @@
+import type { Context } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
+export declare const createDockerTagDeployJobs: (context: Context) => CatladderJob[];

package/dist/deploy/dockerTag/deployJob.js

@@ -0,0 +1,33 @@
+"use strict";
+
+exports.__esModule = true;
+exports.createDockerTagDeployJobs = void 0;
+
+var lodash_1 = require("lodash");
+
+var docker_1 = require("../../build/docker");
+
+var base_1 = require("../base");
+
+var types_1 = require("../types");
+
+var createDockerTagDeployJobs = function (context) {
+  var deployConfig = context.componentConfig.deploy;
+
+  if (deployConfig === false) {
+    return [];
+  }
+
+  if (!(0, types_1.isOfDeployType)(deployConfig, "dockerTag")) {
+    // should not happen
+    throw new Error("deploy config is not dockerTag");
+  }
+
+  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
+  var tag = deployConfig.tag;
+  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
+    script: [docker_1.gitlabDockerLogin, "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_IMAGE:".concat(tag), "docker push $DOCKER_IMAGE:".concat(tag), "echo \"pushed as $DOCKER_IMAGE:".concat(tag, "\"")]
+  })];
+};
+
+exports.createDockerTagDeployJobs = createDockerTagDeployJobs;

package/dist/deploy/dockerTag/index.d.ts

@@ -0,0 +1,2 @@
+import type { DeployTypeDefinition } from "..";
+export declare const DOCKER_TAG_DEPLOY_TYPE: DeployTypeDefinition<"dockerTag">;

package/dist/deploy/dockerTag/index.js

@@ -0,0 +1,19 @@
+"use strict";
+
+exports.__esModule = true;
+exports.DOCKER_TAG_DEPLOY_TYPE = void 0;
+
+var deployJob_1 = require("./deployJob");
+
+exports.DOCKER_TAG_DEPLOY_TYPE = {
+  jobs: deployJob_1.createDockerTagDeployJobs,
+  defaults: function () {
+    return {};
+  },
+  additionalSecretKeys: function () {
+    return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
+  }
+};

package/dist/deploy/index.d.ts

@@ -1,13 +1,17 @@
-import { Context } from "../types/context";
-import { CatladderJob } from "../types/jobs";
-import { DeployConfig } from "./types";
+import type { Context } from "../types/context";
+import type { EnvironmentContext } from "../types/environmentContext";
+import type { CatladderJob } from "../types/jobs";
+import type { DeployConfigGeneric, DeployConfigType } from "./types";
+export * from "./cloudRun";
+export * from "./cloudSql";
 export * from "./kubernetes";
 export * from "./types";
 export * from "./utils";
-export declare type DeployTypes = { [type in DeployConfig["type"]]: {
+export declare type DeployTypeDefinition<T extends DeployConfigType> = {
   jobs: (context: Context) => CatladderJob[];
-  defaults: () => Partial<Extract<DeployConfig, {
-    type: type;
-  }>>;
-} };
+  defaults: (envVarContext: EnvironmentContext<any, T>) => Partial<DeployConfigGeneric<T>>;
+  additionalSecretKeys: (envVarContext: EnvironmentContext<any, T>) => string[];
+  getAdditionalEnvVars: (envVarContext: EnvironmentContext<any, T>) => Record<string, string | undefined | null>;
+};
+export declare type DeployTypes = { [T in DeployConfigType]: DeployTypeDefinition<T> };
 export declare const DEPLOY_TYPES: DeployTypes;

package/dist/deploy/index.js

@@ -1,5 +1,19 @@
 "use strict";
 
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
 var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
   if (k2 === undefined) k2 = k;
   Object.defineProperty(o, k2, {
@@ -20,27 +34,26 @@ var __exportStar = this && this.__exportStar || function (m, exports) {
 exports.__esModule = true;
 exports.DEPLOY_TYPES = void 0;
 
+var cloudRun_1 = require("./cloudRun");
+
 var custom_1 = require("./custom");
 
+var dockerTag_1 = require("./dockerTag");
+
 var kubernetes_1 = require("./kubernetes");
 
+__exportStar(require("./cloudRun"), exports);
+
+__exportStar(require("./cloudSql"), exports);
+
 __exportStar(require("./kubernetes"), exports);
 
 __exportStar(require("./types"), exports);
 
 __exportStar(require("./utils"), exports);
 
-exports.DEPLOY_TYPES = {
-  kubernetes: {
-    jobs: kubernetes_1.createKubernetesDeployJobs,
-    defaults: function () {
-      return {};
-    }
-  },
-  custom: {
-    jobs: custom_1.createCustomDeployJobs,
-    defaults: function () {
-      return {};
-    }
-  }
-};
+exports.DEPLOY_TYPES = __assign({
+  kubernetes: kubernetes_1.KUBERNETES_DEPLOY_TYPE,
+  custom: custom_1.CUSTOM_DEPLOY_TYPE,
+  dockerTag: dockerTag_1.DOCKER_TAG_DEPLOY_TYPE
+}, cloudRun_1.GCLOUD_RUN_DEPLOY_TYPES);

package/dist/deploy/kubernetes/additionalSecretKeys.d.ts

@@ -0,0 +1,4 @@
+import type { EnvironmentContext } from "../../types/environmentContext";
+export declare const additionalKubernetesSecretKeys: ({
+  deployConfigRaw
+}: EnvironmentContext<any, "kubernetes">) => string[];

package/dist/deploy/kubernetes/additionalSecretKeys.js

@@ -0,0 +1,33 @@
+"use strict";
+
+exports.__esModule = true;
+exports.additionalKubernetesSecretKeys = void 0;
+
+var additionalKubernetesSecretKeys = function (_a) {
+  var _b, _c, _d, _e;
+
+  var deployConfigRaw = _a.deployConfigRaw;
+
+  if (!deployConfigRaw) {
+    return [];
+  }
+
+  var keys = [];
+
+  if ((_c = (_b = deployConfigRaw.values) === null || _b === void 0 ? void 0 : _b.mongodb) === null || _c === void 0 ? void 0 : _c.enabled) {
+    keys.push("MONGODB_ROOT_PASSWORD");
+
+    if (deployConfigRaw.values.mongodb.architecture === "replicaset") {
+      keys.push("MONGODB_REPLICASET_KEY");
+    }
+  }
+
+  if ((_e = (_d = deployConfigRaw.values) === null || _d === void 0 ? void 0 : _d.cloudsql) === null || _e === void 0 ? void 0 : _e.enabled) {
+    keys.push("POSTGRESQL_PASSWORD");
+    keys.push("cloudsqlProxyCredentials");
+  }
+
+  return keys;
+};
+
+exports.additionalKubernetesSecretKeys = additionalKubernetesSecretKeys;

package/dist/deploy/kubernetes/cloudsql.d.ts

@@ -1,4 +1,4 @@
-import { Context } from "../..";
+import type { Context } from "../..";
 export declare const createCloudsqlBaseConfig: (context: Context) => {
   cloudsql: {
     proxyCredentials: string;

package/dist/deploy/kubernetes/deployJob.d.ts

@@ -1,3 +1,3 @@
-import { Context } from "../../types/context";
-import { CatladderJob } from "../../types/jobs";
+import type { Context } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
 export declare const createKubernetesDeployJobs: (context: Context) => CatladderJob[];

package/dist/deploy/kubernetes/deployJob.js

@@ -60,20 +60,14 @@ var __1 = require("../..");
 
 var runner_1 = require("../../runner");
 
-var utils_1 = require("../../utils");
-
 var base_1 = require("../base");
 
 var types_1 = require("../types");
 
-var cloudsql_1 = require("./cloudsql");
-
-var mongodb_1 = require("./mongodb");
-
-var processSecretsAsFiles_1 = require("./processSecretsAsFiles");
+var kubeValues_1 = require("./kubeValues");
 
 var createKubernetesDeployJobs = function (context) {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
+  var _a, _b;
 
   var deployConfig = context.componentConfig.deploy;
 
@@ -86,82 +80,30 @@ var createKubernetesDeployJobs = function (context) {
     throw new Error("deploy config is not kubernetes");
   }
 
-  var allEnvVars = context.environment.envVars;
-  /**
-   * separate by secrets and public.
-   * we evalulate the actual values later, but want to store the secrets in kubernetes secrets
-   */
-
-  var env = Object.entries(allEnvVars).reduce(function (acc, _a) {
-    var _b, _c;
-
-    var _d;
-
-    var _e = __read(_a, 2),
-        key = _e[0],
-        value = _e[1];
-
-    if ((_d = String(value)) === null || _d === void 0 ? void 0 : _d.startsWith("$CL_")) {
-      acc.secret = __assign(__assign({}, acc.secret), (_b = {}, _b[key] = value, _b));
-      return acc;
-    }
-
-    acc.public = __assign(__assign({}, acc.public), (_c = {}, _c[key] = value, _c));
-    return acc;
-  }, {
-    secret: {},
-    public: {}
-  });
-  var defaultAppConfig = {
-    host: context.environment.host,
-    command: context.componentConfig.build.startCommand,
-    livenessProbe: {
-      httpGet: {
-        path: (_c = (_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.application) === null || _b === void 0 ? void 0 : _b.healthRoute) !== null && _c !== void 0 ? _c : "__health"
-      }
-    },
-    readinessProbe: {
-      httpGet: {
-        path: (_f = (_e = (_d = deployConfig.values) === null || _d === void 0 ? void 0 : _d.application) === null || _e === void 0 ? void 0 : _e.healthRoute) !== null && _f !== void 0 ? _f : "__health"
-      }
-    },
-    startupProbe: {
-      httpGet: {
-        path: (_j = (_h = (_g = deployConfig.values) === null || _g === void 0 ? void 0 : _g.application) === null || _h === void 0 ? void 0 : _h.healthRoute) !== null && _j !== void 0 ? _j : "__health"
-      }
-    }
-  };
-
-  var defaultKubeValues = __assign(__assign({
-    application: defaultAppConfig,
-    env: env
-  }, ((_l = (_k = deployConfig.values) === null || _k === void 0 ? void 0 : _k.cloudsql) === null || _l === void 0 ? void 0 : _l.enabled) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}), ((_o = (_m = deployConfig.values) === null || _m === void 0 ? void 0 : _m.mongodb) === null || _o === void 0 ? void 0 : _o.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
-
-  var kubeValues = (0, processSecretsAsFiles_1.processSecretsAsFiles)((0, utils_1.mergeWithMergingArrays)(defaultKubeValues, deployConfig.values));
+  var kubeValues = (0, kubeValues_1.createKubeValues)(context);
   var kubernetesEnvironment = {
     namespace: context.environment.envVars.KUBE_NAMESPACE
   };
   var shared = {
     image: (0, runner_1.getRunnerImage)("kubernetes"),
     variables: __assign(__assign({}, context.environment.envVars), {
+      RELEASE_NAME: context.environment.fullName,
       HELM_EXPERIMENTAL_OCI: "1",
-      IMAGE_PULL_SECRET: "gitlab-registry-".concat(context.componentName),
+      KUBE_DOCKER_IMAGE_PULL_SECRET: "gitlab-registry-".concat(context.componentName),
       KUBE_VALUES: (0, js_yaml_1.dump)(kubeValues, {
         lineWidth: -1,
         quotingType: "'",
         forceQuotes: true
       }),
       HELM_GITLAB_CHART_NAME: "the-panter-chart",
-      HELM_ARGS: __spreadArray(__spreadArray([], __read(deployConfig.debug ? ["--debug"] : []), false), __read((_p = deployConfig.additionalHelmArgs) !== null && _p !== void 0 ? _p : []), false).join(" "),
+      HELM_ARGS: __spreadArray(__spreadArray([], __read(deployConfig.debug ? ["--debug"] : []), false), __read((_a = deployConfig.additionalHelmArgs) !== null && _a !== void 0 ? _a : []), false).join(" "),
       COMPONENT_NAME: context.componentName,
-      BUILD_ID: (_q = context.commitInfo) === null || _q === void 0 ? void 0 : _q.buildId,
-      // TODO: unify with docker build stage
-      IMAGE_NAME: context.environment.shortName + "/" + context.componentName,
-      IMAGE_TAG: "$CI_COMMIT_SHA"
+      BUILD_ID: (_b = context.commitInfo) === null || _b === void 0 ? void 0 : _b.buildId
     })
   };
   var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
   var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
+  var baseRollbackJob = (0, base_1.getBaseRollbackJob)(context);
   var clusterName = "kube-".concat(context.environment.fullName);
   var connectContext = ["kubectl config set-cluster \"".concat(clusterName, "\" --server=\"$").concat((0, __1.getSecretVarNameForContext)(context, "KUBE_URL"), "\" --certificate-authority <(echo $").concat((0, __1.getSecretVarNameForContext)(context, "KUBE_CA_PEM"), " | base64 -d) --embed-certs=true"), "kubectl config set-credentials \"".concat(clusterName, "\" --token=\"$").concat((0, __1.getSecretVarNameForContext)(context, "KUBE_TOKEN"), "\""), "kubectl config set-context \"".concat(clusterName, "\" --cluster=\"").concat(clusterName, "\" --user=\"").concat(clusterName, "\" --namespace=\"").concat(context.environment.envVars.KUBE_NAMESPACE, "\""), "kubectl config use-context \"".concat(clusterName, "\"")];
   return [(0, lodash_1.merge)({}, baseDeploymentJob, shared, {
@@ -174,6 +116,11 @@ var createKubernetesDeployJobs = function (context) {
     environment: {
       kubernetes: kubernetesEnvironment
     }
+  }), (0, lodash_1.merge)({}, baseRollbackJob, shared, {
+    script: __spreadArray(__spreadArray([], __read(connectContext), false), ["kubernetesRollback"], false),
+    environment: {
+      kubernetes: kubernetesEnvironment
+    }
   })];
 };