@catladder/pipeline 0.0.0-refactore-catenv-command-validates-argument-78d05852 → 0.0.0-reference-database-url-1befbbee

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (639) hide show
  1. package/README.md +15 -1
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +37 -0
  5. package/dist/bash/bashEscape.js +119 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.js +4 -2
  18. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  19. package/dist/build/base/createAppBuildJob.js +18 -15
  20. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  21. package/dist/build/base/createArtifactsConfig.js +3 -1
  22. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  23. package/dist/build/base/createBuildJobDefinition.js +58 -0
  24. package/dist/build/base/index.d.ts +6 -4
  25. package/dist/build/base/index.js +17 -6
  26. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  27. package/dist/build/base/writeBuildInfo.js +4 -3
  28. package/dist/build/base/writeDotEnv.d.ts +3 -2
  29. package/dist/build/base/writeDotEnv.js +30 -6
  30. package/dist/build/cache/createJobCache.d.ts +7 -0
  31. package/dist/build/cache/createJobCache.js +115 -0
  32. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  34. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  35. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  36. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  37. package/dist/build/custom/buildJob.d.ts +2 -2
  38. package/dist/build/custom/buildJob.js +8 -66
  39. package/dist/build/custom/index.d.ts +2 -2
  40. package/dist/build/custom/index.js +3 -1
  41. package/dist/build/custom/testJob.d.ts +4 -4
  42. package/dist/build/custom/testJob.js +25 -20
  43. package/dist/build/docker.d.ts +37 -46
  44. package/dist/build/docker.js +65 -34
  45. package/dist/build/index.d.ts +14 -7
  46. package/dist/build/index.js +44 -17
  47. package/dist/build/node/buildJob.d.ts +8 -2
  48. package/dist/build/node/buildJob.js +39 -52
  49. package/dist/build/node/cache.d.ts +4 -5
  50. package/dist/build/node/cache.js +18 -24
  51. package/dist/build/node/constants.js +5 -3
  52. package/dist/build/node/index.d.ts +4 -4
  53. package/dist/build/node/index.js +3 -1
  54. package/dist/build/node/meteor.d.ts +2 -2
  55. package/dist/build/node/meteor.js +10 -12
  56. package/dist/build/node/testJob.d.ts +3 -2
  57. package/dist/build/node/testJob.js +29 -19
  58. package/dist/build/node/yarn.d.ts +4 -3
  59. package/dist/build/node/yarn.js +11 -12
  60. package/dist/build/rails/build.d.ts +2 -2
  61. package/dist/build/rails/build.js +13 -6
  62. package/dist/build/rails/index.d.ts +2 -2
  63. package/dist/build/rails/index.js +3 -1
  64. package/dist/build/rails/test.d.ts +2 -2
  65. package/dist/build/rails/test.js +30 -11
  66. package/dist/build/sbom.d.ts +2 -2
  67. package/dist/build/sbom.js +13 -7
  68. package/dist/build/types.d.ts +160 -47
  69. package/dist/build/types.js +10 -2
  70. package/dist/catladder-gitlab.js +129 -49
  71. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  72. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  73. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  74. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  75. package/dist/config/configruedEnvs.js +3 -1
  76. package/dist/config/index.js +13 -7
  77. package/dist/config/readConfig.d.ts +2 -2
  78. package/dist/config/readConfig.js +191 -40
  79. package/dist/constants.js +5 -3
  80. package/dist/context/createAllComponentsContext.d.ts +12 -0
  81. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  82. package/dist/context/createComponentContext.d.ts +11 -0
  83. package/dist/context/createComponentContext.js +262 -0
  84. package/dist/context/createWorkspaceContext.d.ts +16 -0
  85. package/dist/context/createWorkspaceContext.js +173 -0
  86. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  87. package/dist/context/getBuildInfoVariables.js +55 -0
  88. package/dist/context/getEnvConfig.js +21 -4
  89. package/dist/context/getEnvType.js +3 -1
  90. package/dist/context/getEnvironment.d.ts +3 -3
  91. package/dist/context/getEnvironment.js +11 -12
  92. package/dist/context/getEnvironmentContext.d.ts +7 -3
  93. package/dist/context/getEnvironmentContext.js +21 -11
  94. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  95. package/dist/context/getEnvironmentVariables.js +79 -53
  96. package/dist/context/getLabels.d.ts +2 -2
  97. package/dist/context/getLabels.js +9 -7
  98. package/dist/context/getReviewSlug.d.ts +4 -0
  99. package/dist/context/getReviewSlug.js +21 -0
  100. package/dist/context/index.d.ts +2 -4
  101. package/dist/context/index.js +15 -162
  102. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  103. package/dist/context/transformJobOnlyVars.js +4 -2
  104. package/dist/context/utils/envVars.d.ts +1 -1
  105. package/dist/context/utils/envVars.js +5 -2
  106. package/dist/defaults/index.js +3 -1
  107. package/dist/deploy/base/deploy.d.ts +3 -3
  108. package/dist/deploy/base/deploy.js +37 -21
  109. package/dist/deploy/base/index.d.ts +3 -5
  110. package/dist/deploy/base/index.js +3 -1
  111. package/dist/deploy/base/rollback.d.ts +3 -3
  112. package/dist/deploy/base/rollback.js +13 -9
  113. package/dist/deploy/base/stop.d.ts +3 -3
  114. package/dist/deploy/base/stop.js +16 -11
  115. package/dist/deploy/base/types.d.ts +1 -1
  116. package/dist/deploy/base/types.js +3 -1
  117. package/dist/deploy/base/variables.js +4 -2
  118. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +8 -11
  119. package/dist/deploy/cloudRun/artifactsRegistry.js +15 -14
  120. package/dist/deploy/cloudRun/cleanup.d.ts +2 -2
  121. package/dist/deploy/cloudRun/cleanup.js +3 -1
  122. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -2
  123. package/dist/deploy/cloudRun/cloudRunRevisions.js +7 -6
  124. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +8 -6
  125. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +57 -106
  126. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +3 -3
  127. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +79 -15
  128. package/dist/deploy/cloudRun/createJobs/common.d.ts +7 -7
  129. package/dist/deploy/cloudRun/createJobs/common.js +6 -3
  130. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  131. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  132. package/dist/deploy/cloudRun/createJobs/execute/onDeploy.d.ts +3 -0
  133. package/dist/deploy/cloudRun/createJobs/execute/onDeploy.js +115 -0
  134. package/dist/deploy/cloudRun/createJobs/execute/schedules.d.ts +3 -0
  135. package/dist/deploy/cloudRun/createJobs/execute/schedules.js +173 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -2
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +13 -5
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -2
  139. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +7 -3
  140. package/dist/deploy/cloudRun/createJobs/healthCheck.d.ts +5 -0
  141. package/dist/deploy/cloudRun/createJobs/healthCheck.js +82 -0
  142. package/dist/deploy/cloudRun/createJobs/index.d.ts +2 -2
  143. package/dist/deploy/cloudRun/createJobs/index.js +26 -12
  144. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  145. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  146. package/dist/deploy/cloudRun/index.d.ts +2 -2
  147. package/dist/deploy/cloudRun/index.js +25 -13
  148. package/dist/deploy/cloudRun/utils/cloudRunExecutionUrl.d.ts +10 -0
  149. package/dist/deploy/cloudRun/utils/cloudRunExecutionUrl.js +16 -0
  150. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +2 -2
  151. package/dist/deploy/cloudRun/utils/createArgsString.js +3 -1
  152. package/dist/deploy/cloudRun/utils/database.d.ts +25 -4
  153. package/dist/deploy/cloudRun/utils/database.js +49 -15
  154. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  155. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +3 -1
  156. package/dist/deploy/cloudRun/utils/getJobOrServiceArgs.d.ts +2 -0
  157. package/dist/deploy/cloudRun/utils/getJobOrServiceArgs.js +12 -0
  158. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -2
  159. package/dist/deploy/cloudRun/utils/getServiceName.js +3 -1
  160. package/dist/deploy/cloudRun/utils/jobName.d.ts +6 -1
  161. package/dist/deploy/cloudRun/utils/jobName.js +18 -4
  162. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +3 -1
  163. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  164. package/dist/deploy/cloudSql/utils.js +7 -2
  165. package/dist/deploy/custom/deployJob.d.ts +2 -2
  166. package/dist/deploy/custom/deployJob.js +10 -9
  167. package/dist/deploy/custom/index.d.ts +2 -2
  168. package/dist/deploy/custom/index.js +3 -1
  169. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  170. package/dist/deploy/dockerTag/deployJob.js +6 -6
  171. package/dist/deploy/dockerTag/index.d.ts +2 -2
  172. package/dist/deploy/dockerTag/index.js +3 -1
  173. package/dist/deploy/index.d.ts +10 -9
  174. package/dist/deploy/index.js +13 -7
  175. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  176. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  177. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  178. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  179. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  180. package/dist/deploy/kubernetes/deployJob.js +23 -22
  181. package/dist/deploy/kubernetes/index.d.ts +2 -2
  182. package/dist/deploy/kubernetes/index.js +52 -15
  183. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  184. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  185. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  186. package/dist/deploy/kubernetes/kubeValues.js +17 -19
  187. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  188. package/dist/deploy/kubernetes/mongodb.js +14 -12
  189. package/dist/deploy/sbom.d.ts +4 -4
  190. package/dist/deploy/sbom.js +8 -4
  191. package/dist/deploy/types/base.d.ts +5 -5
  192. package/dist/deploy/types/base.js +3 -1
  193. package/dist/deploy/types/custom.d.ts +3 -7
  194. package/dist/deploy/types/custom.js +3 -1
  195. package/dist/deploy/types/dockerTag.d.ts +1 -1
  196. package/dist/deploy/types/dockerTag.js +3 -1
  197. package/dist/deploy/types/googleCloudRun.d.ts +291 -16
  198. package/dist/deploy/types/googleCloudRun.js +28 -1
  199. package/dist/deploy/types/index.d.ts +8 -7
  200. package/dist/deploy/types/index.js +21 -10
  201. package/dist/deploy/types/kubernetes.d.ts +21 -54
  202. package/dist/deploy/types/kubernetes.js +3 -1
  203. package/dist/deploy/utils.d.ts +2 -2
  204. package/dist/deploy/utils.js +5 -2
  205. package/dist/globalScriptFunctions/index.d.ts +14 -0
  206. package/dist/globalScriptFunctions/index.js +37 -0
  207. package/dist/index.d.ts +5 -2
  208. package/dist/index.js +18 -9
  209. package/dist/packageInfos.d.ts +4 -0
  210. package/dist/packageInfos.js +20 -0
  211. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  212. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  213. package/dist/pipeline/createAllJobs.d.ts +16 -6
  214. package/dist/pipeline/createAllJobs.js +99 -27
  215. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  216. package/dist/pipeline/createJobsForComponent.js +9 -149
  217. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  218. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  219. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  220. package/dist/pipeline/createMainPipeline.js +283 -0
  221. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  222. package/dist/pipeline/generatePipelineFiles.js +305 -0
  223. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  224. package/dist/pipeline/getPipelineStages.js +56 -0
  225. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  226. package/dist/pipeline/gitlab/createGitlabJobs.js +264 -74
  227. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  228. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  229. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  230. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  231. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  232. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  233. package/dist/pipeline/index.d.ts +3 -2
  234. package/dist/pipeline/index.js +16 -9
  235. package/dist/pipeline/packageManager.d.ts +4 -2
  236. package/dist/pipeline/packageManager.js +56 -19
  237. package/dist/pipeline/yarn/yarnUtils.d.ts +2 -2
  238. package/dist/pipeline/yarn/yarnUtils.js +18 -15
  239. package/dist/rules/index.d.ts +10 -3
  240. package/dist/rules/index.js +35 -17
  241. package/dist/runner/index.d.ts +1 -1
  242. package/dist/runner/index.js +3 -1
  243. package/dist/tsconfig.tsbuildinfo +1 -1
  244. package/dist/types/config.d.ts +54 -36
  245. package/dist/types/config.js +5 -2
  246. package/dist/types/context.d.ts +123 -38
  247. package/dist/types/context.js +12 -1
  248. package/dist/types/environmentContext.d.ts +15 -12
  249. package/dist/types/environmentContext.js +3 -1
  250. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  251. package/dist/types/gitlab-ci-yml.js +3 -2
  252. package/dist/types/gitlab-types.d.ts +8 -8
  253. package/dist/types/gitlab-types.js +3 -1
  254. package/dist/types/index.d.ts +3 -1
  255. package/dist/types/index.js +16 -8
  256. package/dist/types/jobDefinition.d.ts +11 -0
  257. package/dist/types/jobDefinition.js +5 -0
  258. package/dist/types/jobs.d.ts +30 -15
  259. package/dist/types/jobs.js +3 -1
  260. package/dist/types/pipeline.d.ts +3 -3
  261. package/dist/types/pipeline.js +3 -1
  262. package/dist/types/utils.d.ts +1 -1
  263. package/dist/types/utils.js +3 -1
  264. package/dist/utils/gitlab.js +7 -2
  265. package/dist/utils/index.d.ts +2 -1
  266. package/dist/utils/index.js +10 -3
  267. package/dist/utils/jsonParse.d.ts +1 -0
  268. package/dist/utils/jsonParse.js +14 -0
  269. package/dist/utils/removeUndefined.d.ts +1 -0
  270. package/dist/utils/removeUndefined.js +36 -0
  271. package/dist/utils/writeFiles.d.ts +11 -0
  272. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  273. package/dist/variables/VariableValue.d.ts +3 -0
  274. package/dist/variables/VariableValue.js +5 -0
  275. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  276. package/dist/variables/VariableValueContainingReferences.js +97 -0
  277. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  278. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  279. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  280. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  281. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  282. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  283. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  284. package/dist/variables/__tests__/variableValue.test.js +36 -0
  285. package/dist/variables/resolveAllReferences.d.ts +3 -0
  286. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -48
  287. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  288. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  289. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  290. package/dist/variables/resolveReferencesOnce.js +22 -0
  291. package/examples/.test-gen-ignore +1 -0
  292. package/examples/__snapshots__/cloud-run-health-check-defaults.test.ts.snap +1394 -0
  293. package/examples/__snapshots__/cloud-run-health-check-only-startup.test.ts.snap +1394 -0
  294. package/examples/__snapshots__/cloud-run-health-check.test.ts.snap +1394 -0
  295. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1394 -0
  296. package/examples/__snapshots__/cloud-run-llama.test.ts.snap +624 -0
  297. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1394 -0
  298. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1394 -0
  299. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1410 -0
  300. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1394 -0
  301. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1502 -0
  302. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1394 -0
  303. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1412 -0
  304. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1462 -0
  305. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1462 -0
  306. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1394 -0
  307. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1394 -0
  308. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1466 -0
  309. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1284 -0
  310. package/examples/__snapshots__/cloud-run-with-gpu.test.ts.snap +1394 -0
  311. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1394 -0
  312. package/examples/__snapshots__/cloud-run-with-sql-legacy-jobs.test.ts.snap +1709 -0
  313. package/examples/__snapshots__/cloud-run-with-sql-multiple-dbs.test.ts.snap +4515 -0
  314. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2950 -0
  315. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1772 -0
  316. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1402 -0
  317. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1261 -0
  318. package/examples/__snapshots__/custom-build-job.test.ts.snap +1156 -0
  319. package/examples/__snapshots__/custom-deploy.test.ts.snap +1059 -0
  320. package/examples/__snapshots__/custom-envs.test.ts.snap +786 -0
  321. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1152 -0
  322. package/examples/__snapshots__/custom-verify-job.test.ts.snap +1606 -0
  323. package/examples/__snapshots__/git-submodule.test.ts.snap +1395 -0
  324. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1713 -0
  325. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1733 -0
  326. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3265 -0
  327. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1837 -0
  328. package/examples/__snapshots__/local-dot-env.test.ts.snap +1318 -0
  329. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1790 -0
  330. package/examples/__snapshots__/multiline-var.test.ts.snap +5585 -0
  331. package/examples/__snapshots__/native-app.test.ts.snap +2210 -0
  332. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1394 -0
  333. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1402 -0
  334. package/examples/__snapshots__/override-secrets.test.ts.snap +1419 -0
  335. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1464 -0
  336. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1444 -0
  337. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4645 -0
  338. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1424 -0
  339. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2298 -0
  340. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2290 -0
  341. package/examples/__utils__/helpers.ts +9 -12
  342. package/examples/cloud-run-health-check-defaults.test.ts +11 -0
  343. package/examples/cloud-run-health-check-defaults.ts +28 -0
  344. package/examples/cloud-run-health-check-only-startup.test.ts +11 -0
  345. package/examples/cloud-run-health-check-only-startup.ts +38 -0
  346. package/examples/cloud-run-health-check.test.ts +11 -0
  347. package/examples/cloud-run-health-check.ts +45 -0
  348. package/examples/cloud-run-http2.test.ts +11 -0
  349. package/examples/cloud-run-http2.ts +29 -0
  350. package/examples/cloud-run-llama.test.ts +11 -0
  351. package/examples/cloud-run-llama.ts +40 -0
  352. package/examples/cloud-run-memory-limit.test.ts +11 -0
  353. package/examples/cloud-run-memory-limit.ts +12 -7
  354. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  355. package/examples/cloud-run-meteor-with-worker.ts +13 -7
  356. package/examples/cloud-run-nextjs.test.ts +11 -0
  357. package/examples/cloud-run-nextjs.ts +28 -0
  358. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  359. package/examples/cloud-run-no-cpu-throttling.ts +8 -6
  360. package/examples/cloud-run-no-service.test.ts +11 -0
  361. package/examples/cloud-run-no-service.ts +39 -0
  362. package/examples/cloud-run-non-public.test.ts +11 -0
  363. package/examples/cloud-run-non-public.ts +7 -6
  364. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  365. package/examples/cloud-run-post-stop-job.ts +15 -6
  366. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  367. package/examples/cloud-run-service-custom-vpc-connector.ts +37 -0
  368. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  369. package/examples/cloud-run-service-custom-vpc.ts +39 -0
  370. package/examples/cloud-run-service-gen2.test.ts +11 -0
  371. package/examples/cloud-run-service-gen2.ts +8 -6
  372. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  373. package/examples/cloud-run-service-increase-timout.ts +29 -0
  374. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  375. package/examples/cloud-run-service-with-volumes.ts +64 -0
  376. package/examples/cloud-run-storybook.test.ts +11 -0
  377. package/examples/cloud-run-storybook.ts +33 -0
  378. package/examples/cloud-run-with-gpu.test.ts +11 -0
  379. package/examples/cloud-run-with-gpu.ts +30 -0
  380. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  381. package/examples/cloud-run-with-ngnix.ts +29 -0
  382. package/examples/cloud-run-with-sql-legacy-jobs.test.ts +11 -0
  383. package/examples/cloud-run-with-sql-legacy-jobs.ts +49 -0
  384. package/examples/cloud-run-with-sql-multiple-dbs.test.ts +11 -0
  385. package/examples/cloud-run-with-sql-multiple-dbs.ts +87 -0
  386. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  387. package/examples/cloud-run-with-sql-reuse-db.ts +7 -6
  388. package/examples/cloud-run-with-sql.test.ts +11 -0
  389. package/examples/cloud-run-with-sql.ts +45 -24
  390. package/examples/cloud-run-with-worker.test.ts +11 -0
  391. package/examples/cloud-run-with-worker.ts +8 -6
  392. package/examples/custom-build-job-with-tests.test.ts +11 -0
  393. package/examples/custom-build-job-with-tests.ts +7 -6
  394. package/examples/custom-build-job.test.ts +11 -0
  395. package/examples/custom-build-job.ts +7 -6
  396. package/examples/custom-deploy.test.ts +11 -0
  397. package/examples/custom-deploy.ts +22 -14
  398. package/examples/custom-envs.test.ts +11 -0
  399. package/examples/custom-envs.ts +7 -6
  400. package/examples/custom-sbom-java.test.ts +11 -0
  401. package/examples/custom-sbom-java.ts +12 -8
  402. package/examples/custom-verify-job.test.ts +11 -0
  403. package/examples/custom-verify-job.ts +65 -0
  404. package/examples/git-submodule.test.ts +11 -0
  405. package/examples/git-submodule.ts +30 -0
  406. package/examples/kubernetes-application-customization.test.ts +11 -0
  407. package/examples/kubernetes-application-customization.ts +9 -6
  408. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  409. package/examples/kubernetes-with-cloud-sql.ts +9 -6
  410. package/examples/kubernetes-with-jobs.test.ts +11 -0
  411. package/examples/kubernetes-with-jobs.ts +9 -6
  412. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  413. package/examples/kubernetes-with-mongodb.ts +9 -6
  414. package/examples/local-dot-env.test.ts +11 -0
  415. package/examples/local-dot-env.ts +27 -0
  416. package/examples/meteor-kubernetes.test.ts +11 -0
  417. package/examples/meteor-kubernetes.ts +6 -7
  418. package/examples/multiline-var.test.ts +11 -0
  419. package/examples/multiline-var.ts +107 -0
  420. package/examples/native-app.test.ts +11 -0
  421. package/examples/native-app.ts +24 -19
  422. package/examples/node-build-with-custom-image.test.ts +11 -0
  423. package/examples/node-build-with-custom-image.ts +7 -6
  424. package/examples/node-build-with-docker-additions.test.ts +11 -0
  425. package/examples/node-build-with-docker-additions.ts +7 -6
  426. package/examples/override-secrets.test.ts +11 -0
  427. package/examples/override-secrets.ts +44 -0
  428. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  429. package/examples/rails-k8s-with-worker.test.ts +11 -0
  430. package/examples/rails-k8s-with-worker.ts +13 -13
  431. package/examples/referencing-other-vars.test.ts +11 -0
  432. package/examples/referencing-other-vars.ts +83 -0
  433. package/examples/wait-for-other-deploy.test.ts +11 -0
  434. package/examples/wait-for-other-deploy.ts +6 -5
  435. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  436. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  437. package/examples/workspace-api-www.test.ts +11 -0
  438. package/examples/workspace-api-www.ts +46 -0
  439. package/package.json +23 -26
  440. package/scripts/generate-examples-test.ts +84 -0
  441. package/scripts/generate-gitlab-ci-types.ts +2 -2
  442. package/scripts/tsconfig.json +7 -0
  443. package/src/bash/BashExpression.ts +78 -0
  444. package/src/bash/bashEscape.ts +164 -0
  445. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  446. package/src/bash/bashYaml.ts +80 -0
  447. package/src/bash/getInjectVarsScript.ts +21 -0
  448. package/src/bash/index.ts +2 -0
  449. package/src/build/artifacts/createBuildJobArtifact.ts +63 -0
  450. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  451. package/src/build/base/constants.ts +1 -1
  452. package/src/build/base/createAppBuildJob.ts +40 -24
  453. package/src/build/base/createArtifactsConfig.ts +2 -2
  454. package/src/build/base/createBuildJobDefinition.ts +37 -0
  455. package/src/build/base/index.ts +40 -8
  456. package/src/build/base/writeBuildInfo.ts +3 -3
  457. package/src/build/base/writeDotEnv.ts +25 -6
  458. package/src/build/cache/createJobCache.ts +83 -0
  459. package/src/build/cache/getAllCacheConfigsFromConfig.ts +29 -0
  460. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  461. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  462. package/src/build/custom/buildJob.ts +11 -37
  463. package/src/build/custom/index.ts +4 -2
  464. package/src/build/custom/testJob.ts +24 -21
  465. package/src/build/docker.ts +110 -49
  466. package/src/build/index.ts +45 -11
  467. package/src/build/node/buildJob.ts +68 -69
  468. package/src/build/node/cache.ts +28 -34
  469. package/src/build/node/constants.ts +2 -2
  470. package/src/build/node/index.ts +13 -4
  471. package/src/build/node/meteor.ts +19 -24
  472. package/src/build/node/testJob.ts +44 -25
  473. package/src/build/node/yarn.ts +22 -15
  474. package/src/build/rails/build.ts +15 -9
  475. package/src/build/rails/index.ts +4 -2
  476. package/src/build/rails/test.ts +41 -12
  477. package/src/build/sbom.ts +21 -11
  478. package/src/build/types.ts +198 -47
  479. package/src/catladder-gitlab.ts +7 -56
  480. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  481. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  482. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  483. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  484. package/src/config/configruedEnvs.ts +6 -6
  485. package/src/config/readConfig.ts +15 -22
  486. package/src/constants.ts +5 -2
  487. package/src/context/createAllComponentsContext.ts +31 -0
  488. package/src/context/createComponentContext.ts +148 -0
  489. package/src/context/createWorkspaceContext.ts +56 -0
  490. package/src/context/getBuildInfoVariables.ts +36 -0
  491. package/src/context/getEnvConfig.ts +25 -5
  492. package/src/context/getEnvType.ts +1 -1
  493. package/src/context/getEnvironment.ts +8 -24
  494. package/src/context/getEnvironmentContext.ts +25 -29
  495. package/src/context/getEnvironmentVariables.ts +101 -83
  496. package/src/context/getLabels.ts +8 -5
  497. package/src/context/getReviewSlug.ts +27 -0
  498. package/src/context/index.ts +1 -65
  499. package/src/context/transformJobOnlyVars.ts +6 -3
  500. package/src/context/utils/envVars.ts +5 -4
  501. package/src/deploy/base/deploy.ts +63 -47
  502. package/src/deploy/base/index.ts +11 -6
  503. package/src/deploy/base/rollback.ts +11 -16
  504. package/src/deploy/base/stop.ts +11 -15
  505. package/src/deploy/base/variables.ts +1 -1
  506. package/src/deploy/cloudRun/artifactsRegistry.ts +32 -28
  507. package/src/deploy/cloudRun/cleanup.ts +5 -5
  508. package/src/deploy/cloudRun/cloudRunRevisions.ts +9 -11
  509. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +71 -153
  510. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +65 -26
  511. package/src/deploy/cloudRun/createJobs/common.ts +7 -7
  512. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  513. package/src/deploy/cloudRun/createJobs/execute/onDeploy.ts +102 -0
  514. package/src/deploy/cloudRun/createJobs/execute/schedules.ts +186 -0
  515. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +27 -16
  516. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +9 -11
  517. package/src/deploy/cloudRun/createJobs/healthCheck.ts +64 -0
  518. package/src/deploy/cloudRun/createJobs/index.ts +20 -14
  519. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  520. package/src/deploy/cloudRun/index.ts +94 -60
  521. package/src/deploy/cloudRun/utils/cloudRunExecutionUrl.ts +20 -0
  522. package/src/deploy/cloudRun/utils/createArgsString.ts +6 -2
  523. package/src/deploy/cloudRun/utils/database.ts +116 -9
  524. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +5 -3
  525. package/src/deploy/cloudRun/utils/getJobOrServiceArgs.ts +18 -0
  526. package/src/deploy/cloudRun/utils/getServiceName.ts +2 -2
  527. package/src/deploy/cloudRun/utils/jobName.ts +22 -2
  528. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +1 -1
  529. package/src/deploy/cloudSql/utils.ts +13 -10
  530. package/src/deploy/custom/deployJob.ts +15 -10
  531. package/src/deploy/custom/index.ts +2 -2
  532. package/src/deploy/dockerTag/deployJob.ts +6 -7
  533. package/src/deploy/dockerTag/index.ts +8 -7
  534. package/src/deploy/index.ts +15 -12
  535. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  536. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  537. package/src/deploy/kubernetes/deployJob.ts +30 -21
  538. package/src/deploy/kubernetes/index.ts +43 -35
  539. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  540. package/src/deploy/kubernetes/kubeValues.ts +25 -20
  541. package/src/deploy/kubernetes/mongodb.ts +15 -15
  542. package/src/deploy/sbom.ts +20 -10
  543. package/src/deploy/types/base.ts +3 -3
  544. package/src/deploy/types/custom.ts +3 -7
  545. package/src/deploy/types/googleCloudRun.ts +359 -2
  546. package/src/deploy/types/index.ts +9 -2
  547. package/src/deploy/types/kubernetes.ts +1 -36
  548. package/src/deploy/utils.ts +5 -5
  549. package/src/globalScriptFunctions/index.ts +30 -0
  550. package/src/index.ts +4 -1
  551. package/src/packageInfos.ts +14 -0
  552. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  553. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  554. package/src/pipeline/createAllJobs.ts +67 -33
  555. package/src/pipeline/createJobsForComponent.ts +17 -37
  556. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  557. package/src/pipeline/createMainPipeline.ts +118 -0
  558. package/src/pipeline/generatePipelineFiles.ts +100 -0
  559. package/src/pipeline/getPipelineStages.ts +23 -0
  560. package/src/pipeline/gitlab/createGitlabJobs.ts +398 -108
  561. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  562. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  563. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  564. package/src/pipeline/index.ts +2 -1
  565. package/src/pipeline/packageManager.ts +42 -18
  566. package/src/pipeline/yarn/yarnUtils.ts +15 -12
  567. package/src/rules/index.ts +41 -18
  568. package/src/runner/index.ts +0 -1
  569. package/src/types/config.ts +62 -23
  570. package/src/types/context.ts +167 -36
  571. package/src/types/environmentContext.ts +18 -13
  572. package/src/types/gitlab-ci-yml.ts +0 -1
  573. package/src/types/gitlab-types.ts +10 -7
  574. package/src/types/index.ts +2 -0
  575. package/src/types/jobDefinition.ts +34 -0
  576. package/src/types/jobs.ts +31 -15
  577. package/src/types/utils.ts +4 -4
  578. package/src/utils/gitlab.ts +20 -3
  579. package/src/utils/index.ts +6 -3
  580. package/src/utils/jsonParse.ts +7 -0
  581. package/src/utils/removeUndefined.ts +4 -0
  582. package/src/utils/writeFiles.ts +52 -0
  583. package/src/variables/VariableValue.ts +6 -0
  584. package/src/variables/VariableValueContainingReferences.ts +89 -0
  585. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  586. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  587. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  588. package/src/variables/__tests__/variableValue.test.ts +73 -0
  589. package/src/variables/resolveAllReferences.ts +46 -0
  590. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  591. package/src/variables/resolveReferencesOnce.ts +29 -0
  592. package/bin/catladder-gitlab-dev.js +0 -3
  593. package/bin/catladder-gitlab.js +0 -3
  594. package/dist/bundles/catladder-gitlab/index.js +0 -34559
  595. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  596. package/dist/context/resolveReferences.d.ts +0 -4
  597. package/dist/context/resolveReferences.js +0 -254
  598. package/dist/deploy/cloudRun/createJobs/variables.d.ts +0 -5
  599. package/dist/deploy/cloudRun/createJobs/variables.js +0 -19
  600. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  601. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  602. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  603. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  604. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  605. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1839
  606. package/examples/__snapshots__/cloud-run-meteor-with-worker.ts.snap +0 -1807
  607. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1839
  608. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1839
  609. package/examples/__snapshots__/cloud-run-post-stop-job.ts.snap +0 -1849
  610. package/examples/__snapshots__/cloud-run-service-gen2.ts.snap +0 -1839
  611. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3647
  612. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3658
  613. package/examples/__snapshots__/cloud-run-with-worker.ts.snap +0 -1847
  614. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1663
  615. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1375
  616. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1625
  617. package/examples/__snapshots__/custom-envs.ts.snap +0 -1127
  618. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1383
  619. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2573
  620. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2533
  621. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2545
  622. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4660
  623. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2737
  624. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2658
  625. package/examples/__snapshots__/native-app.ts.snap +0 -3007
  626. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1839
  627. package/examples/__snapshots__/node-build-with-docker-additions.ts.snap +0 -1839
  628. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4291
  629. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -2049
  630. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  631. package/scripts/bundle +0 -2
  632. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  633. package/src/context/resolveReferences.ts +0 -70
  634. package/src/deploy/cloudRun/createJobs/variables.ts +0 -21
  635. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  636. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  637. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  638. package/src/pipeline/createChildPipeline.ts +0 -46
  639. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
@@ -1,3647 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "api 👮 lint": {
9
- "cache": [
10
- {
11
- "key": "api-yarn",
12
- "paths": [
13
- "api/.yarn",
14
- ],
15
- "policy": "pull-push",
16
- },
17
- {
18
- "key": "api-node-modules",
19
- "paths": [
20
- "api/node_modules",
21
- ],
22
- "policy": "pull-push",
23
- },
24
- ],
25
- "image": "path/to/docker/jobs-default:the-version",
26
- "interruptible": true,
27
- "needs": [],
28
- "retry": {
29
- "max": 2,
30
- "when": [
31
- "runner_system_failure",
32
- "stuck_or_timeout_failure",
33
- ],
34
- },
35
- "script": [
36
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
37
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
38
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
39
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
40
- "cd api",
41
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
42
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
43
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
44
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
45
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
46
- "yarn install --immutable",
47
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
48
- "yarn lint",
49
- ],
50
- "stage": "test",
51
- "variables": {
52
- "APP_PATH": "api",
53
- "KUBERNETES_CPU_REQUEST": "0.5",
54
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
55
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
56
- },
57
- },
58
- "api 🔨 app | dev ": {
59
- "artifacts": {
60
- "expire_in": "1 day",
61
- "paths": [
62
- "api/__build_info.json",
63
- "api/dist",
64
- "api/.next",
65
- ],
66
- "reports": {
67
- "junit": undefined,
68
- },
69
- "when": "always",
70
- },
71
- "cache": [
72
- {
73
- "key": "api-yarn",
74
- "paths": [
75
- "api/.yarn",
76
- ],
77
- "policy": "pull-push",
78
- },
79
- {
80
- "key": "api-node-modules",
81
- "paths": [
82
- "api/node_modules",
83
- ],
84
- "policy": "pull-push",
85
- },
86
- {
87
- "key": "api-next-cache",
88
- "paths": [
89
- "api/.next/cache/",
90
- ],
91
- "policy": "pull-push",
92
- },
93
- ],
94
- "image": "path/to/docker/jobs-default:the-version",
95
- "interruptible": true,
96
- "needs": [],
97
- "retry": {
98
- "max": 2,
99
- "when": [
100
- "runner_system_failure",
101
- "stuck_or_timeout_failure",
102
- ],
103
- },
104
- "script": [
105
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
106
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
107
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
108
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
109
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
110
- "cd api",
111
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
112
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
113
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
114
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
115
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
116
- "yarn install --immutable",
117
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
118
- "yarn build",
119
- ],
120
- "stage": "build",
121
- "variables": {
122
- "APP_DIR": "api",
123
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
124
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
125
- "BUILD_INFO_ID": "some-id",
126
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
127
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
128
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
129
- "DB_NAME": "pan-test-app-dev-api",
130
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
131
- "DB_USER": "my-user",
132
- "ENV_SHORT": "dev",
133
- "ENV_TYPE": "dev",
134
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
135
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
136
- "HOST": "pan-test-app-dev-api-unknown-host.example.com",
137
- "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
138
- "HOST_INTERNAL": "pan-test-app-dev-api-unknown-host.example.com",
139
- "KUBERNETES_CPU_REQUEST": "0.5",
140
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
141
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
142
- "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
143
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-api-unknown-host.example.com",
144
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
145
- },
146
- },
147
- "api 🔨 docker | dev ": {
148
- "cache": [
149
- {
150
- "key": "api-yarn",
151
- "paths": [
152
- "api/.yarn",
153
- ],
154
- "policy": "pull",
155
- },
156
- ],
157
- "image": "path/to/docker/docker-build:the-version",
158
- "interruptible": true,
159
- "needs": [
160
- "api 🔨 app | dev ",
161
- ],
162
- "retry": {
163
- "max": 2,
164
- "when": [
165
- "runner_system_failure",
166
- "stuck_or_timeout_failure",
167
- ],
168
- },
169
- "script": [
170
- "ensureNodeDockerfile",
171
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
172
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
173
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
174
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
175
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
176
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
177
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
178
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
179
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
180
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
181
- "docker push $DOCKER_CACHE_IMAGE",
182
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
183
- ],
184
- "services": [
185
- {
186
- "command": [
187
- "--tls=false",
188
- ],
189
- "name": "docker:24.0.6-dind",
190
- },
191
- ],
192
- "stage": "build",
193
- "variables": {
194
- "APP_DIR": "api",
195
- "DOCKERFILE_ADDITIONS": undefined,
196
- "DOCKERFILE_ADDITIONS_END": undefined,
197
- "DOCKER_BUILDKIT": "1",
198
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
199
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
200
- RUN yarn plugin import workspace-tools
201
- RUN yarn workspaces focus --production && yarn rebuild",
202
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
203
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
204
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
205
- COPY --chown=node:node .yarn /app/.yarn",
206
- "DOCKER_DIR": ".",
207
- "DOCKER_DRIVER": "overlay2",
208
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
209
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api",
210
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
211
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
212
- "DOCKER_TLS_CERTDIR": "",
213
- "KUBERNETES_CPU_REQUEST": "0.5",
214
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
215
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
216
- },
217
- },
218
- "api 🚀 Deploy | dev ": {
219
- "allow_failure": false,
220
- "artifacts": {
221
- "paths": [
222
- "____envvars.yaml",
223
- ],
224
- },
225
- "environment": {
226
- "auto_stop_in": "4 weeks",
227
- "name": "dev/api",
228
- "on_stop": "api 🛑 Stop ⚠️ | dev ",
229
- "url": "https://pan-test-app-dev-api-unknown-host.example.com",
230
- },
231
- "image": "path/to/docker/gcloud:the-version",
232
- "interruptible": true,
233
- "needs": [
234
- {
235
- "artifacts": false,
236
- "job": "api 👮 lint",
237
- },
238
- {
239
- "artifacts": false,
240
- "job": "api 🔨 app | dev ",
241
- },
242
- {
243
- "artifacts": false,
244
- "job": "api 🔨 docker | dev ",
245
- },
246
- {
247
- "artifacts": false,
248
- "job": "api 🧪 test",
249
- },
250
- {
251
- "artifacts": true,
252
- "job": "api 🧾 sbom | dev ",
253
- },
254
- {
255
- "artifacts": false,
256
- "job": "api 🛡 audit",
257
- },
258
- ],
259
- "retry": {
260
- "max": 2,
261
- "when": [
262
- "runner_system_failure",
263
- "stuck_or_timeout_failure",
264
- ],
265
- },
266
- "rules": [
267
- {
268
- "when": "on_success",
269
- },
270
- ],
271
- "script": [
272
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
273
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
274
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
275
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
276
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
277
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
278
- "echo "$ENV_VARS" > ____envvars.yaml",
279
- "set +e",
280
- "echo "ensuring Database..."",
281
- "gcloud sql databases create pan-test-app-dev-api --instance=instancename --project projectId",
282
- "set -e",
283
- "gcloud run deploy pan-test-app-dev-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-service-name=pan-test-app-dev-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
284
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
285
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
286
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-dev-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
287
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api@$version --quiet --delete-tags; done",
288
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
289
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
290
- "echo Uploading SBOM to Dependency Track",
291
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" "__sbom.json" vex.json || true",
292
- ],
293
- "services": [
294
- {
295
- "command": [
296
- "--tls=false",
297
- ],
298
- "name": "docker:24.0.6-dind",
299
- },
300
- ],
301
- "stage": "deploy dev",
302
- "variables": {
303
- "APP_DIR": "api",
304
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
305
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
306
- "BUILD_INFO_ID": "some-id",
307
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
308
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
309
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
310
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
311
- "DB_NAME": "pan-test-app-dev-api",
312
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
313
- "DB_USER": "my-user",
314
- "DOCKER_BUILDKIT": "1",
315
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
316
- "DOCKER_DRIVER": "overlay2",
317
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
318
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api",
319
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
320
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
321
- "DOCKER_TLS_CERTDIR": "",
322
- "ENV_SHORT": "dev",
323
- "ENV_TYPE": "dev",
324
- "ENV_VARS": "ENV_SHORT: 'dev'
325
- APP_DIR: 'api'
326
- ENV_TYPE: 'dev'
327
- BUILD_INFO_ID: 'some-id'
328
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
329
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
330
- HOST: 'pan-test-app-dev-api-unknown-host.example.com'
331
- ROOT_URL: 'https://pan-test-app-dev-api-unknown-host.example.com'
332
- HOST_CANONICAL: 'pan-test-app-dev-api-unknown-host.example.com'
333
- ROOT_URL_INTERNAL: 'https://pan-test-app-dev-api-unknown-host.example.com'
334
- HOST_INTERNAL: 'pan-test-app-dev-api-unknown-host.example.com'
335
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
336
- DB_NAME: 'pan-test-app-dev-api'
337
- DB_USER: 'my-user'
338
- DB_PASSWORD: '$CL_dev_api_DB_PASSWORD'
339
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
340
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
341
- GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix'
342
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
343
- ",
344
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
345
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
346
- "HOST": "pan-test-app-dev-api-unknown-host.example.com",
347
- "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
348
- "HOST_INTERNAL": "pan-test-app-dev-api-unknown-host.example.com",
349
- "KUBERNETES_CPU_REQUEST": "0.5",
350
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
351
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
352
- "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
353
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-api-unknown-host.example.com",
354
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
355
- },
356
- },
357
- "api 🛑 Stop ⚠️ | dev ": {
358
- "environment": {
359
- "action": "stop",
360
- "name": "dev/api",
361
- "url": "https://pan-test-app-dev-api-unknown-host.example.com",
362
- },
363
- "image": "path/to/docker/gcloud:the-version",
364
- "interruptible": true,
365
- "needs": [],
366
- "retry": {
367
- "max": 2,
368
- "when": [
369
- "runner_system_failure",
370
- "stuck_or_timeout_failure",
371
- ],
372
- },
373
- "rules": [
374
- {
375
- "allow_failure": true,
376
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
377
- "when": "on_success",
378
- },
379
- {
380
- "allow_failure": true,
381
- "when": "manual",
382
- },
383
- ],
384
- "script": [
385
- "set +e",
386
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
387
- "gcloud run services delete pan-test-app-dev-api --project=google-project-id --region=europe-west6",
388
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api --quiet --delete-tags",
389
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
390
- "echo Disabling component in Dependency Track",
391
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" || true",
392
- "set -e",
393
- ],
394
- "stage": "stop dev",
395
- "variables": {
396
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
397
- "GIT_STRATEGY": "none",
398
- "KUBERNETES_CPU_REQUEST": "0.5",
399
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
400
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
401
- },
402
- },
403
- "api 🛡 audit": {
404
- "allow_failure": true,
405
- "image": "path/to/docker/jobs-default:the-version",
406
- "interruptible": true,
407
- "needs": [],
408
- "retry": {
409
- "max": 2,
410
- "when": [
411
- "runner_system_failure",
412
- "stuck_or_timeout_failure",
413
- ],
414
- },
415
- "script": [
416
- "cd api",
417
- "yarn npm audit --environment production",
418
- ],
419
- "stage": "test",
420
- "variables": {
421
- "APP_PATH": "api",
422
- "KUBERNETES_CPU_REQUEST": "0.5",
423
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
424
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
425
- },
426
- },
427
- "api 🧪 test": {
428
- "cache": [
429
- {
430
- "key": "api-yarn",
431
- "paths": [
432
- "api/.yarn",
433
- ],
434
- "policy": "pull-push",
435
- },
436
- {
437
- "key": "api-node-modules",
438
- "paths": [
439
- "api/node_modules",
440
- ],
441
- "policy": "pull-push",
442
- },
443
- ],
444
- "image": "path/to/docker/jobs-testing-chrome:the-version",
445
- "interruptible": true,
446
- "needs": [],
447
- "retry": {
448
- "max": 2,
449
- "when": [
450
- "runner_system_failure",
451
- "stuck_or_timeout_failure",
452
- ],
453
- },
454
- "script": [
455
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
456
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
457
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
458
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
459
- "cd api",
460
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
461
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
462
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
463
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
464
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
465
- "yarn install --immutable",
466
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
467
- "yarn test",
468
- ],
469
- "stage": "test",
470
- "variables": {
471
- "APP_PATH": "api",
472
- "KUBERNETES_CPU_REQUEST": "0.5",
473
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
474
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
475
- },
476
- },
477
- "api 🧾 sbom | dev ": {
478
- "allow_failure": true,
479
- "artifacts": {
480
- "paths": [
481
- "__sbom.json",
482
- ],
483
- },
484
- "image": "aquasec/trivy:0.38.3",
485
- "interruptible": true,
486
- "needs": [],
487
- "retry": {
488
- "max": 2,
489
- "when": [
490
- "runner_system_failure",
491
- "stuck_or_timeout_failure",
492
- ],
493
- },
494
- "script": [
495
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
496
- ],
497
- "stage": "build",
498
- "variables": {},
499
- },
500
- "worker 👮 lint": {
501
- "cache": [
502
- {
503
- "key": "api-yarn",
504
- "paths": [
505
- "api/.yarn",
506
- ],
507
- "policy": "pull-push",
508
- },
509
- {
510
- "key": "api-node-modules",
511
- "paths": [
512
- "api/node_modules",
513
- ],
514
- "policy": "pull-push",
515
- },
516
- ],
517
- "image": "path/to/docker/jobs-default:the-version",
518
- "interruptible": true,
519
- "needs": [],
520
- "retry": {
521
- "max": 2,
522
- "when": [
523
- "runner_system_failure",
524
- "stuck_or_timeout_failure",
525
- ],
526
- },
527
- "script": [
528
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
529
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
530
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
531
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
532
- "cd api",
533
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
534
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
535
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
536
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
537
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
538
- "yarn install --immutable",
539
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
540
- "yarn lint",
541
- ],
542
- "stage": "test",
543
- "variables": {
544
- "APP_PATH": "api",
545
- "KUBERNETES_CPU_REQUEST": "0.5",
546
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
547
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
548
- },
549
- },
550
- "worker 🔨 app | dev ": {
551
- "artifacts": {
552
- "expire_in": "1 day",
553
- "paths": [
554
- "api/__build_info.json",
555
- "api/dist",
556
- "api/.next",
557
- ],
558
- "reports": {
559
- "junit": undefined,
560
- },
561
- "when": "always",
562
- },
563
- "cache": [
564
- {
565
- "key": "api-yarn",
566
- "paths": [
567
- "api/.yarn",
568
- ],
569
- "policy": "pull-push",
570
- },
571
- {
572
- "key": "api-node-modules",
573
- "paths": [
574
- "api/node_modules",
575
- ],
576
- "policy": "pull-push",
577
- },
578
- {
579
- "key": "worker-next-cache",
580
- "paths": [
581
- "api/.next/cache/",
582
- ],
583
- "policy": "pull-push",
584
- },
585
- ],
586
- "image": "path/to/docker/jobs-default:the-version",
587
- "interruptible": true,
588
- "needs": [],
589
- "retry": {
590
- "max": 2,
591
- "when": [
592
- "runner_system_failure",
593
- "stuck_or_timeout_failure",
594
- ],
595
- },
596
- "script": [
597
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
598
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
599
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
600
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
601
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
602
- "cd api",
603
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
604
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
605
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
606
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
607
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
608
- "yarn install --immutable",
609
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
610
- "yarn build:worker",
611
- ],
612
- "stage": "build",
613
- "variables": {
614
- "APP_DIR": "api",
615
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
616
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
617
- "BUILD_INFO_ID": "some-id",
618
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
619
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
620
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
621
- "DB_NAME": "pan-test-app-dev-api",
622
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
623
- "DB_USER": "my-user",
624
- "ENV_SHORT": "dev",
625
- "ENV_TYPE": "dev",
626
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_worker_GCLOUD_DEPLOY_credentialsKey",
627
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_worker_GCLOUD_RUN_canonicalHostSuffix",
628
- "HOST": "pan-test-app-dev-worker-unknown-host.example.com",
629
- "HOST_CANONICAL": "pan-test-app-dev-worker-unknown-host.example.com",
630
- "HOST_INTERNAL": "pan-test-app-dev-worker-unknown-host.example.com",
631
- "KUBERNETES_CPU_REQUEST": "0.5",
632
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
633
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
634
- "ROOT_URL": "https://pan-test-app-dev-worker-unknown-host.example.com",
635
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-worker-unknown-host.example.com",
636
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
637
- },
638
- },
639
- "worker 🔨 docker | dev ": {
640
- "cache": [
641
- {
642
- "key": "api-yarn",
643
- "paths": [
644
- "api/.yarn",
645
- ],
646
- "policy": "pull",
647
- },
648
- ],
649
- "image": "path/to/docker/docker-build:the-version",
650
- "interruptible": true,
651
- "needs": [
652
- "worker 🔨 app | dev ",
653
- ],
654
- "retry": {
655
- "max": 2,
656
- "when": [
657
- "runner_system_failure",
658
- "stuck_or_timeout_failure",
659
- ],
660
- },
661
- "script": [
662
- "ensureNodeDockerfile",
663
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
664
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_worker_GCLOUD_DEPLOY_credentialsKey")",
665
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
666
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
667
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
668
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
669
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
670
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
671
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
672
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
673
- "docker push $DOCKER_CACHE_IMAGE",
674
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
675
- ],
676
- "services": [
677
- {
678
- "command": [
679
- "--tls=false",
680
- ],
681
- "name": "docker:24.0.6-dind",
682
- },
683
- ],
684
- "stage": "build",
685
- "variables": {
686
- "APP_DIR": "api",
687
- "DOCKERFILE_ADDITIONS": undefined,
688
- "DOCKERFILE_ADDITIONS_END": undefined,
689
- "DOCKER_BUILDKIT": "1",
690
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
691
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
692
- RUN yarn plugin import workspace-tools
693
- RUN yarn workspaces focus --production && yarn rebuild",
694
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
695
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
696
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
697
- COPY --chown=node:node .yarn /app/.yarn",
698
- "DOCKER_DIR": ".",
699
- "DOCKER_DRIVER": "overlay2",
700
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
701
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/worker",
702
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
703
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
704
- "DOCKER_TLS_CERTDIR": "",
705
- "KUBERNETES_CPU_REQUEST": "0.5",
706
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
707
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
708
- },
709
- },
710
- "worker 🚀 Deploy | dev ": {
711
- "allow_failure": false,
712
- "artifacts": {
713
- "paths": [
714
- "____envvars.yaml",
715
- ],
716
- },
717
- "environment": {
718
- "auto_stop_in": "4 weeks",
719
- "name": "dev/worker",
720
- "on_stop": "worker 🛑 Stop ⚠️ | dev ",
721
- "url": "https://pan-test-app-dev-worker-unknown-host.example.com",
722
- },
723
- "image": "path/to/docker/gcloud:the-version",
724
- "interruptible": true,
725
- "needs": [
726
- {
727
- "artifacts": false,
728
- "job": "worker 👮 lint",
729
- },
730
- {
731
- "artifacts": false,
732
- "job": "worker 🔨 app | dev ",
733
- },
734
- {
735
- "artifacts": false,
736
- "job": "worker 🔨 docker | dev ",
737
- },
738
- {
739
- "artifacts": false,
740
- "job": "worker 🧪 test",
741
- },
742
- {
743
- "artifacts": true,
744
- "job": "worker 🧾 sbom | dev ",
745
- },
746
- {
747
- "artifacts": false,
748
- "job": "worker 🛡 audit",
749
- },
750
- ],
751
- "retry": {
752
- "max": 2,
753
- "when": [
754
- "runner_system_failure",
755
- "stuck_or_timeout_failure",
756
- ],
757
- },
758
- "rules": [
759
- {
760
- "when": "on_success",
761
- },
762
- ],
763
- "script": [
764
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
765
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_worker_GCLOUD_DEPLOY_credentialsKey")",
766
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
767
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
768
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
769
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
770
- "echo "$ENV_VARS" > ____envvars.yaml",
771
- "set +e",
772
- "echo "ensuring Database..."",
773
- "gcloud sql databases create pan-test-app-dev-api --instance=instancename --project projectId",
774
- "set -e",
775
- "gcloud run deploy pan-test-app-dev-worker --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/worker:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=worker,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-service-name=pan-test-app-dev-worker --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
776
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
777
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
778
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-dev-worker --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
779
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/worker@$version --quiet --delete-tags; done",
780
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
781
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
782
- "echo Uploading SBOM to Dependency Track",
783
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/worker" "https://pan-test-app-dev-worker-unknown-host.example.com" "__sbom.json" vex.json || true",
784
- ],
785
- "services": [
786
- {
787
- "command": [
788
- "--tls=false",
789
- ],
790
- "name": "docker:24.0.6-dind",
791
- },
792
- ],
793
- "stage": "deploy dev",
794
- "variables": {
795
- "APP_DIR": "api",
796
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
797
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
798
- "BUILD_INFO_ID": "some-id",
799
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
800
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
801
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
802
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
803
- "DB_NAME": "pan-test-app-dev-api",
804
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
805
- "DB_USER": "my-user",
806
- "DOCKER_BUILDKIT": "1",
807
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
808
- "DOCKER_DRIVER": "overlay2",
809
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
810
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/worker",
811
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
812
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
813
- "DOCKER_TLS_CERTDIR": "",
814
- "ENV_SHORT": "dev",
815
- "ENV_TYPE": "dev",
816
- "ENV_VARS": "ENV_SHORT: 'dev'
817
- APP_DIR: 'api'
818
- ENV_TYPE: 'dev'
819
- BUILD_INFO_ID: 'some-id'
820
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
821
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
822
- HOST: 'pan-test-app-dev-worker-unknown-host.example.com'
823
- ROOT_URL: 'https://pan-test-app-dev-worker-unknown-host.example.com'
824
- HOST_CANONICAL: 'pan-test-app-dev-worker-unknown-host.example.com'
825
- ROOT_URL_INTERNAL: 'https://pan-test-app-dev-worker-unknown-host.example.com'
826
- HOST_INTERNAL: 'pan-test-app-dev-worker-unknown-host.example.com'
827
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
828
- DB_NAME: 'pan-test-app-dev-api'
829
- DB_USER: 'my-user'
830
- DB_PASSWORD: '$CL_dev_api_DB_PASSWORD'
831
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
832
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
833
- GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_worker_GCLOUD_RUN_canonicalHostSuffix'
834
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
835
- ",
836
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_worker_GCLOUD_DEPLOY_credentialsKey",
837
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_worker_GCLOUD_RUN_canonicalHostSuffix",
838
- "HOST": "pan-test-app-dev-worker-unknown-host.example.com",
839
- "HOST_CANONICAL": "pan-test-app-dev-worker-unknown-host.example.com",
840
- "HOST_INTERNAL": "pan-test-app-dev-worker-unknown-host.example.com",
841
- "KUBERNETES_CPU_REQUEST": "0.5",
842
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
843
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
844
- "ROOT_URL": "https://pan-test-app-dev-worker-unknown-host.example.com",
845
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-worker-unknown-host.example.com",
846
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
847
- },
848
- },
849
- "worker 🛑 Stop ⚠️ | dev ": {
850
- "environment": {
851
- "action": "stop",
852
- "name": "dev/worker",
853
- "url": "https://pan-test-app-dev-worker-unknown-host.example.com",
854
- },
855
- "image": "path/to/docker/gcloud:the-version",
856
- "interruptible": true,
857
- "needs": [],
858
- "retry": {
859
- "max": 2,
860
- "when": [
861
- "runner_system_failure",
862
- "stuck_or_timeout_failure",
863
- ],
864
- },
865
- "rules": [
866
- {
867
- "allow_failure": true,
868
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
869
- "when": "on_success",
870
- },
871
- {
872
- "allow_failure": true,
873
- "when": "manual",
874
- },
875
- ],
876
- "script": [
877
- "set +e",
878
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_worker_GCLOUD_DEPLOY_credentialsKey")",
879
- "gcloud run services delete pan-test-app-dev-worker --project=google-project-id --region=europe-west6",
880
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/worker --quiet --delete-tags",
881
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
882
- "echo Disabling component in Dependency Track",
883
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/worker" "https://pan-test-app-dev-worker-unknown-host.example.com" || true",
884
- "set -e",
885
- ],
886
- "stage": "stop dev",
887
- "variables": {
888
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
889
- "GIT_STRATEGY": "none",
890
- "KUBERNETES_CPU_REQUEST": "0.5",
891
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
892
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
893
- },
894
- },
895
- "worker 🛡 audit": {
896
- "allow_failure": true,
897
- "image": "path/to/docker/jobs-default:the-version",
898
- "interruptible": true,
899
- "needs": [],
900
- "retry": {
901
- "max": 2,
902
- "when": [
903
- "runner_system_failure",
904
- "stuck_or_timeout_failure",
905
- ],
906
- },
907
- "script": [
908
- "cd api",
909
- "yarn npm audit --environment production",
910
- ],
911
- "stage": "test",
912
- "variables": {
913
- "APP_PATH": "api",
914
- "KUBERNETES_CPU_REQUEST": "0.5",
915
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
916
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
917
- },
918
- },
919
- "worker 🧪 test": {
920
- "cache": [
921
- {
922
- "key": "api-yarn",
923
- "paths": [
924
- "api/.yarn",
925
- ],
926
- "policy": "pull-push",
927
- },
928
- {
929
- "key": "api-node-modules",
930
- "paths": [
931
- "api/node_modules",
932
- ],
933
- "policy": "pull-push",
934
- },
935
- ],
936
- "image": "path/to/docker/jobs-testing-chrome:the-version",
937
- "interruptible": true,
938
- "needs": [],
939
- "retry": {
940
- "max": 2,
941
- "when": [
942
- "runner_system_failure",
943
- "stuck_or_timeout_failure",
944
- ],
945
- },
946
- "script": [
947
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
948
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
949
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
950
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
951
- "cd api",
952
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
953
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
954
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
955
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
956
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
957
- "yarn install --immutable",
958
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
959
- "yarn test",
960
- ],
961
- "stage": "test",
962
- "variables": {
963
- "APP_PATH": "api",
964
- "KUBERNETES_CPU_REQUEST": "0.5",
965
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
966
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
967
- },
968
- },
969
- "worker 🧾 sbom | dev ": {
970
- "allow_failure": true,
971
- "artifacts": {
972
- "paths": [
973
- "__sbom.json",
974
- ],
975
- },
976
- "image": "aquasec/trivy:0.38.3",
977
- "interruptible": true,
978
- "needs": [],
979
- "retry": {
980
- "max": 2,
981
- "when": [
982
- "runner_system_failure",
983
- "stuck_or_timeout_failure",
984
- ],
985
- },
986
- "script": [
987
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
988
- ],
989
- "stage": "build",
990
- "variables": {},
991
- },
992
- },
993
- "stages": [
994
- "setup",
995
- "setup dev",
996
- "setup review",
997
- "setup stage",
998
- "setup prod",
999
- "setup local",
1000
- "test",
1001
- "test dev",
1002
- "test review",
1003
- "test stage",
1004
- "test prod",
1005
- "test local",
1006
- "build",
1007
- "build dev",
1008
- "build review",
1009
- "build stage",
1010
- "build prod",
1011
- "build local",
1012
- "deploy",
1013
- "deploy dev",
1014
- "deploy review",
1015
- "deploy stage",
1016
- "deploy prod",
1017
- "deploy local",
1018
- "verify",
1019
- "verify dev",
1020
- "verify review",
1021
- "verify stage",
1022
- "verify prod",
1023
- "verify local",
1024
- "rollback",
1025
- "rollback dev",
1026
- "rollback review",
1027
- "rollback stage",
1028
- "rollback prod",
1029
- "rollback local",
1030
- "stop",
1031
- "stop dev",
1032
- "stop review",
1033
- "stop stage",
1034
- "stop prod",
1035
- "stop local",
1036
- ],
1037
- "variables": {
1038
- "FF_USE_FASTZIP": "true",
1039
- "GIT_DEPTH": 1,
1040
- },
1041
- "workflow": {
1042
- "rules": [
1043
- {
1044
- "if": "$CI_COMMIT_TAG",
1045
- },
1046
- {
1047
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1048
- "when": "never",
1049
- },
1050
- {
1051
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1052
- },
1053
- {
1054
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1055
- },
1056
- {
1057
- "if": "$CI_MERGE_REQUEST_ID",
1058
- },
1059
- ],
1060
- },
1061
- },
1062
- "mr": {
1063
- "image": "path/to/docker/jobs-default:the-version",
1064
- "jobs": {
1065
- "api 👮 lint": {
1066
- "cache": [
1067
- {
1068
- "key": "api-yarn",
1069
- "paths": [
1070
- "api/.yarn",
1071
- ],
1072
- "policy": "pull-push",
1073
- },
1074
- {
1075
- "key": "api-node-modules",
1076
- "paths": [
1077
- "api/node_modules",
1078
- ],
1079
- "policy": "pull-push",
1080
- },
1081
- ],
1082
- "image": "path/to/docker/jobs-default:the-version",
1083
- "interruptible": true,
1084
- "needs": [],
1085
- "retry": {
1086
- "max": 2,
1087
- "when": [
1088
- "runner_system_failure",
1089
- "stuck_or_timeout_failure",
1090
- ],
1091
- },
1092
- "script": [
1093
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1094
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1095
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1096
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1097
- "cd api",
1098
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1099
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1100
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1101
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1102
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1103
- "yarn install --immutable",
1104
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1105
- "yarn lint",
1106
- ],
1107
- "stage": "test",
1108
- "variables": {
1109
- "APP_PATH": "api",
1110
- "KUBERNETES_CPU_REQUEST": "0.5",
1111
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1112
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1113
- },
1114
- },
1115
- "api 🔨 app | review ": {
1116
- "artifacts": {
1117
- "expire_in": "1 day",
1118
- "paths": [
1119
- "api/__build_info.json",
1120
- "api/dist",
1121
- "api/.next",
1122
- ],
1123
- "reports": {
1124
- "junit": undefined,
1125
- },
1126
- "when": "always",
1127
- },
1128
- "cache": [
1129
- {
1130
- "key": "api-yarn",
1131
- "paths": [
1132
- "api/.yarn",
1133
- ],
1134
- "policy": "pull-push",
1135
- },
1136
- {
1137
- "key": "api-node-modules",
1138
- "paths": [
1139
- "api/node_modules",
1140
- ],
1141
- "policy": "pull-push",
1142
- },
1143
- {
1144
- "key": "api-next-cache",
1145
- "paths": [
1146
- "api/.next/cache/",
1147
- ],
1148
- "policy": "pull-push",
1149
- },
1150
- ],
1151
- "image": "path/to/docker/jobs-default:the-version",
1152
- "interruptible": true,
1153
- "needs": [],
1154
- "retry": {
1155
- "max": 2,
1156
- "when": [
1157
- "runner_system_failure",
1158
- "stuck_or_timeout_failure",
1159
- ],
1160
- },
1161
- "script": [
1162
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1163
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1164
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1165
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1166
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1167
- "cd api",
1168
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1169
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1170
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1171
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1172
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1173
- "yarn install --immutable",
1174
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1175
- "yarn build",
1176
- ],
1177
- "stage": "build",
1178
- "variables": {
1179
- "APP_DIR": "api",
1180
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1181
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1182
- "BUILD_INFO_ID": "some-id",
1183
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1184
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1185
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1186
- "DB_NAME": "pan-test-app-review-mr1234-api",
1187
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1188
- "DB_USER": "my-user",
1189
- "ENV_SHORT": "review",
1190
- "ENV_TYPE": "review",
1191
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
1192
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
1193
- "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1194
- "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1195
- "HOST_INTERNAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1196
- "KUBERNETES_CPU_REQUEST": "0.5",
1197
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1198
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1199
- "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1200
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1201
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1202
- },
1203
- },
1204
- "api 🔨 docker | review ": {
1205
- "cache": [
1206
- {
1207
- "key": "api-yarn",
1208
- "paths": [
1209
- "api/.yarn",
1210
- ],
1211
- "policy": "pull",
1212
- },
1213
- ],
1214
- "image": "path/to/docker/docker-build:the-version",
1215
- "interruptible": true,
1216
- "needs": [
1217
- "api 🔨 app | review ",
1218
- ],
1219
- "retry": {
1220
- "max": 2,
1221
- "when": [
1222
- "runner_system_failure",
1223
- "stuck_or_timeout_failure",
1224
- ],
1225
- },
1226
- "script": [
1227
- "ensureNodeDockerfile",
1228
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
1229
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
1230
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
1231
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
1232
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
1233
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1234
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
1235
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
1236
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1237
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1238
- "docker push $DOCKER_CACHE_IMAGE",
1239
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
1240
- ],
1241
- "services": [
1242
- {
1243
- "command": [
1244
- "--tls=false",
1245
- ],
1246
- "name": "docker:24.0.6-dind",
1247
- },
1248
- ],
1249
- "stage": "build",
1250
- "variables": {
1251
- "APP_DIR": "api",
1252
- "DOCKERFILE_ADDITIONS": undefined,
1253
- "DOCKERFILE_ADDITIONS_END": undefined,
1254
- "DOCKER_BUILDKIT": "1",
1255
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
1256
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1257
- RUN yarn plugin import workspace-tools
1258
- RUN yarn workspaces focus --production && yarn rebuild",
1259
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1260
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1261
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1262
- COPY --chown=node:node .yarn /app/.yarn",
1263
- "DOCKER_DIR": ".",
1264
- "DOCKER_DRIVER": "overlay2",
1265
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1266
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234",
1267
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1268
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1269
- "DOCKER_TLS_CERTDIR": "",
1270
- "KUBERNETES_CPU_REQUEST": "0.5",
1271
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1272
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1273
- },
1274
- },
1275
- "api 🚀 Deploy | review ": {
1276
- "allow_failure": false,
1277
- "artifacts": {
1278
- "paths": [
1279
- "____envvars.yaml",
1280
- ],
1281
- },
1282
- "environment": {
1283
- "auto_stop_in": "1 week",
1284
- "name": "review/some-commit/api",
1285
- "on_stop": "api 🛑 Stop ⚠️ | review ",
1286
- "url": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1287
- },
1288
- "image": "path/to/docker/gcloud:the-version",
1289
- "interruptible": true,
1290
- "needs": [
1291
- {
1292
- "artifacts": false,
1293
- "job": "api 👮 lint",
1294
- },
1295
- {
1296
- "artifacts": false,
1297
- "job": "api 🔨 app | review ",
1298
- },
1299
- {
1300
- "artifacts": false,
1301
- "job": "api 🔨 docker | review ",
1302
- },
1303
- {
1304
- "artifacts": false,
1305
- "job": "api 🧪 test",
1306
- },
1307
- {
1308
- "artifacts": true,
1309
- "job": "api 🧾 sbom | review ",
1310
- },
1311
- {
1312
- "artifacts": false,
1313
- "job": "api 🛡 audit",
1314
- },
1315
- ],
1316
- "retry": {
1317
- "max": 2,
1318
- "when": [
1319
- "runner_system_failure",
1320
- "stuck_or_timeout_failure",
1321
- ],
1322
- },
1323
- "rules": [
1324
- {
1325
- "when": "on_success",
1326
- },
1327
- ],
1328
- "script": [
1329
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1330
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
1331
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
1332
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1333
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1334
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1335
- "echo "$ENV_VARS" > ____envvars.yaml",
1336
- "set +e",
1337
- "echo "ensuring Database..."",
1338
- "gcloud sql databases create pan-test-app-review-mr1234-api --instance=instancename --project projectId",
1339
- "set -e",
1340
- "gcloud run deploy pan-test-app-review-mr1234-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-service-name=pan-test-app-review-mr1234-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
1341
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1342
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
1343
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-review-mr1234-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
1344
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234@$version --quiet --delete-tags; done",
1345
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1346
- "set +e",
1347
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
1348
- "set -e",
1349
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
1350
- "echo Uploading SBOM to Dependency Track",
1351
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" "__sbom.json" vex.json || true",
1352
- ],
1353
- "services": [
1354
- {
1355
- "command": [
1356
- "--tls=false",
1357
- ],
1358
- "name": "docker:24.0.6-dind",
1359
- },
1360
- ],
1361
- "stage": "deploy review",
1362
- "variables": {
1363
- "APP_DIR": "api",
1364
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1365
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1366
- "BUILD_INFO_ID": "some-id",
1367
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1368
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1369
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1370
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1371
- "DB_NAME": "pan-test-app-review-mr1234-api",
1372
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1373
- "DB_USER": "my-user",
1374
- "DOCKER_BUILDKIT": "1",
1375
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
1376
- "DOCKER_DRIVER": "overlay2",
1377
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1378
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234",
1379
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1380
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1381
- "DOCKER_TLS_CERTDIR": "",
1382
- "ENV_SHORT": "review",
1383
- "ENV_TYPE": "review",
1384
- "ENV_VARS": "ENV_SHORT: 'review'
1385
- APP_DIR: 'api'
1386
- ENV_TYPE: 'review'
1387
- BUILD_INFO_ID: 'some-id'
1388
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1389
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1390
- HOST: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1391
- ROOT_URL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
1392
- HOST_CANONICAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1393
- ROOT_URL_INTERNAL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
1394
- HOST_INTERNAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1395
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
1396
- DB_NAME: 'pan-test-app-review-mr1234-api'
1397
- DB_USER: 'my-user'
1398
- DB_PASSWORD: '$CL_review_api_DB_PASSWORD'
1399
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
1400
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
1401
- GCLOUD_RUN_canonicalHostSuffix: '$CL_review_api_GCLOUD_RUN_canonicalHostSuffix'
1402
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
1403
- ",
1404
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
1405
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
1406
- "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1407
- "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1408
- "HOST_INTERNAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1409
- "KUBERNETES_CPU_REQUEST": "0.5",
1410
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1411
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1412
- "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1413
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1414
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1415
- },
1416
- },
1417
- "api 🛑 Stop ⚠️ | review ": {
1418
- "environment": {
1419
- "action": "stop",
1420
- "name": "review/some-commit/api",
1421
- "url": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1422
- },
1423
- "image": "path/to/docker/gcloud:the-version",
1424
- "interruptible": true,
1425
- "needs": [],
1426
- "retry": {
1427
- "max": 2,
1428
- "when": [
1429
- "runner_system_failure",
1430
- "stuck_or_timeout_failure",
1431
- ],
1432
- },
1433
- "rules": [
1434
- {
1435
- "allow_failure": true,
1436
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1437
- "when": "on_success",
1438
- },
1439
- {
1440
- "allow_failure": true,
1441
- "when": "manual",
1442
- },
1443
- ],
1444
- "script": [
1445
- "set +e",
1446
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
1447
- "gcloud run services delete pan-test-app-review-mr1234-api --project=google-project-id --region=europe-west6",
1448
- "echo "deleting database pan-test-app-review-mr1234-api..."",
1449
- "echo "👆 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down"",
1450
- "
1451
- until gcloud sql databases delete pan-test-app-review-mr1234-api --instance=instancename --project projectId
1452
- do
1453
- echo "Trying again."
1454
- sleep 10
1455
- done
1456
- ",
1457
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234 --quiet --delete-tags",
1458
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1459
- "set +e",
1460
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
1461
- "set -e",
1462
- "echo Disabling component in Dependency Track",
1463
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" || true",
1464
- "set -e",
1465
- ],
1466
- "stage": "stop review",
1467
- "variables": {
1468
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1469
- "GIT_STRATEGY": "none",
1470
- "KUBERNETES_CPU_REQUEST": "0.5",
1471
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1472
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1473
- },
1474
- },
1475
- "api 🛡 audit": {
1476
- "allow_failure": true,
1477
- "image": "path/to/docker/jobs-default:the-version",
1478
- "interruptible": true,
1479
- "needs": [],
1480
- "retry": {
1481
- "max": 2,
1482
- "when": [
1483
- "runner_system_failure",
1484
- "stuck_or_timeout_failure",
1485
- ],
1486
- },
1487
- "script": [
1488
- "cd api",
1489
- "yarn npm audit --environment production",
1490
- ],
1491
- "stage": "test",
1492
- "variables": {
1493
- "APP_PATH": "api",
1494
- "KUBERNETES_CPU_REQUEST": "0.5",
1495
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1496
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1497
- },
1498
- },
1499
- "api 🧪 test": {
1500
- "cache": [
1501
- {
1502
- "key": "api-yarn",
1503
- "paths": [
1504
- "api/.yarn",
1505
- ],
1506
- "policy": "pull-push",
1507
- },
1508
- {
1509
- "key": "api-node-modules",
1510
- "paths": [
1511
- "api/node_modules",
1512
- ],
1513
- "policy": "pull-push",
1514
- },
1515
- ],
1516
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1517
- "interruptible": true,
1518
- "needs": [],
1519
- "retry": {
1520
- "max": 2,
1521
- "when": [
1522
- "runner_system_failure",
1523
- "stuck_or_timeout_failure",
1524
- ],
1525
- },
1526
- "script": [
1527
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1528
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1529
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1530
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1531
- "cd api",
1532
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1533
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1534
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1535
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1536
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1537
- "yarn install --immutable",
1538
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1539
- "yarn test",
1540
- ],
1541
- "stage": "test",
1542
- "variables": {
1543
- "APP_PATH": "api",
1544
- "KUBERNETES_CPU_REQUEST": "0.5",
1545
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1546
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1547
- },
1548
- },
1549
- "api 🧾 sbom | review ": {
1550
- "allow_failure": true,
1551
- "artifacts": {
1552
- "paths": [
1553
- "__sbom.json",
1554
- ],
1555
- },
1556
- "image": "aquasec/trivy:0.38.3",
1557
- "interruptible": true,
1558
- "needs": [],
1559
- "retry": {
1560
- "max": 2,
1561
- "when": [
1562
- "runner_system_failure",
1563
- "stuck_or_timeout_failure",
1564
- ],
1565
- },
1566
- "script": [
1567
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
1568
- ],
1569
- "stage": "build",
1570
- "variables": {},
1571
- },
1572
- "worker 👮 lint": {
1573
- "cache": [
1574
- {
1575
- "key": "api-yarn",
1576
- "paths": [
1577
- "api/.yarn",
1578
- ],
1579
- "policy": "pull-push",
1580
- },
1581
- {
1582
- "key": "api-node-modules",
1583
- "paths": [
1584
- "api/node_modules",
1585
- ],
1586
- "policy": "pull-push",
1587
- },
1588
- ],
1589
- "image": "path/to/docker/jobs-default:the-version",
1590
- "interruptible": true,
1591
- "needs": [],
1592
- "retry": {
1593
- "max": 2,
1594
- "when": [
1595
- "runner_system_failure",
1596
- "stuck_or_timeout_failure",
1597
- ],
1598
- },
1599
- "script": [
1600
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1601
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1602
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1603
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1604
- "cd api",
1605
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1606
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1607
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1608
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1609
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1610
- "yarn install --immutable",
1611
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1612
- "yarn lint",
1613
- ],
1614
- "stage": "test",
1615
- "variables": {
1616
- "APP_PATH": "api",
1617
- "KUBERNETES_CPU_REQUEST": "0.5",
1618
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1619
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1620
- },
1621
- },
1622
- "worker 🔨 app | review ": {
1623
- "artifacts": {
1624
- "expire_in": "1 day",
1625
- "paths": [
1626
- "api/__build_info.json",
1627
- "api/dist",
1628
- "api/.next",
1629
- ],
1630
- "reports": {
1631
- "junit": undefined,
1632
- },
1633
- "when": "always",
1634
- },
1635
- "cache": [
1636
- {
1637
- "key": "api-yarn",
1638
- "paths": [
1639
- "api/.yarn",
1640
- ],
1641
- "policy": "pull-push",
1642
- },
1643
- {
1644
- "key": "api-node-modules",
1645
- "paths": [
1646
- "api/node_modules",
1647
- ],
1648
- "policy": "pull-push",
1649
- },
1650
- {
1651
- "key": "worker-next-cache",
1652
- "paths": [
1653
- "api/.next/cache/",
1654
- ],
1655
- "policy": "pull-push",
1656
- },
1657
- ],
1658
- "image": "path/to/docker/jobs-default:the-version",
1659
- "interruptible": true,
1660
- "needs": [],
1661
- "retry": {
1662
- "max": 2,
1663
- "when": [
1664
- "runner_system_failure",
1665
- "stuck_or_timeout_failure",
1666
- ],
1667
- },
1668
- "script": [
1669
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1670
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1671
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1672
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1673
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1674
- "cd api",
1675
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1676
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1677
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1678
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1679
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1680
- "yarn install --immutable",
1681
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1682
- "yarn build:worker",
1683
- ],
1684
- "stage": "build",
1685
- "variables": {
1686
- "APP_DIR": "api",
1687
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1688
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1689
- "BUILD_INFO_ID": "some-id",
1690
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1691
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1692
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1693
- "DB_NAME": "pan-test-app-review-mr1234-api",
1694
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1695
- "DB_USER": "my-user",
1696
- "ENV_SHORT": "review",
1697
- "ENV_TYPE": "review",
1698
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_worker_GCLOUD_DEPLOY_credentialsKey",
1699
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_worker_GCLOUD_RUN_canonicalHostSuffix",
1700
- "HOST": "pan-test-app-review-mr1234-worker-unknown-host.example.com",
1701
- "HOST_CANONICAL": "pan-test-app-review-mr1234-worker-unknown-host.example.com",
1702
- "HOST_INTERNAL": "pan-test-app-review-mr1234-worker-unknown-host.example.com",
1703
- "KUBERNETES_CPU_REQUEST": "0.5",
1704
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1705
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1706
- "ROOT_URL": "https://pan-test-app-review-mr1234-worker-unknown-host.example.com",
1707
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-worker-unknown-host.example.com",
1708
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1709
- },
1710
- },
1711
- "worker 🔨 docker | review ": {
1712
- "cache": [
1713
- {
1714
- "key": "api-yarn",
1715
- "paths": [
1716
- "api/.yarn",
1717
- ],
1718
- "policy": "pull",
1719
- },
1720
- ],
1721
- "image": "path/to/docker/docker-build:the-version",
1722
- "interruptible": true,
1723
- "needs": [
1724
- "worker 🔨 app | review ",
1725
- ],
1726
- "retry": {
1727
- "max": 2,
1728
- "when": [
1729
- "runner_system_failure",
1730
- "stuck_or_timeout_failure",
1731
- ],
1732
- },
1733
- "script": [
1734
- "ensureNodeDockerfile",
1735
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
1736
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_worker_GCLOUD_DEPLOY_credentialsKey")",
1737
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
1738
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
1739
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
1740
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1741
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
1742
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
1743
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1744
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1745
- "docker push $DOCKER_CACHE_IMAGE",
1746
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
1747
- ],
1748
- "services": [
1749
- {
1750
- "command": [
1751
- "--tls=false",
1752
- ],
1753
- "name": "docker:24.0.6-dind",
1754
- },
1755
- ],
1756
- "stage": "build",
1757
- "variables": {
1758
- "APP_DIR": "api",
1759
- "DOCKERFILE_ADDITIONS": undefined,
1760
- "DOCKERFILE_ADDITIONS_END": undefined,
1761
- "DOCKER_BUILDKIT": "1",
1762
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
1763
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1764
- RUN yarn plugin import workspace-tools
1765
- RUN yarn workspaces focus --production && yarn rebuild",
1766
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1767
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1768
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1769
- COPY --chown=node:node .yarn /app/.yarn",
1770
- "DOCKER_DIR": ".",
1771
- "DOCKER_DRIVER": "overlay2",
1772
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1773
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker/mr1234",
1774
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1775
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1776
- "DOCKER_TLS_CERTDIR": "",
1777
- "KUBERNETES_CPU_REQUEST": "0.5",
1778
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1779
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1780
- },
1781
- },
1782
- "worker 🚀 Deploy | review ": {
1783
- "allow_failure": false,
1784
- "artifacts": {
1785
- "paths": [
1786
- "____envvars.yaml",
1787
- ],
1788
- },
1789
- "environment": {
1790
- "auto_stop_in": "1 week",
1791
- "name": "review/some-commit/worker",
1792
- "on_stop": "worker 🛑 Stop ⚠️ | review ",
1793
- "url": "https://pan-test-app-review-mr1234-worker-unknown-host.example.com",
1794
- },
1795
- "image": "path/to/docker/gcloud:the-version",
1796
- "interruptible": true,
1797
- "needs": [
1798
- {
1799
- "artifacts": false,
1800
- "job": "worker 👮 lint",
1801
- },
1802
- {
1803
- "artifacts": false,
1804
- "job": "worker 🔨 app | review ",
1805
- },
1806
- {
1807
- "artifacts": false,
1808
- "job": "worker 🔨 docker | review ",
1809
- },
1810
- {
1811
- "artifacts": false,
1812
- "job": "worker 🧪 test",
1813
- },
1814
- {
1815
- "artifacts": true,
1816
- "job": "worker 🧾 sbom | review ",
1817
- },
1818
- {
1819
- "artifacts": false,
1820
- "job": "worker 🛡 audit",
1821
- },
1822
- ],
1823
- "retry": {
1824
- "max": 2,
1825
- "when": [
1826
- "runner_system_failure",
1827
- "stuck_or_timeout_failure",
1828
- ],
1829
- },
1830
- "rules": [
1831
- {
1832
- "when": "on_success",
1833
- },
1834
- ],
1835
- "script": [
1836
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1837
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_worker_GCLOUD_DEPLOY_credentialsKey")",
1838
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
1839
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1840
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1841
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1842
- "echo "$ENV_VARS" > ____envvars.yaml",
1843
- "set +e",
1844
- "echo "ensuring Database..."",
1845
- "gcloud sql databases create pan-test-app-review-mr1234-api --instance=instancename --project projectId",
1846
- "set -e",
1847
- "gcloud run deploy pan-test-app-review-mr1234-worker --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=worker,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-service-name=pan-test-app-review-mr1234-worker --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
1848
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1849
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
1850
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-review-mr1234-worker --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
1851
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker/mr1234 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker/mr1234@$version --quiet --delete-tags; done",
1852
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
1853
- "set +e",
1854
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker --quiet --delete-tags",
1855
- "set -e",
1856
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
1857
- "echo Uploading SBOM to Dependency Track",
1858
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/worker" "https://pan-test-app-review-mr1234-worker-unknown-host.example.com" "__sbom.json" vex.json || true",
1859
- ],
1860
- "services": [
1861
- {
1862
- "command": [
1863
- "--tls=false",
1864
- ],
1865
- "name": "docker:24.0.6-dind",
1866
- },
1867
- ],
1868
- "stage": "deploy review",
1869
- "variables": {
1870
- "APP_DIR": "api",
1871
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1872
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1873
- "BUILD_INFO_ID": "some-id",
1874
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1875
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1876
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1877
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1878
- "DB_NAME": "pan-test-app-review-mr1234-api",
1879
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1880
- "DB_USER": "my-user",
1881
- "DOCKER_BUILDKIT": "1",
1882
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
1883
- "DOCKER_DRIVER": "overlay2",
1884
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1885
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker/mr1234",
1886
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1887
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1888
- "DOCKER_TLS_CERTDIR": "",
1889
- "ENV_SHORT": "review",
1890
- "ENV_TYPE": "review",
1891
- "ENV_VARS": "ENV_SHORT: 'review'
1892
- APP_DIR: 'api'
1893
- ENV_TYPE: 'review'
1894
- BUILD_INFO_ID: 'some-id'
1895
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1896
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1897
- HOST: 'pan-test-app-review-mr1234-worker-unknown-host.example.com'
1898
- ROOT_URL: 'https://pan-test-app-review-mr1234-worker-unknown-host.example.com'
1899
- HOST_CANONICAL: 'pan-test-app-review-mr1234-worker-unknown-host.example.com'
1900
- ROOT_URL_INTERNAL: 'https://pan-test-app-review-mr1234-worker-unknown-host.example.com'
1901
- HOST_INTERNAL: 'pan-test-app-review-mr1234-worker-unknown-host.example.com'
1902
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
1903
- DB_NAME: 'pan-test-app-review-mr1234-api'
1904
- DB_USER: 'my-user'
1905
- DB_PASSWORD: '$CL_review_api_DB_PASSWORD'
1906
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
1907
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
1908
- GCLOUD_RUN_canonicalHostSuffix: '$CL_review_worker_GCLOUD_RUN_canonicalHostSuffix'
1909
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
1910
- ",
1911
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_worker_GCLOUD_DEPLOY_credentialsKey",
1912
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_worker_GCLOUD_RUN_canonicalHostSuffix",
1913
- "HOST": "pan-test-app-review-mr1234-worker-unknown-host.example.com",
1914
- "HOST_CANONICAL": "pan-test-app-review-mr1234-worker-unknown-host.example.com",
1915
- "HOST_INTERNAL": "pan-test-app-review-mr1234-worker-unknown-host.example.com",
1916
- "KUBERNETES_CPU_REQUEST": "0.5",
1917
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1918
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1919
- "ROOT_URL": "https://pan-test-app-review-mr1234-worker-unknown-host.example.com",
1920
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-worker-unknown-host.example.com",
1921
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1922
- },
1923
- },
1924
- "worker 🛑 Stop ⚠️ | review ": {
1925
- "environment": {
1926
- "action": "stop",
1927
- "name": "review/some-commit/worker",
1928
- "url": "https://pan-test-app-review-mr1234-worker-unknown-host.example.com",
1929
- },
1930
- "image": "path/to/docker/gcloud:the-version",
1931
- "interruptible": true,
1932
- "needs": [],
1933
- "retry": {
1934
- "max": 2,
1935
- "when": [
1936
- "runner_system_failure",
1937
- "stuck_or_timeout_failure",
1938
- ],
1939
- },
1940
- "rules": [
1941
- {
1942
- "allow_failure": true,
1943
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1944
- "when": "on_success",
1945
- },
1946
- {
1947
- "allow_failure": true,
1948
- "when": "manual",
1949
- },
1950
- ],
1951
- "script": [
1952
- "set +e",
1953
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_worker_GCLOUD_DEPLOY_credentialsKey")",
1954
- "gcloud run services delete pan-test-app-review-mr1234-worker --project=google-project-id --region=europe-west6",
1955
- "echo "deleting database pan-test-app-review-mr1234-api..."",
1956
- "echo "👆 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down"",
1957
- "
1958
- until gcloud sql databases delete pan-test-app-review-mr1234-api --instance=instancename --project projectId
1959
- do
1960
- echo "Trying again."
1961
- sleep 10
1962
- done
1963
- ",
1964
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker/mr1234 --quiet --delete-tags",
1965
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
1966
- "set +e",
1967
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/worker --quiet --delete-tags",
1968
- "set -e",
1969
- "echo Disabling component in Dependency Track",
1970
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/worker" "https://pan-test-app-review-mr1234-worker-unknown-host.example.com" || true",
1971
- "set -e",
1972
- ],
1973
- "stage": "stop review",
1974
- "variables": {
1975
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1976
- "GIT_STRATEGY": "none",
1977
- "KUBERNETES_CPU_REQUEST": "0.5",
1978
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1979
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1980
- },
1981
- },
1982
- "worker 🛡 audit": {
1983
- "allow_failure": true,
1984
- "image": "path/to/docker/jobs-default:the-version",
1985
- "interruptible": true,
1986
- "needs": [],
1987
- "retry": {
1988
- "max": 2,
1989
- "when": [
1990
- "runner_system_failure",
1991
- "stuck_or_timeout_failure",
1992
- ],
1993
- },
1994
- "script": [
1995
- "cd api",
1996
- "yarn npm audit --environment production",
1997
- ],
1998
- "stage": "test",
1999
- "variables": {
2000
- "APP_PATH": "api",
2001
- "KUBERNETES_CPU_REQUEST": "0.5",
2002
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2003
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2004
- },
2005
- },
2006
- "worker 🧪 test": {
2007
- "cache": [
2008
- {
2009
- "key": "api-yarn",
2010
- "paths": [
2011
- "api/.yarn",
2012
- ],
2013
- "policy": "pull-push",
2014
- },
2015
- {
2016
- "key": "api-node-modules",
2017
- "paths": [
2018
- "api/node_modules",
2019
- ],
2020
- "policy": "pull-push",
2021
- },
2022
- ],
2023
- "image": "path/to/docker/jobs-testing-chrome:the-version",
2024
- "interruptible": true,
2025
- "needs": [],
2026
- "retry": {
2027
- "max": 2,
2028
- "when": [
2029
- "runner_system_failure",
2030
- "stuck_or_timeout_failure",
2031
- ],
2032
- },
2033
- "script": [
2034
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2035
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2036
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2037
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2038
- "cd api",
2039
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2040
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2041
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2042
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2043
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2044
- "yarn install --immutable",
2045
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2046
- "yarn test",
2047
- ],
2048
- "stage": "test",
2049
- "variables": {
2050
- "APP_PATH": "api",
2051
- "KUBERNETES_CPU_REQUEST": "0.5",
2052
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2053
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2054
- },
2055
- },
2056
- "worker 🧾 sbom | review ": {
2057
- "allow_failure": true,
2058
- "artifacts": {
2059
- "paths": [
2060
- "__sbom.json",
2061
- ],
2062
- },
2063
- "image": "aquasec/trivy:0.38.3",
2064
- "interruptible": true,
2065
- "needs": [],
2066
- "retry": {
2067
- "max": 2,
2068
- "when": [
2069
- "runner_system_failure",
2070
- "stuck_or_timeout_failure",
2071
- ],
2072
- },
2073
- "script": [
2074
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2075
- ],
2076
- "stage": "build",
2077
- "variables": {},
2078
- },
2079
- },
2080
- "stages": [
2081
- "setup",
2082
- "setup dev",
2083
- "setup review",
2084
- "setup stage",
2085
- "setup prod",
2086
- "setup local",
2087
- "test",
2088
- "test dev",
2089
- "test review",
2090
- "test stage",
2091
- "test prod",
2092
- "test local",
2093
- "build",
2094
- "build dev",
2095
- "build review",
2096
- "build stage",
2097
- "build prod",
2098
- "build local",
2099
- "deploy",
2100
- "deploy dev",
2101
- "deploy review",
2102
- "deploy stage",
2103
- "deploy prod",
2104
- "deploy local",
2105
- "verify",
2106
- "verify dev",
2107
- "verify review",
2108
- "verify stage",
2109
- "verify prod",
2110
- "verify local",
2111
- "rollback",
2112
- "rollback dev",
2113
- "rollback review",
2114
- "rollback stage",
2115
- "rollback prod",
2116
- "rollback local",
2117
- "stop",
2118
- "stop dev",
2119
- "stop review",
2120
- "stop stage",
2121
- "stop prod",
2122
- "stop local",
2123
- ],
2124
- "variables": {
2125
- "FF_USE_FASTZIP": "true",
2126
- "GIT_DEPTH": 1,
2127
- },
2128
- "workflow": {
2129
- "rules": [
2130
- {
2131
- "if": "$CI_COMMIT_TAG",
2132
- },
2133
- {
2134
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2135
- "when": "never",
2136
- },
2137
- {
2138
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2139
- },
2140
- {
2141
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2142
- },
2143
- {
2144
- "if": "$CI_MERGE_REQUEST_ID",
2145
- },
2146
- ],
2147
- },
2148
- },
2149
- "taggedRelease": {
2150
- "image": "path/to/docker/jobs-default:the-version",
2151
- "jobs": {
2152
- "api 🔨 app | prod ": {
2153
- "artifacts": {
2154
- "expire_in": "1 day",
2155
- "paths": [
2156
- "api/__build_info.json",
2157
- "api/dist",
2158
- "api/.next",
2159
- ],
2160
- "reports": {
2161
- "junit": undefined,
2162
- },
2163
- "when": "always",
2164
- },
2165
- "cache": [
2166
- {
2167
- "key": "api-yarn",
2168
- "paths": [
2169
- "api/.yarn",
2170
- ],
2171
- "policy": "pull-push",
2172
- },
2173
- {
2174
- "key": "api-node-modules",
2175
- "paths": [
2176
- "api/node_modules",
2177
- ],
2178
- "policy": "pull-push",
2179
- },
2180
- {
2181
- "key": "api-next-cache",
2182
- "paths": [
2183
- "api/.next/cache/",
2184
- ],
2185
- "policy": "pull-push",
2186
- },
2187
- ],
2188
- "image": "path/to/docker/jobs-default:the-version",
2189
- "interruptible": true,
2190
- "needs": [],
2191
- "retry": {
2192
- "max": 2,
2193
- "when": [
2194
- "runner_system_failure",
2195
- "stuck_or_timeout_failure",
2196
- ],
2197
- },
2198
- "script": [
2199
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2200
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2201
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2202
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2203
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2204
- "cd api",
2205
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2206
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2207
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2208
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2209
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2210
- "yarn install --immutable",
2211
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2212
- "yarn build",
2213
- ],
2214
- "stage": "build",
2215
- "variables": {
2216
- "APP_DIR": "api",
2217
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2218
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2219
- "BUILD_INFO_ID": "some-id",
2220
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2221
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2222
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2223
- "DB_NAME": "pan-test-app-prod-api",
2224
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2225
- "DB_USER": "my-user",
2226
- "ENV_SHORT": "prod",
2227
- "ENV_TYPE": "prod",
2228
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
2229
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
2230
- "HOST": "pan-test-app-prod-api-unknown-host.example.com",
2231
- "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
2232
- "HOST_INTERNAL": "pan-test-app-prod-api-unknown-host.example.com",
2233
- "KUBERNETES_CPU_REQUEST": "0.5",
2234
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2235
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2236
- "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
2237
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-api-unknown-host.example.com",
2238
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2239
- },
2240
- },
2241
- "api 🔨 app | stage ": {
2242
- "artifacts": {
2243
- "expire_in": "1 day",
2244
- "paths": [
2245
- "api/__build_info.json",
2246
- "api/dist",
2247
- "api/.next",
2248
- ],
2249
- "reports": {
2250
- "junit": undefined,
2251
- },
2252
- "when": "always",
2253
- },
2254
- "cache": [
2255
- {
2256
- "key": "api-yarn",
2257
- "paths": [
2258
- "api/.yarn",
2259
- ],
2260
- "policy": "pull-push",
2261
- },
2262
- {
2263
- "key": "api-node-modules",
2264
- "paths": [
2265
- "api/node_modules",
2266
- ],
2267
- "policy": "pull-push",
2268
- },
2269
- {
2270
- "key": "api-next-cache",
2271
- "paths": [
2272
- "api/.next/cache/",
2273
- ],
2274
- "policy": "pull-push",
2275
- },
2276
- ],
2277
- "image": "path/to/docker/jobs-default:the-version",
2278
- "interruptible": true,
2279
- "needs": [],
2280
- "retry": {
2281
- "max": 2,
2282
- "when": [
2283
- "runner_system_failure",
2284
- "stuck_or_timeout_failure",
2285
- ],
2286
- },
2287
- "script": [
2288
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2289
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2290
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2291
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2292
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2293
- "cd api",
2294
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2295
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2296
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2297
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2298
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2299
- "yarn install --immutable",
2300
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2301
- "yarn build",
2302
- ],
2303
- "stage": "build",
2304
- "variables": {
2305
- "APP_DIR": "api",
2306
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2307
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2308
- "BUILD_INFO_ID": "some-id",
2309
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2310
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2311
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2312
- "DB_NAME": "pan-test-app-stage-api",
2313
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
2314
- "DB_USER": "my-user",
2315
- "ENV_SHORT": "stage",
2316
- "ENV_TYPE": "stage",
2317
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
2318
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
2319
- "HOST": "pan-test-app-stage-api-unknown-host.example.com",
2320
- "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
2321
- "HOST_INTERNAL": "pan-test-app-stage-api-unknown-host.example.com",
2322
- "KUBERNETES_CPU_REQUEST": "0.5",
2323
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2324
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2325
- "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
2326
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-api-unknown-host.example.com",
2327
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2328
- },
2329
- },
2330
- "api 🔨 docker | prod ": {
2331
- "cache": [
2332
- {
2333
- "key": "api-yarn",
2334
- "paths": [
2335
- "api/.yarn",
2336
- ],
2337
- "policy": "pull",
2338
- },
2339
- ],
2340
- "image": "path/to/docker/docker-build:the-version",
2341
- "interruptible": true,
2342
- "needs": [
2343
- "api 🔨 app | prod ",
2344
- ],
2345
- "retry": {
2346
- "max": 2,
2347
- "when": [
2348
- "runner_system_failure",
2349
- "stuck_or_timeout_failure",
2350
- ],
2351
- },
2352
- "script": [
2353
- "ensureNodeDockerfile",
2354
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
2355
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
2356
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
2357
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
2358
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
2359
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2360
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
2361
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
2362
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2363
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2364
- "docker push $DOCKER_CACHE_IMAGE",
2365
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
2366
- ],
2367
- "services": [
2368
- {
2369
- "command": [
2370
- "--tls=false",
2371
- ],
2372
- "name": "docker:24.0.6-dind",
2373
- },
2374
- ],
2375
- "stage": "build",
2376
- "variables": {
2377
- "APP_DIR": "api",
2378
- "DOCKERFILE_ADDITIONS": undefined,
2379
- "DOCKERFILE_ADDITIONS_END": undefined,
2380
- "DOCKER_BUILDKIT": "1",
2381
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2382
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
2383
- RUN yarn plugin import workspace-tools
2384
- RUN yarn workspaces focus --production && yarn rebuild",
2385
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
2386
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
2387
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
2388
- COPY --chown=node:node .yarn /app/.yarn",
2389
- "DOCKER_DIR": ".",
2390
- "DOCKER_DRIVER": "overlay2",
2391
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2392
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api",
2393
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2394
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2395
- "DOCKER_TLS_CERTDIR": "",
2396
- "KUBERNETES_CPU_REQUEST": "0.5",
2397
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2398
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2399
- },
2400
- },
2401
- "api 🔨 docker | stage ": {
2402
- "cache": [
2403
- {
2404
- "key": "api-yarn",
2405
- "paths": [
2406
- "api/.yarn",
2407
- ],
2408
- "policy": "pull",
2409
- },
2410
- ],
2411
- "image": "path/to/docker/docker-build:the-version",
2412
- "interruptible": true,
2413
- "needs": [
2414
- "api 🔨 app | stage ",
2415
- ],
2416
- "retry": {
2417
- "max": 2,
2418
- "when": [
2419
- "runner_system_failure",
2420
- "stuck_or_timeout_failure",
2421
- ],
2422
- },
2423
- "script": [
2424
- "ensureNodeDockerfile",
2425
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
2426
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
2427
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
2428
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
2429
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
2430
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2431
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
2432
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
2433
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2434
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2435
- "docker push $DOCKER_CACHE_IMAGE",
2436
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
2437
- ],
2438
- "services": [
2439
- {
2440
- "command": [
2441
- "--tls=false",
2442
- ],
2443
- "name": "docker:24.0.6-dind",
2444
- },
2445
- ],
2446
- "stage": "build",
2447
- "variables": {
2448
- "APP_DIR": "api",
2449
- "DOCKERFILE_ADDITIONS": undefined,
2450
- "DOCKERFILE_ADDITIONS_END": undefined,
2451
- "DOCKER_BUILDKIT": "1",
2452
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2453
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
2454
- RUN yarn plugin import workspace-tools
2455
- RUN yarn workspaces focus --production && yarn rebuild",
2456
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
2457
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
2458
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
2459
- COPY --chown=node:node .yarn /app/.yarn",
2460
- "DOCKER_DIR": ".",
2461
- "DOCKER_DRIVER": "overlay2",
2462
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2463
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api",
2464
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2465
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2466
- "DOCKER_TLS_CERTDIR": "",
2467
- "KUBERNETES_CPU_REQUEST": "0.5",
2468
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2469
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2470
- },
2471
- },
2472
- "api 🚀 Deploy | prod ": {
2473
- "allow_failure": true,
2474
- "artifacts": {
2475
- "paths": [
2476
- "____envvars.yaml",
2477
- ],
2478
- },
2479
- "environment": {
2480
- "auto_stop_in": undefined,
2481
- "name": "prod/api",
2482
- "on_stop": "api 🛑 Stop ⚠️ | prod ",
2483
- "url": "https://pan-test-app-prod-api-unknown-host.example.com",
2484
- },
2485
- "image": "path/to/docker/gcloud:the-version",
2486
- "interruptible": true,
2487
- "needs": [
2488
- {
2489
- "artifacts": false,
2490
- "job": "api 🔨 app | prod ",
2491
- },
2492
- {
2493
- "artifacts": false,
2494
- "job": "api 🔨 docker | prod ",
2495
- },
2496
- {
2497
- "artifacts": true,
2498
- "job": "api 🧾 sbom | prod ",
2499
- },
2500
- ],
2501
- "retry": {
2502
- "max": 2,
2503
- "when": [
2504
- "runner_system_failure",
2505
- "stuck_or_timeout_failure",
2506
- ],
2507
- },
2508
- "rules": [
2509
- {
2510
- "when": "manual",
2511
- },
2512
- ],
2513
- "script": [
2514
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
2515
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
2516
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
2517
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
2518
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
2519
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
2520
- "echo "$ENV_VARS" > ____envvars.yaml",
2521
- "set +e",
2522
- "echo "ensuring Database..."",
2523
- "gcloud sql databases create pan-test-app-prod-api --instance=instancename --project projectId",
2524
- "set -e",
2525
- "gcloud run deploy pan-test-app-prod-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-service-name=pan-test-app-prod-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
2526
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
2527
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
2528
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-prod-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
2529
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api@$version --quiet --delete-tags; done",
2530
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2531
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
2532
- "echo Uploading SBOM to Dependency Track",
2533
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" "__sbom.json" vex.json || true",
2534
- ],
2535
- "services": [
2536
- {
2537
- "command": [
2538
- "--tls=false",
2539
- ],
2540
- "name": "docker:24.0.6-dind",
2541
- },
2542
- ],
2543
- "stage": "deploy prod",
2544
- "variables": {
2545
- "APP_DIR": "api",
2546
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2547
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2548
- "BUILD_INFO_ID": "some-id",
2549
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2550
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2551
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2552
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2553
- "DB_NAME": "pan-test-app-prod-api",
2554
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2555
- "DB_USER": "my-user",
2556
- "DOCKER_BUILDKIT": "1",
2557
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2558
- "DOCKER_DRIVER": "overlay2",
2559
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2560
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api",
2561
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2562
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2563
- "DOCKER_TLS_CERTDIR": "",
2564
- "ENV_SHORT": "prod",
2565
- "ENV_TYPE": "prod",
2566
- "ENV_VARS": "ENV_SHORT: 'prod'
2567
- APP_DIR: 'api'
2568
- ENV_TYPE: 'prod'
2569
- BUILD_INFO_ID: 'some-id'
2570
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2571
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2572
- HOST: 'pan-test-app-prod-api-unknown-host.example.com'
2573
- ROOT_URL: 'https://pan-test-app-prod-api-unknown-host.example.com'
2574
- HOST_CANONICAL: 'pan-test-app-prod-api-unknown-host.example.com'
2575
- ROOT_URL_INTERNAL: 'https://pan-test-app-prod-api-unknown-host.example.com'
2576
- HOST_INTERNAL: 'pan-test-app-prod-api-unknown-host.example.com'
2577
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
2578
- DB_NAME: 'pan-test-app-prod-api'
2579
- DB_USER: 'my-user'
2580
- DB_PASSWORD: '$CL_prod_api_DB_PASSWORD'
2581
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
2582
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
2583
- GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix'
2584
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
2585
- ",
2586
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
2587
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
2588
- "HOST": "pan-test-app-prod-api-unknown-host.example.com",
2589
- "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
2590
- "HOST_INTERNAL": "pan-test-app-prod-api-unknown-host.example.com",
2591
- "KUBERNETES_CPU_REQUEST": "0.5",
2592
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2593
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2594
- "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
2595
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-api-unknown-host.example.com",
2596
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2597
- },
2598
- },
2599
- "api 🚀 Deploy | stage ": {
2600
- "allow_failure": false,
2601
- "artifacts": {
2602
- "paths": [
2603
- "____envvars.yaml",
2604
- ],
2605
- },
2606
- "environment": {
2607
- "auto_stop_in": undefined,
2608
- "name": "stage/api",
2609
- "on_stop": "api 🛑 Stop ⚠️ | stage ",
2610
- "url": "https://pan-test-app-stage-api-unknown-host.example.com",
2611
- },
2612
- "image": "path/to/docker/gcloud:the-version",
2613
- "interruptible": true,
2614
- "needs": [
2615
- {
2616
- "artifacts": false,
2617
- "job": "api 🔨 app | stage ",
2618
- },
2619
- {
2620
- "artifacts": false,
2621
- "job": "api 🔨 docker | stage ",
2622
- },
2623
- {
2624
- "artifacts": true,
2625
- "job": "api 🧾 sbom | stage ",
2626
- },
2627
- ],
2628
- "retry": {
2629
- "max": 2,
2630
- "when": [
2631
- "runner_system_failure",
2632
- "stuck_or_timeout_failure",
2633
- ],
2634
- },
2635
- "rules": [
2636
- {
2637
- "when": "on_success",
2638
- },
2639
- ],
2640
- "script": [
2641
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
2642
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
2643
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
2644
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
2645
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
2646
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
2647
- "echo "$ENV_VARS" > ____envvars.yaml",
2648
- "set +e",
2649
- "echo "ensuring Database..."",
2650
- "gcloud sql databases create pan-test-app-stage-api --instance=instancename --project projectId",
2651
- "set -e",
2652
- "gcloud run deploy pan-test-app-stage-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-service-name=pan-test-app-stage-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
2653
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
2654
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
2655
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-stage-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
2656
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api@$version --quiet --delete-tags; done",
2657
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2658
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
2659
- "echo Uploading SBOM to Dependency Track",
2660
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" "__sbom.json" vex.json || true",
2661
- ],
2662
- "services": [
2663
- {
2664
- "command": [
2665
- "--tls=false",
2666
- ],
2667
- "name": "docker:24.0.6-dind",
2668
- },
2669
- ],
2670
- "stage": "deploy stage",
2671
- "variables": {
2672
- "APP_DIR": "api",
2673
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2674
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2675
- "BUILD_INFO_ID": "some-id",
2676
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2677
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2678
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2679
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2680
- "DB_NAME": "pan-test-app-stage-api",
2681
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
2682
- "DB_USER": "my-user",
2683
- "DOCKER_BUILDKIT": "1",
2684
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2685
- "DOCKER_DRIVER": "overlay2",
2686
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2687
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api",
2688
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2689
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2690
- "DOCKER_TLS_CERTDIR": "",
2691
- "ENV_SHORT": "stage",
2692
- "ENV_TYPE": "stage",
2693
- "ENV_VARS": "ENV_SHORT: 'stage'
2694
- APP_DIR: 'api'
2695
- ENV_TYPE: 'stage'
2696
- BUILD_INFO_ID: 'some-id'
2697
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2698
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2699
- HOST: 'pan-test-app-stage-api-unknown-host.example.com'
2700
- ROOT_URL: 'https://pan-test-app-stage-api-unknown-host.example.com'
2701
- HOST_CANONICAL: 'pan-test-app-stage-api-unknown-host.example.com'
2702
- ROOT_URL_INTERNAL: 'https://pan-test-app-stage-api-unknown-host.example.com'
2703
- HOST_INTERNAL: 'pan-test-app-stage-api-unknown-host.example.com'
2704
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
2705
- DB_NAME: 'pan-test-app-stage-api'
2706
- DB_USER: 'my-user'
2707
- DB_PASSWORD: '$CL_stage_api_DB_PASSWORD'
2708
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
2709
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
2710
- GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix'
2711
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
2712
- ",
2713
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
2714
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
2715
- "HOST": "pan-test-app-stage-api-unknown-host.example.com",
2716
- "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
2717
- "HOST_INTERNAL": "pan-test-app-stage-api-unknown-host.example.com",
2718
- "KUBERNETES_CPU_REQUEST": "0.5",
2719
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2720
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2721
- "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
2722
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-api-unknown-host.example.com",
2723
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2724
- },
2725
- },
2726
- "api 🛑 Stop ⚠️ | prod ": {
2727
- "environment": {
2728
- "action": "stop",
2729
- "name": "prod/api",
2730
- "url": "https://pan-test-app-prod-api-unknown-host.example.com",
2731
- },
2732
- "image": "path/to/docker/gcloud:the-version",
2733
- "interruptible": true,
2734
- "needs": [],
2735
- "retry": {
2736
- "max": 2,
2737
- "when": [
2738
- "runner_system_failure",
2739
- "stuck_or_timeout_failure",
2740
- ],
2741
- },
2742
- "rules": [
2743
- {
2744
- "allow_failure": true,
2745
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2746
- "when": "on_success",
2747
- },
2748
- {
2749
- "allow_failure": true,
2750
- "when": "manual",
2751
- },
2752
- ],
2753
- "script": [
2754
- "set +e",
2755
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
2756
- "gcloud run services delete pan-test-app-prod-api --project=google-project-id --region=europe-west6",
2757
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api --quiet --delete-tags",
2758
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2759
- "echo Disabling component in Dependency Track",
2760
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" || true",
2761
- "set -e",
2762
- ],
2763
- "stage": "stop prod",
2764
- "variables": {
2765
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2766
- "GIT_STRATEGY": "none",
2767
- "KUBERNETES_CPU_REQUEST": "0.5",
2768
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2769
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2770
- },
2771
- },
2772
- "api 🛑 Stop ⚠️ | stage ": {
2773
- "environment": {
2774
- "action": "stop",
2775
- "name": "stage/api",
2776
- "url": "https://pan-test-app-stage-api-unknown-host.example.com",
2777
- },
2778
- "image": "path/to/docker/gcloud:the-version",
2779
- "interruptible": true,
2780
- "needs": [],
2781
- "retry": {
2782
- "max": 2,
2783
- "when": [
2784
- "runner_system_failure",
2785
- "stuck_or_timeout_failure",
2786
- ],
2787
- },
2788
- "rules": [
2789
- {
2790
- "allow_failure": true,
2791
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2792
- "when": "on_success",
2793
- },
2794
- {
2795
- "allow_failure": true,
2796
- "when": "manual",
2797
- },
2798
- ],
2799
- "script": [
2800
- "set +e",
2801
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
2802
- "gcloud run services delete pan-test-app-stage-api --project=google-project-id --region=europe-west6",
2803
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api --quiet --delete-tags",
2804
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2805
- "echo Disabling component in Dependency Track",
2806
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" || true",
2807
- "set -e",
2808
- ],
2809
- "stage": "stop stage",
2810
- "variables": {
2811
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2812
- "GIT_STRATEGY": "none",
2813
- "KUBERNETES_CPU_REQUEST": "0.5",
2814
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2815
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2816
- },
2817
- },
2818
- "api 🧾 sbom | prod ": {
2819
- "allow_failure": true,
2820
- "artifacts": {
2821
- "paths": [
2822
- "__sbom.json",
2823
- ],
2824
- },
2825
- "image": "aquasec/trivy:0.38.3",
2826
- "interruptible": true,
2827
- "needs": [],
2828
- "retry": {
2829
- "max": 2,
2830
- "when": [
2831
- "runner_system_failure",
2832
- "stuck_or_timeout_failure",
2833
- ],
2834
- },
2835
- "script": [
2836
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2837
- ],
2838
- "stage": "build",
2839
- "variables": {},
2840
- },
2841
- "api 🧾 sbom | stage ": {
2842
- "allow_failure": true,
2843
- "artifacts": {
2844
- "paths": [
2845
- "__sbom.json",
2846
- ],
2847
- },
2848
- "image": "aquasec/trivy:0.38.3",
2849
- "interruptible": true,
2850
- "needs": [],
2851
- "retry": {
2852
- "max": 2,
2853
- "when": [
2854
- "runner_system_failure",
2855
- "stuck_or_timeout_failure",
2856
- ],
2857
- },
2858
- "script": [
2859
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2860
- ],
2861
- "stage": "build",
2862
- "variables": {},
2863
- },
2864
- "worker 🔨 app | prod ": {
2865
- "artifacts": {
2866
- "expire_in": "1 day",
2867
- "paths": [
2868
- "api/__build_info.json",
2869
- "api/dist",
2870
- "api/.next",
2871
- ],
2872
- "reports": {
2873
- "junit": undefined,
2874
- },
2875
- "when": "always",
2876
- },
2877
- "cache": [
2878
- {
2879
- "key": "api-yarn",
2880
- "paths": [
2881
- "api/.yarn",
2882
- ],
2883
- "policy": "pull-push",
2884
- },
2885
- {
2886
- "key": "api-node-modules",
2887
- "paths": [
2888
- "api/node_modules",
2889
- ],
2890
- "policy": "pull-push",
2891
- },
2892
- {
2893
- "key": "worker-next-cache",
2894
- "paths": [
2895
- "api/.next/cache/",
2896
- ],
2897
- "policy": "pull-push",
2898
- },
2899
- ],
2900
- "image": "path/to/docker/jobs-default:the-version",
2901
- "interruptible": true,
2902
- "needs": [],
2903
- "retry": {
2904
- "max": 2,
2905
- "when": [
2906
- "runner_system_failure",
2907
- "stuck_or_timeout_failure",
2908
- ],
2909
- },
2910
- "script": [
2911
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2912
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2913
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2914
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2915
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2916
- "cd api",
2917
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2918
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2919
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2920
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2921
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2922
- "yarn install --immutable",
2923
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2924
- "yarn build:worker",
2925
- ],
2926
- "stage": "build",
2927
- "variables": {
2928
- "APP_DIR": "api",
2929
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2930
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2931
- "BUILD_INFO_ID": "some-id",
2932
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2933
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2934
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2935
- "DB_NAME": "pan-test-app-prod-api",
2936
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2937
- "DB_USER": "my-user",
2938
- "ENV_SHORT": "prod",
2939
- "ENV_TYPE": "prod",
2940
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_worker_GCLOUD_DEPLOY_credentialsKey",
2941
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_worker_GCLOUD_RUN_canonicalHostSuffix",
2942
- "HOST": "pan-test-app-prod-worker-unknown-host.example.com",
2943
- "HOST_CANONICAL": "pan-test-app-prod-worker-unknown-host.example.com",
2944
- "HOST_INTERNAL": "pan-test-app-prod-worker-unknown-host.example.com",
2945
- "KUBERNETES_CPU_REQUEST": "0.5",
2946
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2947
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2948
- "ROOT_URL": "https://pan-test-app-prod-worker-unknown-host.example.com",
2949
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-worker-unknown-host.example.com",
2950
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2951
- },
2952
- },
2953
- "worker 🔨 app | stage ": {
2954
- "artifacts": {
2955
- "expire_in": "1 day",
2956
- "paths": [
2957
- "api/__build_info.json",
2958
- "api/dist",
2959
- "api/.next",
2960
- ],
2961
- "reports": {
2962
- "junit": undefined,
2963
- },
2964
- "when": "always",
2965
- },
2966
- "cache": [
2967
- {
2968
- "key": "api-yarn",
2969
- "paths": [
2970
- "api/.yarn",
2971
- ],
2972
- "policy": "pull-push",
2973
- },
2974
- {
2975
- "key": "api-node-modules",
2976
- "paths": [
2977
- "api/node_modules",
2978
- ],
2979
- "policy": "pull-push",
2980
- },
2981
- {
2982
- "key": "worker-next-cache",
2983
- "paths": [
2984
- "api/.next/cache/",
2985
- ],
2986
- "policy": "pull-push",
2987
- },
2988
- ],
2989
- "image": "path/to/docker/jobs-default:the-version",
2990
- "interruptible": true,
2991
- "needs": [],
2992
- "retry": {
2993
- "max": 2,
2994
- "when": [
2995
- "runner_system_failure",
2996
- "stuck_or_timeout_failure",
2997
- ],
2998
- },
2999
- "script": [
3000
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
3001
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
3002
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
3003
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
3004
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
3005
- "cd api",
3006
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
3007
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
3008
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
3009
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
3010
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
3011
- "yarn install --immutable",
3012
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
3013
- "yarn build:worker",
3014
- ],
3015
- "stage": "build",
3016
- "variables": {
3017
- "APP_DIR": "api",
3018
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3019
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3020
- "BUILD_INFO_ID": "some-id",
3021
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
3022
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
3023
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
3024
- "DB_NAME": "pan-test-app-stage-api",
3025
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
3026
- "DB_USER": "my-user",
3027
- "ENV_SHORT": "stage",
3028
- "ENV_TYPE": "stage",
3029
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_worker_GCLOUD_DEPLOY_credentialsKey",
3030
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_worker_GCLOUD_RUN_canonicalHostSuffix",
3031
- "HOST": "pan-test-app-stage-worker-unknown-host.example.com",
3032
- "HOST_CANONICAL": "pan-test-app-stage-worker-unknown-host.example.com",
3033
- "HOST_INTERNAL": "pan-test-app-stage-worker-unknown-host.example.com",
3034
- "KUBERNETES_CPU_REQUEST": "0.5",
3035
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
3036
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
3037
- "ROOT_URL": "https://pan-test-app-stage-worker-unknown-host.example.com",
3038
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-worker-unknown-host.example.com",
3039
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
3040
- },
3041
- },
3042
- "worker 🔨 docker | prod ": {
3043
- "cache": [
3044
- {
3045
- "key": "api-yarn",
3046
- "paths": [
3047
- "api/.yarn",
3048
- ],
3049
- "policy": "pull",
3050
- },
3051
- ],
3052
- "image": "path/to/docker/docker-build:the-version",
3053
- "interruptible": true,
3054
- "needs": [
3055
- "worker 🔨 app | prod ",
3056
- ],
3057
- "retry": {
3058
- "max": 2,
3059
- "when": [
3060
- "runner_system_failure",
3061
- "stuck_or_timeout_failure",
3062
- ],
3063
- },
3064
- "script": [
3065
- "ensureNodeDockerfile",
3066
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
3067
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_worker_GCLOUD_DEPLOY_credentialsKey")",
3068
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
3069
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
3070
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
3071
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3072
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
3073
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
3074
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3075
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3076
- "docker push $DOCKER_CACHE_IMAGE",
3077
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
3078
- ],
3079
- "services": [
3080
- {
3081
- "command": [
3082
- "--tls=false",
3083
- ],
3084
- "name": "docker:24.0.6-dind",
3085
- },
3086
- ],
3087
- "stage": "build",
3088
- "variables": {
3089
- "APP_DIR": "api",
3090
- "DOCKERFILE_ADDITIONS": undefined,
3091
- "DOCKERFILE_ADDITIONS_END": undefined,
3092
- "DOCKER_BUILDKIT": "1",
3093
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
3094
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
3095
- RUN yarn plugin import workspace-tools
3096
- RUN yarn workspaces focus --production && yarn rebuild",
3097
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
3098
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
3099
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
3100
- COPY --chown=node:node .yarn /app/.yarn",
3101
- "DOCKER_DIR": ".",
3102
- "DOCKER_DRIVER": "overlay2",
3103
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3104
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/worker",
3105
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3106
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3107
- "DOCKER_TLS_CERTDIR": "",
3108
- "KUBERNETES_CPU_REQUEST": "0.5",
3109
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3110
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3111
- },
3112
- },
3113
- "worker 🔨 docker | stage ": {
3114
- "cache": [
3115
- {
3116
- "key": "api-yarn",
3117
- "paths": [
3118
- "api/.yarn",
3119
- ],
3120
- "policy": "pull",
3121
- },
3122
- ],
3123
- "image": "path/to/docker/docker-build:the-version",
3124
- "interruptible": true,
3125
- "needs": [
3126
- "worker 🔨 app | stage ",
3127
- ],
3128
- "retry": {
3129
- "max": 2,
3130
- "when": [
3131
- "runner_system_failure",
3132
- "stuck_or_timeout_failure",
3133
- ],
3134
- },
3135
- "script": [
3136
- "ensureNodeDockerfile",
3137
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
3138
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_worker_GCLOUD_DEPLOY_credentialsKey")",
3139
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
3140
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
3141
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
3142
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3143
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
3144
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
3145
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3146
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3147
- "docker push $DOCKER_CACHE_IMAGE",
3148
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
3149
- ],
3150
- "services": [
3151
- {
3152
- "command": [
3153
- "--tls=false",
3154
- ],
3155
- "name": "docker:24.0.6-dind",
3156
- },
3157
- ],
3158
- "stage": "build",
3159
- "variables": {
3160
- "APP_DIR": "api",
3161
- "DOCKERFILE_ADDITIONS": undefined,
3162
- "DOCKERFILE_ADDITIONS_END": undefined,
3163
- "DOCKER_BUILDKIT": "1",
3164
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
3165
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
3166
- RUN yarn plugin import workspace-tools
3167
- RUN yarn workspaces focus --production && yarn rebuild",
3168
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
3169
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
3170
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
3171
- COPY --chown=node:node .yarn /app/.yarn",
3172
- "DOCKER_DIR": ".",
3173
- "DOCKER_DRIVER": "overlay2",
3174
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3175
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/worker",
3176
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3177
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3178
- "DOCKER_TLS_CERTDIR": "",
3179
- "KUBERNETES_CPU_REQUEST": "0.5",
3180
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3181
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3182
- },
3183
- },
3184
- "worker 🚀 Deploy | prod ": {
3185
- "allow_failure": true,
3186
- "artifacts": {
3187
- "paths": [
3188
- "____envvars.yaml",
3189
- ],
3190
- },
3191
- "environment": {
3192
- "auto_stop_in": undefined,
3193
- "name": "prod/worker",
3194
- "on_stop": "worker 🛑 Stop ⚠️ | prod ",
3195
- "url": "https://pan-test-app-prod-worker-unknown-host.example.com",
3196
- },
3197
- "image": "path/to/docker/gcloud:the-version",
3198
- "interruptible": true,
3199
- "needs": [
3200
- {
3201
- "artifacts": false,
3202
- "job": "worker 🔨 app | prod ",
3203
- },
3204
- {
3205
- "artifacts": false,
3206
- "job": "worker 🔨 docker | prod ",
3207
- },
3208
- {
3209
- "artifacts": true,
3210
- "job": "worker 🧾 sbom | prod ",
3211
- },
3212
- ],
3213
- "retry": {
3214
- "max": 2,
3215
- "when": [
3216
- "runner_system_failure",
3217
- "stuck_or_timeout_failure",
3218
- ],
3219
- },
3220
- "rules": [
3221
- {
3222
- "when": "manual",
3223
- },
3224
- ],
3225
- "script": [
3226
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
3227
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_worker_GCLOUD_DEPLOY_credentialsKey")",
3228
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
3229
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
3230
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
3231
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
3232
- "echo "$ENV_VARS" > ____envvars.yaml",
3233
- "set +e",
3234
- "echo "ensuring Database..."",
3235
- "gcloud sql databases create pan-test-app-prod-api --instance=instancename --project projectId",
3236
- "set -e",
3237
- "gcloud run deploy pan-test-app-prod-worker --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/worker:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=worker,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-service-name=pan-test-app-prod-worker --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
3238
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
3239
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
3240
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-prod-worker --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
3241
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/worker@$version --quiet --delete-tags; done",
3242
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
3243
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
3244
- "echo Uploading SBOM to Dependency Track",
3245
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/worker" "https://pan-test-app-prod-worker-unknown-host.example.com" "__sbom.json" vex.json || true",
3246
- ],
3247
- "services": [
3248
- {
3249
- "command": [
3250
- "--tls=false",
3251
- ],
3252
- "name": "docker:24.0.6-dind",
3253
- },
3254
- ],
3255
- "stage": "deploy prod",
3256
- "variables": {
3257
- "APP_DIR": "api",
3258
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3259
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3260
- "BUILD_INFO_ID": "some-id",
3261
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3262
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
3263
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
3264
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
3265
- "DB_NAME": "pan-test-app-prod-api",
3266
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
3267
- "DB_USER": "my-user",
3268
- "DOCKER_BUILDKIT": "1",
3269
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
3270
- "DOCKER_DRIVER": "overlay2",
3271
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3272
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/worker",
3273
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3274
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3275
- "DOCKER_TLS_CERTDIR": "",
3276
- "ENV_SHORT": "prod",
3277
- "ENV_TYPE": "prod",
3278
- "ENV_VARS": "ENV_SHORT: 'prod'
3279
- APP_DIR: 'api'
3280
- ENV_TYPE: 'prod'
3281
- BUILD_INFO_ID: 'some-id'
3282
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3283
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3284
- HOST: 'pan-test-app-prod-worker-unknown-host.example.com'
3285
- ROOT_URL: 'https://pan-test-app-prod-worker-unknown-host.example.com'
3286
- HOST_CANONICAL: 'pan-test-app-prod-worker-unknown-host.example.com'
3287
- ROOT_URL_INTERNAL: 'https://pan-test-app-prod-worker-unknown-host.example.com'
3288
- HOST_INTERNAL: 'pan-test-app-prod-worker-unknown-host.example.com'
3289
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
3290
- DB_NAME: 'pan-test-app-prod-api'
3291
- DB_USER: 'my-user'
3292
- DB_PASSWORD: '$CL_prod_api_DB_PASSWORD'
3293
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
3294
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
3295
- GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_worker_GCLOUD_RUN_canonicalHostSuffix'
3296
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
3297
- ",
3298
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_worker_GCLOUD_DEPLOY_credentialsKey",
3299
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_worker_GCLOUD_RUN_canonicalHostSuffix",
3300
- "HOST": "pan-test-app-prod-worker-unknown-host.example.com",
3301
- "HOST_CANONICAL": "pan-test-app-prod-worker-unknown-host.example.com",
3302
- "HOST_INTERNAL": "pan-test-app-prod-worker-unknown-host.example.com",
3303
- "KUBERNETES_CPU_REQUEST": "0.5",
3304
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3305
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3306
- "ROOT_URL": "https://pan-test-app-prod-worker-unknown-host.example.com",
3307
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-worker-unknown-host.example.com",
3308
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
3309
- },
3310
- },
3311
- "worker 🚀 Deploy | stage ": {
3312
- "allow_failure": false,
3313
- "artifacts": {
3314
- "paths": [
3315
- "____envvars.yaml",
3316
- ],
3317
- },
3318
- "environment": {
3319
- "auto_stop_in": undefined,
3320
- "name": "stage/worker",
3321
- "on_stop": "worker 🛑 Stop ⚠️ | stage ",
3322
- "url": "https://pan-test-app-stage-worker-unknown-host.example.com",
3323
- },
3324
- "image": "path/to/docker/gcloud:the-version",
3325
- "interruptible": true,
3326
- "needs": [
3327
- {
3328
- "artifacts": false,
3329
- "job": "worker 🔨 app | stage ",
3330
- },
3331
- {
3332
- "artifacts": false,
3333
- "job": "worker 🔨 docker | stage ",
3334
- },
3335
- {
3336
- "artifacts": true,
3337
- "job": "worker 🧾 sbom | stage ",
3338
- },
3339
- ],
3340
- "retry": {
3341
- "max": 2,
3342
- "when": [
3343
- "runner_system_failure",
3344
- "stuck_or_timeout_failure",
3345
- ],
3346
- },
3347
- "rules": [
3348
- {
3349
- "when": "on_success",
3350
- },
3351
- ],
3352
- "script": [
3353
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
3354
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_worker_GCLOUD_DEPLOY_credentialsKey")",
3355
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
3356
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
3357
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
3358
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
3359
- "echo "$ENV_VARS" > ____envvars.yaml",
3360
- "set +e",
3361
- "echo "ensuring Database..."",
3362
- "gcloud sql databases create pan-test-app-stage-api --instance=instancename --project projectId",
3363
- "set -e",
3364
- "gcloud run deploy pan-test-app-stage-worker --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/worker:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=worker,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-service-name=pan-test-app-stage-worker --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
3365
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
3366
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
3367
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-stage-worker --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
3368
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/worker@$version --quiet --delete-tags; done",
3369
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
3370
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
3371
- "echo Uploading SBOM to Dependency Track",
3372
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/worker" "https://pan-test-app-stage-worker-unknown-host.example.com" "__sbom.json" vex.json || true",
3373
- ],
3374
- "services": [
3375
- {
3376
- "command": [
3377
- "--tls=false",
3378
- ],
3379
- "name": "docker:24.0.6-dind",
3380
- },
3381
- ],
3382
- "stage": "deploy stage",
3383
- "variables": {
3384
- "APP_DIR": "api",
3385
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3386
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3387
- "BUILD_INFO_ID": "some-id",
3388
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3389
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
3390
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
3391
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
3392
- "DB_NAME": "pan-test-app-stage-api",
3393
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
3394
- "DB_USER": "my-user",
3395
- "DOCKER_BUILDKIT": "1",
3396
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker",
3397
- "DOCKER_DRIVER": "overlay2",
3398
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3399
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/worker",
3400
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3401
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3402
- "DOCKER_TLS_CERTDIR": "",
3403
- "ENV_SHORT": "stage",
3404
- "ENV_TYPE": "stage",
3405
- "ENV_VARS": "ENV_SHORT: 'stage'
3406
- APP_DIR: 'api'
3407
- ENV_TYPE: 'stage'
3408
- BUILD_INFO_ID: 'some-id'
3409
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3410
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3411
- HOST: 'pan-test-app-stage-worker-unknown-host.example.com'
3412
- ROOT_URL: 'https://pan-test-app-stage-worker-unknown-host.example.com'
3413
- HOST_CANONICAL: 'pan-test-app-stage-worker-unknown-host.example.com'
3414
- ROOT_URL_INTERNAL: 'https://pan-test-app-stage-worker-unknown-host.example.com'
3415
- HOST_INTERNAL: 'pan-test-app-stage-worker-unknown-host.example.com'
3416
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
3417
- DB_NAME: 'pan-test-app-stage-api'
3418
- DB_USER: 'my-user'
3419
- DB_PASSWORD: '$CL_stage_api_DB_PASSWORD'
3420
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
3421
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
3422
- GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_worker_GCLOUD_RUN_canonicalHostSuffix'
3423
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
3424
- ",
3425
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_worker_GCLOUD_DEPLOY_credentialsKey",
3426
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_worker_GCLOUD_RUN_canonicalHostSuffix",
3427
- "HOST": "pan-test-app-stage-worker-unknown-host.example.com",
3428
- "HOST_CANONICAL": "pan-test-app-stage-worker-unknown-host.example.com",
3429
- "HOST_INTERNAL": "pan-test-app-stage-worker-unknown-host.example.com",
3430
- "KUBERNETES_CPU_REQUEST": "0.5",
3431
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3432
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3433
- "ROOT_URL": "https://pan-test-app-stage-worker-unknown-host.example.com",
3434
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-worker-unknown-host.example.com",
3435
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
3436
- },
3437
- },
3438
- "worker 🛑 Stop ⚠️ | prod ": {
3439
- "environment": {
3440
- "action": "stop",
3441
- "name": "prod/worker",
3442
- "url": "https://pan-test-app-prod-worker-unknown-host.example.com",
3443
- },
3444
- "image": "path/to/docker/gcloud:the-version",
3445
- "interruptible": true,
3446
- "needs": [],
3447
- "retry": {
3448
- "max": 2,
3449
- "when": [
3450
- "runner_system_failure",
3451
- "stuck_or_timeout_failure",
3452
- ],
3453
- },
3454
- "rules": [
3455
- {
3456
- "allow_failure": true,
3457
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3458
- "when": "on_success",
3459
- },
3460
- {
3461
- "allow_failure": true,
3462
- "when": "manual",
3463
- },
3464
- ],
3465
- "script": [
3466
- "set +e",
3467
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_worker_GCLOUD_DEPLOY_credentialsKey")",
3468
- "gcloud run services delete pan-test-app-prod-worker --project=google-project-id --region=europe-west6",
3469
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/worker --quiet --delete-tags",
3470
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
3471
- "echo Disabling component in Dependency Track",
3472
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/worker" "https://pan-test-app-prod-worker-unknown-host.example.com" || true",
3473
- "set -e",
3474
- ],
3475
- "stage": "stop prod",
3476
- "variables": {
3477
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3478
- "GIT_STRATEGY": "none",
3479
- "KUBERNETES_CPU_REQUEST": "0.5",
3480
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3481
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3482
- },
3483
- },
3484
- "worker 🛑 Stop ⚠️ | stage ": {
3485
- "environment": {
3486
- "action": "stop",
3487
- "name": "stage/worker",
3488
- "url": "https://pan-test-app-stage-worker-unknown-host.example.com",
3489
- },
3490
- "image": "path/to/docker/gcloud:the-version",
3491
- "interruptible": true,
3492
- "needs": [],
3493
- "retry": {
3494
- "max": 2,
3495
- "when": [
3496
- "runner_system_failure",
3497
- "stuck_or_timeout_failure",
3498
- ],
3499
- },
3500
- "rules": [
3501
- {
3502
- "allow_failure": true,
3503
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3504
- "when": "on_success",
3505
- },
3506
- {
3507
- "allow_failure": true,
3508
- "when": "manual",
3509
- },
3510
- ],
3511
- "script": [
3512
- "set +e",
3513
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_worker_GCLOUD_DEPLOY_credentialsKey")",
3514
- "gcloud run services delete pan-test-app-stage-worker --project=google-project-id --region=europe-west6",
3515
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/worker --quiet --delete-tags",
3516
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/worker@$version --quiet --delete-tags; done",
3517
- "echo Disabling component in Dependency Track",
3518
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/worker" "https://pan-test-app-stage-worker-unknown-host.example.com" || true",
3519
- "set -e",
3520
- ],
3521
- "stage": "stop stage",
3522
- "variables": {
3523
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3524
- "GIT_STRATEGY": "none",
3525
- "KUBERNETES_CPU_REQUEST": "0.5",
3526
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3527
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3528
- },
3529
- },
3530
- "worker 🧾 sbom | prod ": {
3531
- "allow_failure": true,
3532
- "artifacts": {
3533
- "paths": [
3534
- "__sbom.json",
3535
- ],
3536
- },
3537
- "image": "aquasec/trivy:0.38.3",
3538
- "interruptible": true,
3539
- "needs": [],
3540
- "retry": {
3541
- "max": 2,
3542
- "when": [
3543
- "runner_system_failure",
3544
- "stuck_or_timeout_failure",
3545
- ],
3546
- },
3547
- "script": [
3548
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
3549
- ],
3550
- "stage": "build",
3551
- "variables": {},
3552
- },
3553
- "worker 🧾 sbom | stage ": {
3554
- "allow_failure": true,
3555
- "artifacts": {
3556
- "paths": [
3557
- "__sbom.json",
3558
- ],
3559
- },
3560
- "image": "aquasec/trivy:0.38.3",
3561
- "interruptible": true,
3562
- "needs": [],
3563
- "retry": {
3564
- "max": 2,
3565
- "when": [
3566
- "runner_system_failure",
3567
- "stuck_or_timeout_failure",
3568
- ],
3569
- },
3570
- "script": [
3571
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
3572
- ],
3573
- "stage": "build",
3574
- "variables": {},
3575
- },
3576
- },
3577
- "stages": [
3578
- "setup",
3579
- "setup dev",
3580
- "setup review",
3581
- "setup stage",
3582
- "setup prod",
3583
- "setup local",
3584
- "test",
3585
- "test dev",
3586
- "test review",
3587
- "test stage",
3588
- "test prod",
3589
- "test local",
3590
- "build",
3591
- "build dev",
3592
- "build review",
3593
- "build stage",
3594
- "build prod",
3595
- "build local",
3596
- "deploy",
3597
- "deploy dev",
3598
- "deploy review",
3599
- "deploy stage",
3600
- "deploy prod",
3601
- "deploy local",
3602
- "verify",
3603
- "verify dev",
3604
- "verify review",
3605
- "verify stage",
3606
- "verify prod",
3607
- "verify local",
3608
- "rollback",
3609
- "rollback dev",
3610
- "rollback review",
3611
- "rollback stage",
3612
- "rollback prod",
3613
- "rollback local",
3614
- "stop",
3615
- "stop dev",
3616
- "stop review",
3617
- "stop stage",
3618
- "stop prod",
3619
- "stop local",
3620
- ],
3621
- "variables": {
3622
- "FF_USE_FASTZIP": "true",
3623
- "GIT_DEPTH": 1,
3624
- },
3625
- "workflow": {
3626
- "rules": [
3627
- {
3628
- "if": "$CI_COMMIT_TAG",
3629
- },
3630
- {
3631
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
3632
- "when": "never",
3633
- },
3634
- {
3635
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
3636
- },
3637
- {
3638
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
3639
- },
3640
- {
3641
- "if": "$CI_MERGE_REQUEST_ID",
3642
- },
3643
- ],
3644
- },
3645
- },
3646
- }
3647
- `;