@catladder/pipeline 0.0.0-refactore-catenv-command-validates-argument-78d05852 → 0.0.0-reference-database-url-1befbbee

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (639) hide show
  1. package/README.md +15 -1
  2. package/dist/bash/BashExpression.d.ts +36 -0
  3. package/dist/bash/BashExpression.js +114 -0
  4. package/dist/bash/bashEscape.d.ts +37 -0
  5. package/dist/bash/bashEscape.js +119 -0
  6. package/dist/bash/bashExpressionPerPipelineType.d.ts +6 -0
  7. package/dist/bash/bashExpressionPerPipelineType.js +11 -0
  8. package/dist/bash/bashYaml.d.ts +10 -0
  9. package/dist/bash/bashYaml.js +69 -0
  10. package/dist/bash/getInjectVarsScript.d.ts +2 -0
  11. package/dist/bash/getInjectVarsScript.js +47 -0
  12. package/dist/bash/index.d.ts +2 -0
  13. package/dist/bash/index.js +26 -0
  14. package/dist/build/artifacts/createBuildJobArtifact.d.ts +3 -0
  15. package/dist/build/artifacts/createBuildJobArtifact.js +97 -0
  16. package/dist/build/base/__tests__/createArtifactsConfig.test.js +3 -1
  17. package/dist/build/base/constants.js +4 -2
  18. package/dist/build/base/createAppBuildJob.d.ts +5 -3
  19. package/dist/build/base/createAppBuildJob.js +18 -15
  20. package/dist/build/base/createArtifactsConfig.d.ts +1 -1
  21. package/dist/build/base/createArtifactsConfig.js +3 -1
  22. package/dist/build/base/createBuildJobDefinition.d.ts +6 -0
  23. package/dist/build/base/createBuildJobDefinition.js +58 -0
  24. package/dist/build/base/index.d.ts +6 -4
  25. package/dist/build/base/index.js +17 -6
  26. package/dist/build/base/writeBuildInfo.d.ts +2 -2
  27. package/dist/build/base/writeBuildInfo.js +4 -3
  28. package/dist/build/base/writeDotEnv.d.ts +3 -2
  29. package/dist/build/base/writeDotEnv.js +30 -6
  30. package/dist/build/cache/createJobCache.d.ts +7 -0
  31. package/dist/build/cache/createJobCache.js +115 -0
  32. package/dist/build/cache/getAllCacheConfigsFromConfig.d.ts +3 -0
  33. package/dist/build/cache/getAllCacheConfigsFromConfig.js +64 -0
  34. package/dist/build/cache/transformLegacyJobCache.d.ts +3 -0
  35. package/dist/build/cache/transformLegacyJobCache.js +29 -0
  36. package/dist/build/custom/__tests__/testJob.test.js +15 -16
  37. package/dist/build/custom/buildJob.d.ts +2 -2
  38. package/dist/build/custom/buildJob.js +8 -66
  39. package/dist/build/custom/index.d.ts +2 -2
  40. package/dist/build/custom/index.js +3 -1
  41. package/dist/build/custom/testJob.d.ts +4 -4
  42. package/dist/build/custom/testJob.js +25 -20
  43. package/dist/build/docker.d.ts +37 -46
  44. package/dist/build/docker.js +65 -34
  45. package/dist/build/index.d.ts +14 -7
  46. package/dist/build/index.js +44 -17
  47. package/dist/build/node/buildJob.d.ts +8 -2
  48. package/dist/build/node/buildJob.js +39 -52
  49. package/dist/build/node/cache.d.ts +4 -5
  50. package/dist/build/node/cache.js +18 -24
  51. package/dist/build/node/constants.js +5 -3
  52. package/dist/build/node/index.d.ts +4 -4
  53. package/dist/build/node/index.js +3 -1
  54. package/dist/build/node/meteor.d.ts +2 -2
  55. package/dist/build/node/meteor.js +10 -12
  56. package/dist/build/node/testJob.d.ts +3 -2
  57. package/dist/build/node/testJob.js +29 -19
  58. package/dist/build/node/yarn.d.ts +4 -3
  59. package/dist/build/node/yarn.js +11 -12
  60. package/dist/build/rails/build.d.ts +2 -2
  61. package/dist/build/rails/build.js +13 -6
  62. package/dist/build/rails/index.d.ts +2 -2
  63. package/dist/build/rails/index.js +3 -1
  64. package/dist/build/rails/test.d.ts +2 -2
  65. package/dist/build/rails/test.js +30 -11
  66. package/dist/build/sbom.d.ts +2 -2
  67. package/dist/build/sbom.js +13 -7
  68. package/dist/build/types.d.ts +160 -47
  69. package/dist/build/types.js +10 -2
  70. package/dist/catladder-gitlab.js +129 -49
  71. package/dist/config/__tests__/configruedEnvs.test.js +3 -1
  72. package/dist/config/__tests__/getAllEnvs.test.js +79 -0
  73. package/dist/config/__tests__/getAllEnvsInAllComponents.test.d.ts +1 -0
  74. package/dist/config/__tests__/getAllEnvsInAllComponents.test.js +73 -0
  75. package/dist/config/configruedEnvs.js +3 -1
  76. package/dist/config/index.js +13 -7
  77. package/dist/config/readConfig.d.ts +2 -2
  78. package/dist/config/readConfig.js +191 -40
  79. package/dist/constants.js +5 -3
  80. package/dist/context/createAllComponentsContext.d.ts +12 -0
  81. package/dist/{pipeline/commitInfo/getCommitInfo.js → context/createAllComponentsContext.js} +35 -19
  82. package/dist/context/createComponentContext.d.ts +11 -0
  83. package/dist/context/createComponentContext.js +262 -0
  84. package/dist/context/createWorkspaceContext.d.ts +16 -0
  85. package/dist/context/createWorkspaceContext.js +173 -0
  86. package/dist/context/getBuildInfoVariables.d.ts +6 -0
  87. package/dist/context/getBuildInfoVariables.js +55 -0
  88. package/dist/context/getEnvConfig.js +21 -4
  89. package/dist/context/getEnvType.js +3 -1
  90. package/dist/context/getEnvironment.d.ts +3 -3
  91. package/dist/context/getEnvironment.js +11 -12
  92. package/dist/context/getEnvironmentContext.d.ts +7 -3
  93. package/dist/context/getEnvironmentContext.js +21 -11
  94. package/dist/context/getEnvironmentVariables.d.ts +22 -5
  95. package/dist/context/getEnvironmentVariables.js +79 -53
  96. package/dist/context/getLabels.d.ts +2 -2
  97. package/dist/context/getLabels.js +9 -7
  98. package/dist/context/getReviewSlug.d.ts +4 -0
  99. package/dist/context/getReviewSlug.js +21 -0
  100. package/dist/context/index.d.ts +2 -4
  101. package/dist/context/index.js +15 -162
  102. package/dist/context/transformJobOnlyVars.d.ts +5 -2
  103. package/dist/context/transformJobOnlyVars.js +4 -2
  104. package/dist/context/utils/envVars.d.ts +1 -1
  105. package/dist/context/utils/envVars.js +5 -2
  106. package/dist/defaults/index.js +3 -1
  107. package/dist/deploy/base/deploy.d.ts +3 -3
  108. package/dist/deploy/base/deploy.js +37 -21
  109. package/dist/deploy/base/index.d.ts +3 -5
  110. package/dist/deploy/base/index.js +3 -1
  111. package/dist/deploy/base/rollback.d.ts +3 -3
  112. package/dist/deploy/base/rollback.js +13 -9
  113. package/dist/deploy/base/stop.d.ts +3 -3
  114. package/dist/deploy/base/stop.js +16 -11
  115. package/dist/deploy/base/types.d.ts +1 -1
  116. package/dist/deploy/base/types.js +3 -1
  117. package/dist/deploy/base/variables.js +4 -2
  118. package/dist/deploy/cloudRun/artifactsRegistry.d.ts +8 -11
  119. package/dist/deploy/cloudRun/artifactsRegistry.js +15 -14
  120. package/dist/deploy/cloudRun/cleanup.d.ts +2 -2
  121. package/dist/deploy/cloudRun/cleanup.js +3 -1
  122. package/dist/deploy/cloudRun/cloudRunRevisions.d.ts +2 -2
  123. package/dist/deploy/cloudRun/cloudRunRevisions.js +7 -6
  124. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.d.ts +8 -6
  125. package/dist/deploy/cloudRun/createJobs/cloudRunJobs.js +57 -106
  126. package/dist/deploy/cloudRun/createJobs/cloudRunServices.d.ts +3 -3
  127. package/dist/deploy/cloudRun/createJobs/cloudRunServices.js +79 -15
  128. package/dist/deploy/cloudRun/createJobs/common.d.ts +7 -7
  129. package/dist/deploy/cloudRun/createJobs/common.js +6 -3
  130. package/dist/deploy/cloudRun/createJobs/constants.d.ts +1 -0
  131. package/dist/deploy/cloudRun/createJobs/constants.js +7 -0
  132. package/dist/deploy/cloudRun/createJobs/execute/onDeploy.d.ts +3 -0
  133. package/dist/deploy/cloudRun/createJobs/execute/onDeploy.js +115 -0
  134. package/dist/deploy/cloudRun/createJobs/execute/schedules.d.ts +3 -0
  135. package/dist/deploy/cloudRun/createJobs/execute/schedules.js +173 -0
  136. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.d.ts +2 -2
  137. package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +13 -5
  138. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.d.ts +2 -2
  139. package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +7 -3
  140. package/dist/deploy/cloudRun/createJobs/healthCheck.d.ts +5 -0
  141. package/dist/deploy/cloudRun/createJobs/healthCheck.js +82 -0
  142. package/dist/deploy/cloudRun/createJobs/index.d.ts +2 -2
  143. package/dist/deploy/cloudRun/createJobs/index.js +26 -12
  144. package/dist/deploy/cloudRun/createJobs/volumes.d.ts +3 -0
  145. package/dist/deploy/cloudRun/createJobs/volumes.js +58 -0
  146. package/dist/deploy/cloudRun/index.d.ts +2 -2
  147. package/dist/deploy/cloudRun/index.js +25 -13
  148. package/dist/deploy/cloudRun/utils/cloudRunExecutionUrl.d.ts +10 -0
  149. package/dist/deploy/cloudRun/utils/cloudRunExecutionUrl.js +16 -0
  150. package/dist/deploy/cloudRun/utils/createArgsString.d.ts +2 -2
  151. package/dist/deploy/cloudRun/utils/createArgsString.js +3 -1
  152. package/dist/deploy/cloudRun/utils/database.d.ts +25 -4
  153. package/dist/deploy/cloudRun/utils/database.js +49 -15
  154. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.d.ts +2 -2
  155. package/dist/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.js +3 -1
  156. package/dist/deploy/cloudRun/utils/getJobOrServiceArgs.d.ts +2 -0
  157. package/dist/deploy/cloudRun/utils/getJobOrServiceArgs.js +12 -0
  158. package/dist/deploy/cloudRun/utils/getServiceName.d.ts +2 -2
  159. package/dist/deploy/cloudRun/utils/getServiceName.js +3 -1
  160. package/dist/deploy/cloudRun/utils/jobName.d.ts +6 -1
  161. package/dist/deploy/cloudRun/utils/jobName.js +18 -4
  162. package/dist/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.js +3 -1
  163. package/dist/deploy/cloudSql/utils.d.ts +2 -1
  164. package/dist/deploy/cloudSql/utils.js +7 -2
  165. package/dist/deploy/custom/deployJob.d.ts +2 -2
  166. package/dist/deploy/custom/deployJob.js +10 -9
  167. package/dist/deploy/custom/index.d.ts +2 -2
  168. package/dist/deploy/custom/index.js +3 -1
  169. package/dist/deploy/dockerTag/deployJob.d.ts +2 -2
  170. package/dist/deploy/dockerTag/deployJob.js +6 -6
  171. package/dist/deploy/dockerTag/index.d.ts +2 -2
  172. package/dist/deploy/dockerTag/index.js +3 -1
  173. package/dist/deploy/index.d.ts +10 -9
  174. package/dist/deploy/index.js +13 -7
  175. package/dist/deploy/kubernetes/additionalSecretKeys.d.ts +3 -1
  176. package/dist/deploy/kubernetes/additionalSecretKeys.js +3 -1
  177. package/dist/deploy/kubernetes/cloudSql/index.d.ts +6 -5
  178. package/dist/deploy/kubernetes/cloudSql/index.js +14 -21
  179. package/dist/deploy/kubernetes/deployJob.d.ts +2 -2
  180. package/dist/deploy/kubernetes/deployJob.js +23 -22
  181. package/dist/deploy/kubernetes/index.d.ts +2 -2
  182. package/dist/deploy/kubernetes/index.js +52 -15
  183. package/dist/deploy/kubernetes/kubeEnv.d.ts +5 -4
  184. package/dist/deploy/kubernetes/kubeEnv.js +9 -5
  185. package/dist/deploy/kubernetes/kubeValues.d.ts +5 -6
  186. package/dist/deploy/kubernetes/kubeValues.js +17 -19
  187. package/dist/deploy/kubernetes/mongodb.d.ts +2 -2
  188. package/dist/deploy/kubernetes/mongodb.js +14 -12
  189. package/dist/deploy/sbom.d.ts +4 -4
  190. package/dist/deploy/sbom.js +8 -4
  191. package/dist/deploy/types/base.d.ts +5 -5
  192. package/dist/deploy/types/base.js +3 -1
  193. package/dist/deploy/types/custom.d.ts +3 -7
  194. package/dist/deploy/types/custom.js +3 -1
  195. package/dist/deploy/types/dockerTag.d.ts +1 -1
  196. package/dist/deploy/types/dockerTag.js +3 -1
  197. package/dist/deploy/types/googleCloudRun.d.ts +291 -16
  198. package/dist/deploy/types/googleCloudRun.js +28 -1
  199. package/dist/deploy/types/index.d.ts +8 -7
  200. package/dist/deploy/types/index.js +21 -10
  201. package/dist/deploy/types/kubernetes.d.ts +21 -54
  202. package/dist/deploy/types/kubernetes.js +3 -1
  203. package/dist/deploy/utils.d.ts +2 -2
  204. package/dist/deploy/utils.js +5 -2
  205. package/dist/globalScriptFunctions/index.d.ts +14 -0
  206. package/dist/globalScriptFunctions/index.js +37 -0
  207. package/dist/index.d.ts +5 -2
  208. package/dist/index.js +18 -9
  209. package/dist/packageInfos.d.ts +4 -0
  210. package/dist/packageInfos.js +20 -0
  211. package/dist/pipeline/__tests__/getPipelineStages.test.d.ts +1 -0
  212. package/dist/pipeline/__tests__/getPipelineStages.test.js +73 -0
  213. package/dist/pipeline/createAllJobs.d.ts +16 -6
  214. package/dist/pipeline/createAllJobs.js +99 -27
  215. package/dist/pipeline/createJobsForComponent.d.ts +2 -2
  216. package/dist/pipeline/createJobsForComponent.js +9 -149
  217. package/dist/pipeline/createJobsForWorkspace.d.ts +3 -0
  218. package/dist/pipeline/createJobsForWorkspace.js +12 -0
  219. package/dist/pipeline/createMainPipeline.d.ts +3 -0
  220. package/dist/pipeline/createMainPipeline.js +283 -0
  221. package/dist/pipeline/generatePipelineFiles.d.ts +7 -0
  222. package/dist/pipeline/generatePipelineFiles.js +305 -0
  223. package/dist/pipeline/getPipelineStages.d.ts +7 -0
  224. package/dist/pipeline/getPipelineStages.js +56 -0
  225. package/dist/pipeline/gitlab/createGitlabJobs.d.ts +11 -14
  226. package/dist/pipeline/gitlab/createGitlabJobs.js +264 -74
  227. package/dist/pipeline/gitlab/createGitlabPipeline.d.ts +9 -0
  228. package/dist/pipeline/gitlab/createGitlabPipeline.js +77 -0
  229. package/dist/pipeline/gitlab/gitlabReleaseJobs.d.ts +33 -0
  230. package/dist/pipeline/gitlab/gitlabReleaseJobs.js +25 -0
  231. package/dist/pipeline/gitlab/sortGitLabJobDefProps.d.ts +7 -0
  232. package/dist/pipeline/gitlab/sortGitLabJobDefProps.js +27 -0
  233. package/dist/pipeline/index.d.ts +3 -2
  234. package/dist/pipeline/index.js +16 -9
  235. package/dist/pipeline/packageManager.d.ts +4 -2
  236. package/dist/pipeline/packageManager.js +56 -19
  237. package/dist/pipeline/yarn/yarnUtils.d.ts +2 -2
  238. package/dist/pipeline/yarn/yarnUtils.js +18 -15
  239. package/dist/rules/index.d.ts +10 -3
  240. package/dist/rules/index.js +35 -17
  241. package/dist/runner/index.d.ts +1 -1
  242. package/dist/runner/index.js +3 -1
  243. package/dist/tsconfig.tsbuildinfo +1 -1
  244. package/dist/types/config.d.ts +54 -36
  245. package/dist/types/config.js +5 -2
  246. package/dist/types/context.d.ts +123 -38
  247. package/dist/types/context.js +12 -1
  248. package/dist/types/environmentContext.d.ts +15 -12
  249. package/dist/types/environmentContext.js +3 -1
  250. package/dist/types/gitlab-ci-yml.d.ts +30 -30
  251. package/dist/types/gitlab-ci-yml.js +3 -2
  252. package/dist/types/gitlab-types.d.ts +8 -8
  253. package/dist/types/gitlab-types.js +3 -1
  254. package/dist/types/index.d.ts +3 -1
  255. package/dist/types/index.js +16 -8
  256. package/dist/types/jobDefinition.d.ts +11 -0
  257. package/dist/types/jobDefinition.js +5 -0
  258. package/dist/types/jobs.d.ts +30 -15
  259. package/dist/types/jobs.js +3 -1
  260. package/dist/types/pipeline.d.ts +3 -3
  261. package/dist/types/pipeline.js +3 -1
  262. package/dist/types/utils.d.ts +1 -1
  263. package/dist/types/utils.js +3 -1
  264. package/dist/utils/gitlab.js +7 -2
  265. package/dist/utils/index.d.ts +2 -1
  266. package/dist/utils/index.js +10 -3
  267. package/dist/utils/jsonParse.d.ts +1 -0
  268. package/dist/utils/jsonParse.js +14 -0
  269. package/dist/utils/removeUndefined.d.ts +1 -0
  270. package/dist/utils/removeUndefined.js +36 -0
  271. package/dist/utils/writeFiles.d.ts +11 -0
  272. package/dist/{pipeline/commitInfo/getBuildId.js → utils/writeFiles.js} +39 -22
  273. package/dist/variables/VariableValue.d.ts +3 -0
  274. package/dist/variables/VariableValue.js +5 -0
  275. package/dist/variables/VariableValueContainingReferences.d.ts +24 -0
  276. package/dist/variables/VariableValueContainingReferences.js +97 -0
  277. package/dist/variables/__tests__/resolveAllReferences.test.d.ts +1 -0
  278. package/dist/variables/__tests__/resolveAllReferences.test.js +218 -0
  279. package/dist/variables/__tests__/resolveAllReferencesOnce.test.d.ts +1 -0
  280. package/dist/variables/__tests__/resolveAllReferencesOnce.test.js +171 -0
  281. package/dist/variables/__tests__/resolveReferencesOnce.test.d.ts +1 -0
  282. package/dist/variables/__tests__/resolveReferencesOnce.test.js +199 -0
  283. package/dist/variables/__tests__/variableValue.test.d.ts +1 -0
  284. package/dist/variables/__tests__/variableValue.test.js +36 -0
  285. package/dist/variables/resolveAllReferences.d.ts +3 -0
  286. package/dist/{pipeline/createChildPipeline.js → variables/resolveAllReferences.js} +44 -48
  287. package/dist/variables/resolveAllReferencesOnce.d.ts +5 -0
  288. package/dist/variables/resolveAllReferencesOnce.js +191 -0
  289. package/dist/variables/resolveReferencesOnce.d.ts +8 -0
  290. package/dist/variables/resolveReferencesOnce.js +22 -0
  291. package/examples/.test-gen-ignore +1 -0
  292. package/examples/__snapshots__/cloud-run-health-check-defaults.test.ts.snap +1394 -0
  293. package/examples/__snapshots__/cloud-run-health-check-only-startup.test.ts.snap +1394 -0
  294. package/examples/__snapshots__/cloud-run-health-check.test.ts.snap +1394 -0
  295. package/examples/__snapshots__/cloud-run-http2.test.ts.snap +1394 -0
  296. package/examples/__snapshots__/cloud-run-llama.test.ts.snap +624 -0
  297. package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +1394 -0
  298. package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +1394 -0
  299. package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +1410 -0
  300. package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +1394 -0
  301. package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +1502 -0
  302. package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +1394 -0
  303. package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +1412 -0
  304. package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +1462 -0
  305. package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +1462 -0
  306. package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +1394 -0
  307. package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +1394 -0
  308. package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +1466 -0
  309. package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +1284 -0
  310. package/examples/__snapshots__/cloud-run-with-gpu.test.ts.snap +1394 -0
  311. package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +1394 -0
  312. package/examples/__snapshots__/cloud-run-with-sql-legacy-jobs.test.ts.snap +1709 -0
  313. package/examples/__snapshots__/cloud-run-with-sql-multiple-dbs.test.ts.snap +4515 -0
  314. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +2950 -0
  315. package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +1772 -0
  316. package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +1402 -0
  317. package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +1261 -0
  318. package/examples/__snapshots__/custom-build-job.test.ts.snap +1156 -0
  319. package/examples/__snapshots__/custom-deploy.test.ts.snap +1059 -0
  320. package/examples/__snapshots__/custom-envs.test.ts.snap +786 -0
  321. package/examples/__snapshots__/custom-sbom-java.test.ts.snap +1152 -0
  322. package/examples/__snapshots__/custom-verify-job.test.ts.snap +1606 -0
  323. package/examples/__snapshots__/git-submodule.test.ts.snap +1395 -0
  324. package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +1713 -0
  325. package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +1733 -0
  326. package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +3265 -0
  327. package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +1837 -0
  328. package/examples/__snapshots__/local-dot-env.test.ts.snap +1318 -0
  329. package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +1790 -0
  330. package/examples/__snapshots__/multiline-var.test.ts.snap +5585 -0
  331. package/examples/__snapshots__/native-app.test.ts.snap +2210 -0
  332. package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +1394 -0
  333. package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +1402 -0
  334. package/examples/__snapshots__/override-secrets.test.ts.snap +1419 -0
  335. package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +1464 -0
  336. package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +1444 -0
  337. package/examples/__snapshots__/referencing-other-vars.test.ts.snap +4645 -0
  338. package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +1424 -0
  339. package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +2298 -0
  340. package/examples/__snapshots__/workspace-api-www.test.ts.snap +2290 -0
  341. package/examples/__utils__/helpers.ts +9 -12
  342. package/examples/cloud-run-health-check-defaults.test.ts +11 -0
  343. package/examples/cloud-run-health-check-defaults.ts +28 -0
  344. package/examples/cloud-run-health-check-only-startup.test.ts +11 -0
  345. package/examples/cloud-run-health-check-only-startup.ts +38 -0
  346. package/examples/cloud-run-health-check.test.ts +11 -0
  347. package/examples/cloud-run-health-check.ts +45 -0
  348. package/examples/cloud-run-http2.test.ts +11 -0
  349. package/examples/cloud-run-http2.ts +29 -0
  350. package/examples/cloud-run-llama.test.ts +11 -0
  351. package/examples/cloud-run-llama.ts +40 -0
  352. package/examples/cloud-run-memory-limit.test.ts +11 -0
  353. package/examples/cloud-run-memory-limit.ts +12 -7
  354. package/examples/cloud-run-meteor-with-worker.test.ts +11 -0
  355. package/examples/cloud-run-meteor-with-worker.ts +13 -7
  356. package/examples/cloud-run-nextjs.test.ts +11 -0
  357. package/examples/cloud-run-nextjs.ts +28 -0
  358. package/examples/cloud-run-no-cpu-throttling.test.ts +11 -0
  359. package/examples/cloud-run-no-cpu-throttling.ts +8 -6
  360. package/examples/cloud-run-no-service.test.ts +11 -0
  361. package/examples/cloud-run-no-service.ts +39 -0
  362. package/examples/cloud-run-non-public.test.ts +11 -0
  363. package/examples/cloud-run-non-public.ts +7 -6
  364. package/examples/cloud-run-post-stop-job.test.ts +11 -0
  365. package/examples/cloud-run-post-stop-job.ts +15 -6
  366. package/examples/cloud-run-service-custom-vpc-connector.test.ts +11 -0
  367. package/examples/cloud-run-service-custom-vpc-connector.ts +37 -0
  368. package/examples/cloud-run-service-custom-vpc.test.ts +11 -0
  369. package/examples/cloud-run-service-custom-vpc.ts +39 -0
  370. package/examples/cloud-run-service-gen2.test.ts +11 -0
  371. package/examples/cloud-run-service-gen2.ts +8 -6
  372. package/examples/cloud-run-service-increase-timout.test.ts +11 -0
  373. package/examples/cloud-run-service-increase-timout.ts +29 -0
  374. package/examples/cloud-run-service-with-volumes.test.ts +11 -0
  375. package/examples/cloud-run-service-with-volumes.ts +64 -0
  376. package/examples/cloud-run-storybook.test.ts +11 -0
  377. package/examples/cloud-run-storybook.ts +33 -0
  378. package/examples/cloud-run-with-gpu.test.ts +11 -0
  379. package/examples/cloud-run-with-gpu.ts +30 -0
  380. package/examples/cloud-run-with-ngnix.test.ts +11 -0
  381. package/examples/cloud-run-with-ngnix.ts +29 -0
  382. package/examples/cloud-run-with-sql-legacy-jobs.test.ts +11 -0
  383. package/examples/cloud-run-with-sql-legacy-jobs.ts +49 -0
  384. package/examples/cloud-run-with-sql-multiple-dbs.test.ts +11 -0
  385. package/examples/cloud-run-with-sql-multiple-dbs.ts +87 -0
  386. package/examples/cloud-run-with-sql-reuse-db.test.ts +11 -0
  387. package/examples/cloud-run-with-sql-reuse-db.ts +7 -6
  388. package/examples/cloud-run-with-sql.test.ts +11 -0
  389. package/examples/cloud-run-with-sql.ts +45 -24
  390. package/examples/cloud-run-with-worker.test.ts +11 -0
  391. package/examples/cloud-run-with-worker.ts +8 -6
  392. package/examples/custom-build-job-with-tests.test.ts +11 -0
  393. package/examples/custom-build-job-with-tests.ts +7 -6
  394. package/examples/custom-build-job.test.ts +11 -0
  395. package/examples/custom-build-job.ts +7 -6
  396. package/examples/custom-deploy.test.ts +11 -0
  397. package/examples/custom-deploy.ts +22 -14
  398. package/examples/custom-envs.test.ts +11 -0
  399. package/examples/custom-envs.ts +7 -6
  400. package/examples/custom-sbom-java.test.ts +11 -0
  401. package/examples/custom-sbom-java.ts +12 -8
  402. package/examples/custom-verify-job.test.ts +11 -0
  403. package/examples/custom-verify-job.ts +65 -0
  404. package/examples/git-submodule.test.ts +11 -0
  405. package/examples/git-submodule.ts +30 -0
  406. package/examples/kubernetes-application-customization.test.ts +11 -0
  407. package/examples/kubernetes-application-customization.ts +9 -6
  408. package/examples/kubernetes-with-cloud-sql.test.ts +11 -0
  409. package/examples/kubernetes-with-cloud-sql.ts +9 -6
  410. package/examples/kubernetes-with-jobs.test.ts +11 -0
  411. package/examples/kubernetes-with-jobs.ts +9 -6
  412. package/examples/kubernetes-with-mongodb.test.ts +11 -0
  413. package/examples/kubernetes-with-mongodb.ts +9 -6
  414. package/examples/local-dot-env.test.ts +11 -0
  415. package/examples/local-dot-env.ts +27 -0
  416. package/examples/meteor-kubernetes.test.ts +11 -0
  417. package/examples/meteor-kubernetes.ts +6 -7
  418. package/examples/multiline-var.test.ts +11 -0
  419. package/examples/multiline-var.ts +107 -0
  420. package/examples/native-app.test.ts +11 -0
  421. package/examples/native-app.ts +24 -19
  422. package/examples/node-build-with-custom-image.test.ts +11 -0
  423. package/examples/node-build-with-custom-image.ts +7 -6
  424. package/examples/node-build-with-docker-additions.test.ts +11 -0
  425. package/examples/node-build-with-docker-additions.ts +7 -6
  426. package/examples/override-secrets.test.ts +11 -0
  427. package/examples/override-secrets.ts +44 -0
  428. package/examples/rails-k8s-with-worker-dockerfile.test.ts +33 -0
  429. package/examples/rails-k8s-with-worker.test.ts +11 -0
  430. package/examples/rails-k8s-with-worker.ts +13 -13
  431. package/examples/referencing-other-vars.test.ts +11 -0
  432. package/examples/referencing-other-vars.ts +83 -0
  433. package/examples/wait-for-other-deploy.test.ts +11 -0
  434. package/examples/wait-for-other-deploy.ts +6 -5
  435. package/examples/workspace-api-www-turbo-cache.test.ts +11 -0
  436. package/examples/workspace-api-www-turbo-cache.ts +52 -0
  437. package/examples/workspace-api-www.test.ts +11 -0
  438. package/examples/workspace-api-www.ts +46 -0
  439. package/package.json +23 -26
  440. package/scripts/generate-examples-test.ts +84 -0
  441. package/scripts/generate-gitlab-ci-types.ts +2 -2
  442. package/scripts/tsconfig.json +7 -0
  443. package/src/bash/BashExpression.ts +78 -0
  444. package/src/bash/bashEscape.ts +164 -0
  445. package/src/bash/bashExpressionPerPipelineType.ts +16 -0
  446. package/src/bash/bashYaml.ts +80 -0
  447. package/src/bash/getInjectVarsScript.ts +21 -0
  448. package/src/bash/index.ts +2 -0
  449. package/src/build/artifacts/createBuildJobArtifact.ts +63 -0
  450. package/src/build/base/__tests__/createArtifactsConfig.test.ts +3 -3
  451. package/src/build/base/constants.ts +1 -1
  452. package/src/build/base/createAppBuildJob.ts +40 -24
  453. package/src/build/base/createArtifactsConfig.ts +2 -2
  454. package/src/build/base/createBuildJobDefinition.ts +37 -0
  455. package/src/build/base/index.ts +40 -8
  456. package/src/build/base/writeBuildInfo.ts +3 -3
  457. package/src/build/base/writeDotEnv.ts +25 -6
  458. package/src/build/cache/createJobCache.ts +83 -0
  459. package/src/build/cache/getAllCacheConfigsFromConfig.ts +29 -0
  460. package/src/build/cache/transformLegacyJobCache.ts +14 -0
  461. package/src/build/custom/__tests__/testJob.test.ts +10 -13
  462. package/src/build/custom/buildJob.ts +11 -37
  463. package/src/build/custom/index.ts +4 -2
  464. package/src/build/custom/testJob.ts +24 -21
  465. package/src/build/docker.ts +110 -49
  466. package/src/build/index.ts +45 -11
  467. package/src/build/node/buildJob.ts +68 -69
  468. package/src/build/node/cache.ts +28 -34
  469. package/src/build/node/constants.ts +2 -2
  470. package/src/build/node/index.ts +13 -4
  471. package/src/build/node/meteor.ts +19 -24
  472. package/src/build/node/testJob.ts +44 -25
  473. package/src/build/node/yarn.ts +22 -15
  474. package/src/build/rails/build.ts +15 -9
  475. package/src/build/rails/index.ts +4 -2
  476. package/src/build/rails/test.ts +41 -12
  477. package/src/build/sbom.ts +21 -11
  478. package/src/build/types.ts +198 -47
  479. package/src/catladder-gitlab.ts +7 -56
  480. package/src/config/__tests__/__snapshots__/getAllEnvs.test.ts.snap +31 -0
  481. package/src/config/__tests__/__snapshots__/getAllEnvsInAllComponents.test.ts.snap +15 -0
  482. package/src/config/__tests__/getAllEnvs.test.ts +71 -0
  483. package/src/config/__tests__/getAllEnvsInAllComponents.test.ts +63 -0
  484. package/src/config/configruedEnvs.ts +6 -6
  485. package/src/config/readConfig.ts +15 -22
  486. package/src/constants.ts +5 -2
  487. package/src/context/createAllComponentsContext.ts +31 -0
  488. package/src/context/createComponentContext.ts +148 -0
  489. package/src/context/createWorkspaceContext.ts +56 -0
  490. package/src/context/getBuildInfoVariables.ts +36 -0
  491. package/src/context/getEnvConfig.ts +25 -5
  492. package/src/context/getEnvType.ts +1 -1
  493. package/src/context/getEnvironment.ts +8 -24
  494. package/src/context/getEnvironmentContext.ts +25 -29
  495. package/src/context/getEnvironmentVariables.ts +101 -83
  496. package/src/context/getLabels.ts +8 -5
  497. package/src/context/getReviewSlug.ts +27 -0
  498. package/src/context/index.ts +1 -65
  499. package/src/context/transformJobOnlyVars.ts +6 -3
  500. package/src/context/utils/envVars.ts +5 -4
  501. package/src/deploy/base/deploy.ts +63 -47
  502. package/src/deploy/base/index.ts +11 -6
  503. package/src/deploy/base/rollback.ts +11 -16
  504. package/src/deploy/base/stop.ts +11 -15
  505. package/src/deploy/base/variables.ts +1 -1
  506. package/src/deploy/cloudRun/artifactsRegistry.ts +32 -28
  507. package/src/deploy/cloudRun/cleanup.ts +5 -5
  508. package/src/deploy/cloudRun/cloudRunRevisions.ts +9 -11
  509. package/src/deploy/cloudRun/createJobs/cloudRunJobs.ts +71 -153
  510. package/src/deploy/cloudRun/createJobs/cloudRunServices.ts +65 -26
  511. package/src/deploy/cloudRun/createJobs/common.ts +7 -7
  512. package/src/deploy/cloudRun/createJobs/constants.ts +1 -0
  513. package/src/deploy/cloudRun/createJobs/execute/onDeploy.ts +102 -0
  514. package/src/deploy/cloudRun/createJobs/execute/schedules.ts +186 -0
  515. package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +27 -16
  516. package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +9 -11
  517. package/src/deploy/cloudRun/createJobs/healthCheck.ts +64 -0
  518. package/src/deploy/cloudRun/createJobs/index.ts +20 -14
  519. package/src/deploy/cloudRun/createJobs/volumes.ts +23 -0
  520. package/src/deploy/cloudRun/index.ts +94 -60
  521. package/src/deploy/cloudRun/utils/cloudRunExecutionUrl.ts +20 -0
  522. package/src/deploy/cloudRun/utils/createArgsString.ts +6 -2
  523. package/src/deploy/cloudRun/utils/database.ts +116 -9
  524. package/src/deploy/cloudRun/utils/gcloudServiceAccountLoginCommands.ts +5 -3
  525. package/src/deploy/cloudRun/utils/getJobOrServiceArgs.ts +18 -0
  526. package/src/deploy/cloudRun/utils/getServiceName.ts +2 -2
  527. package/src/deploy/cloudRun/utils/jobName.ts +22 -2
  528. package/src/deploy/cloudRun/utils/removeFirstLinesFromCommandOutput.ts +1 -1
  529. package/src/deploy/cloudSql/utils.ts +13 -10
  530. package/src/deploy/custom/deployJob.ts +15 -10
  531. package/src/deploy/custom/index.ts +2 -2
  532. package/src/deploy/dockerTag/deployJob.ts +6 -7
  533. package/src/deploy/dockerTag/index.ts +8 -7
  534. package/src/deploy/index.ts +15 -12
  535. package/src/deploy/kubernetes/additionalSecretKeys.ts +3 -1
  536. package/src/deploy/kubernetes/cloudSql/index.ts +16 -25
  537. package/src/deploy/kubernetes/deployJob.ts +30 -21
  538. package/src/deploy/kubernetes/index.ts +43 -35
  539. package/src/deploy/kubernetes/kubeEnv.ts +12 -10
  540. package/src/deploy/kubernetes/kubeValues.ts +25 -20
  541. package/src/deploy/kubernetes/mongodb.ts +15 -15
  542. package/src/deploy/sbom.ts +20 -10
  543. package/src/deploy/types/base.ts +3 -3
  544. package/src/deploy/types/custom.ts +3 -7
  545. package/src/deploy/types/googleCloudRun.ts +359 -2
  546. package/src/deploy/types/index.ts +9 -2
  547. package/src/deploy/types/kubernetes.ts +1 -36
  548. package/src/deploy/utils.ts +5 -5
  549. package/src/globalScriptFunctions/index.ts +30 -0
  550. package/src/index.ts +4 -1
  551. package/src/packageInfos.ts +14 -0
  552. package/src/pipeline/__tests__/__snapshots__/getPipelineStages.test.ts.snap +69 -0
  553. package/src/pipeline/__tests__/getPipelineStages.test.ts +63 -0
  554. package/src/pipeline/createAllJobs.ts +67 -33
  555. package/src/pipeline/createJobsForComponent.ts +17 -37
  556. package/src/pipeline/createJobsForWorkspace.ts +12 -0
  557. package/src/pipeline/createMainPipeline.ts +118 -0
  558. package/src/pipeline/generatePipelineFiles.ts +100 -0
  559. package/src/pipeline/getPipelineStages.ts +23 -0
  560. package/src/pipeline/gitlab/createGitlabJobs.ts +398 -108
  561. package/src/pipeline/gitlab/createGitlabPipeline.ts +35 -0
  562. package/src/pipeline/gitlab/gitlabReleaseJobs.ts +23 -0
  563. package/src/pipeline/gitlab/sortGitLabJobDefProps.ts +59 -0
  564. package/src/pipeline/index.ts +2 -1
  565. package/src/pipeline/packageManager.ts +42 -18
  566. package/src/pipeline/yarn/yarnUtils.ts +15 -12
  567. package/src/rules/index.ts +41 -18
  568. package/src/runner/index.ts +0 -1
  569. package/src/types/config.ts +62 -23
  570. package/src/types/context.ts +167 -36
  571. package/src/types/environmentContext.ts +18 -13
  572. package/src/types/gitlab-ci-yml.ts +0 -1
  573. package/src/types/gitlab-types.ts +10 -7
  574. package/src/types/index.ts +2 -0
  575. package/src/types/jobDefinition.ts +34 -0
  576. package/src/types/jobs.ts +31 -15
  577. package/src/types/utils.ts +4 -4
  578. package/src/utils/gitlab.ts +20 -3
  579. package/src/utils/index.ts +6 -3
  580. package/src/utils/jsonParse.ts +7 -0
  581. package/src/utils/removeUndefined.ts +4 -0
  582. package/src/utils/writeFiles.ts +52 -0
  583. package/src/variables/VariableValue.ts +6 -0
  584. package/src/variables/VariableValueContainingReferences.ts +89 -0
  585. package/src/variables/__tests__/resolveAllReferences.test.ts +110 -0
  586. package/src/variables/__tests__/resolveAllReferencesOnce.test.ts +64 -0
  587. package/src/variables/__tests__/resolveReferencesOnce.test.ts +117 -0
  588. package/src/variables/__tests__/variableValue.test.ts +73 -0
  589. package/src/variables/resolveAllReferences.ts +46 -0
  590. package/src/variables/resolveAllReferencesOnce.ts +44 -0
  591. package/src/variables/resolveReferencesOnce.ts +29 -0
  592. package/bin/catladder-gitlab-dev.js +0 -3
  593. package/bin/catladder-gitlab.js +0 -3
  594. package/dist/bundles/catladder-gitlab/index.js +0 -34559
  595. package/dist/context/__tests__/resolveReferences.test.js +0 -336
  596. package/dist/context/resolveReferences.d.ts +0 -4
  597. package/dist/context/resolveReferences.js +0 -254
  598. package/dist/deploy/cloudRun/createJobs/variables.d.ts +0 -5
  599. package/dist/deploy/cloudRun/createJobs/variables.js +0 -19
  600. package/dist/deploy/kubernetes/processSecretsAsFiles.d.ts +0 -84
  601. package/dist/deploy/kubernetes/processSecretsAsFiles.js +0 -31
  602. package/dist/pipeline/commitInfo/getBuildId.d.ts +0 -6
  603. package/dist/pipeline/commitInfo/getCommitInfo.d.ts +0 -2
  604. package/dist/pipeline/createChildPipeline.d.ts +0 -3
  605. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +0 -1839
  606. package/examples/__snapshots__/cloud-run-meteor-with-worker.ts.snap +0 -1807
  607. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +0 -1839
  608. package/examples/__snapshots__/cloud-run-non-public.ts.snap +0 -1839
  609. package/examples/__snapshots__/cloud-run-post-stop-job.ts.snap +0 -1849
  610. package/examples/__snapshots__/cloud-run-service-gen2.ts.snap +0 -1839
  611. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +0 -3647
  612. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +0 -3658
  613. package/examples/__snapshots__/cloud-run-with-worker.ts.snap +0 -1847
  614. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +0 -1663
  615. package/examples/__snapshots__/custom-build-job.ts.snap +0 -1375
  616. package/examples/__snapshots__/custom-deploy.ts.snap +0 -1625
  617. package/examples/__snapshots__/custom-envs.ts.snap +0 -1127
  618. package/examples/__snapshots__/custom-sbom-java.ts.snap +0 -1383
  619. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +0 -2573
  620. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +0 -2533
  621. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +0 -2545
  622. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +0 -4660
  623. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +0 -2737
  624. package/examples/__snapshots__/meteor-kubernetes.ts.snap +0 -2658
  625. package/examples/__snapshots__/native-app.ts.snap +0 -3007
  626. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +0 -1839
  627. package/examples/__snapshots__/node-build-with-docker-additions.ts.snap +0 -1839
  628. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +0 -4291
  629. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +0 -2049
  630. package/examples/kubernetes-with-cloud-sql-legacy.ts +0 -33
  631. package/scripts/bundle +0 -2
  632. package/src/context/__tests__/resolveReferences.test.ts +0 -143
  633. package/src/context/resolveReferences.ts +0 -70
  634. package/src/deploy/cloudRun/createJobs/variables.ts +0 -21
  635. package/src/deploy/kubernetes/processSecretsAsFiles.ts +0 -34
  636. package/src/pipeline/commitInfo/getBuildId.ts +0 -17
  637. package/src/pipeline/commitInfo/getCommitInfo.ts +0 -15
  638. package/src/pipeline/createChildPipeline.ts +0 -46
  639. /package/dist/{context/__tests__/resolveReferences.test.d.ts → config/__tests__/getAllEnvs.test.d.ts} +0 -0
@@ -1,3658 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`matches snapshot 1`] = `
4
- {
5
- "mainBranch": {
6
- "image": "path/to/docker/jobs-default:the-version",
7
- "jobs": {
8
- "api 👮 lint": {
9
- "cache": [
10
- {
11
- "key": "api-yarn",
12
- "paths": [
13
- "api/.yarn",
14
- ],
15
- "policy": "pull-push",
16
- },
17
- {
18
- "key": "api-node-modules",
19
- "paths": [
20
- "api/node_modules",
21
- ],
22
- "policy": "pull-push",
23
- },
24
- ],
25
- "image": "path/to/docker/jobs-default:the-version",
26
- "interruptible": true,
27
- "needs": [],
28
- "retry": {
29
- "max": 2,
30
- "when": [
31
- "runner_system_failure",
32
- "stuck_or_timeout_failure",
33
- ],
34
- },
35
- "script": [
36
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
37
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
38
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
39
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
40
- "cd api",
41
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
42
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
43
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
44
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
45
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
46
- "yarn install --immutable",
47
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
48
- "yarn lint",
49
- ],
50
- "stage": "test",
51
- "variables": {
52
- "APP_PATH": "api",
53
- "KUBERNETES_CPU_REQUEST": "0.5",
54
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
55
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
56
- },
57
- },
58
- "api 🔨 app | dev ": {
59
- "artifacts": {
60
- "expire_in": "1 day",
61
- "paths": [
62
- "api/__build_info.json",
63
- "api/dist",
64
- "api/.next",
65
- ],
66
- "reports": {
67
- "junit": undefined,
68
- },
69
- "when": "always",
70
- },
71
- "cache": [
72
- {
73
- "key": "api-yarn",
74
- "paths": [
75
- "api/.yarn",
76
- ],
77
- "policy": "pull-push",
78
- },
79
- {
80
- "key": "api-node-modules",
81
- "paths": [
82
- "api/node_modules",
83
- ],
84
- "policy": "pull-push",
85
- },
86
- {
87
- "key": "api-next-cache",
88
- "paths": [
89
- "api/.next/cache/",
90
- ],
91
- "policy": "pull-push",
92
- },
93
- ],
94
- "image": "path/to/docker/jobs-default:the-version",
95
- "interruptible": true,
96
- "needs": [],
97
- "retry": {
98
- "max": 2,
99
- "when": [
100
- "runner_system_failure",
101
- "stuck_or_timeout_failure",
102
- ],
103
- },
104
- "script": [
105
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
106
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
107
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
108
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
109
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
110
- "cd api",
111
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
112
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
113
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
114
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
115
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
116
- "yarn install --immutable",
117
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
118
- "yarn build",
119
- ],
120
- "stage": "build",
121
- "variables": {
122
- "APP_DIR": "api",
123
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
124
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
125
- "BUILD_INFO_ID": "some-id",
126
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-migration:run",
127
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run",
128
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
129
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
130
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
131
- "DB_NAME": "pan-test-app-dev-api",
132
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
133
- "DB_USER": "my-user",
134
- "ENV_SHORT": "dev",
135
- "ENV_TYPE": "dev",
136
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
137
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
138
- "HOST": "pan-test-app-dev-api-unknown-host.example.com",
139
- "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
140
- "HOST_INTERNAL": "pan-test-app-dev-api-unknown-host.example.com",
141
- "KUBERNETES_CPU_REQUEST": "0.5",
142
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
143
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
144
- "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
145
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-api-unknown-host.example.com",
146
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
147
- },
148
- },
149
- "api 🔨 docker | dev ": {
150
- "cache": [
151
- {
152
- "key": "api-yarn",
153
- "paths": [
154
- "api/.yarn",
155
- ],
156
- "policy": "pull",
157
- },
158
- ],
159
- "image": "path/to/docker/docker-build:the-version",
160
- "interruptible": true,
161
- "needs": [
162
- "api 🔨 app | dev ",
163
- ],
164
- "retry": {
165
- "max": 2,
166
- "when": [
167
- "runner_system_failure",
168
- "stuck_or_timeout_failure",
169
- ],
170
- },
171
- "script": [
172
- "ensureNodeDockerfile",
173
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
174
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
175
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
176
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
177
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
178
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
179
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
180
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
181
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
182
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
183
- "docker push $DOCKER_CACHE_IMAGE",
184
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
185
- ],
186
- "services": [
187
- {
188
- "command": [
189
- "--tls=false",
190
- ],
191
- "name": "docker:24.0.6-dind",
192
- },
193
- ],
194
- "stage": "build",
195
- "variables": {
196
- "APP_DIR": "api",
197
- "DOCKERFILE_ADDITIONS": undefined,
198
- "DOCKERFILE_ADDITIONS_END": undefined,
199
- "DOCKER_BUILDKIT": "1",
200
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
201
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
202
- RUN yarn plugin import workspace-tools
203
- RUN yarn workspaces focus --production && yarn rebuild",
204
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
205
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
206
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
207
- COPY --chown=node:node .yarn /app/.yarn",
208
- "DOCKER_DIR": ".",
209
- "DOCKER_DRIVER": "overlay2",
210
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
211
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api",
212
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
213
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
214
- "DOCKER_TLS_CERTDIR": "",
215
- "KUBERNETES_CPU_REQUEST": "0.5",
216
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
217
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
218
- },
219
- },
220
- "api 🚀 Deploy | dev ": {
221
- "allow_failure": false,
222
- "artifacts": {
223
- "paths": [
224
- "____envvars.yaml",
225
- ],
226
- },
227
- "environment": {
228
- "auto_stop_in": "4 weeks",
229
- "name": "dev/api",
230
- "on_stop": "api 🛑 Stop ⚠️ | dev ",
231
- "url": "https://pan-test-app-dev-api-unknown-host.example.com",
232
- },
233
- "image": "path/to/docker/gcloud:the-version",
234
- "interruptible": true,
235
- "needs": [
236
- {
237
- "artifacts": false,
238
- "job": "api 👮 lint",
239
- },
240
- {
241
- "artifacts": false,
242
- "job": "api 🔨 app | dev ",
243
- },
244
- {
245
- "artifacts": false,
246
- "job": "api 🔨 docker | dev ",
247
- },
248
- {
249
- "artifacts": false,
250
- "job": "api 🧪 test",
251
- },
252
- {
253
- "artifacts": true,
254
- "job": "api 🧾 sbom | dev ",
255
- },
256
- {
257
- "artifacts": false,
258
- "job": "api 🛡 audit",
259
- },
260
- ],
261
- "retry": {
262
- "max": 2,
263
- "when": [
264
- "runner_system_failure",
265
- "stuck_or_timeout_failure",
266
- ],
267
- },
268
- "rules": [
269
- {
270
- "when": "on_success",
271
- },
272
- ],
273
- "script": [
274
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
275
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
276
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
277
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
278
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
279
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
280
- "echo "$ENV_VARS" > ____envvars.yaml",
281
- "set +e",
282
- "echo "ensuring Database..."",
283
- "gcloud sql databases create pan-test-app-dev-api --instance=instancename --project projectId",
284
- "set -e",
285
- "set +e",
286
- "gcloud scheduler jobs create http pan-test-app-dev-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
287
- "set -e",
288
- "gcloud scheduler jobs update http pan-test-app-dev-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
289
- "set +e",
290
- "gcloud run jobs create pan-test-app-dev-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-job-name=pan-test-app-dev-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
291
- "set -e",
292
- "gcloud run jobs update pan-test-app-dev-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-job-name=pan-test-app-dev-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
293
- "set +e",
294
- "gcloud run jobs create pan-test-app-dev-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-job-name=pan-test-app-dev-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
295
- "set -e",
296
- "gcloud run jobs update pan-test-app-dev-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-job-name=pan-test-app-dev-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
297
- "gcloud run deploy pan-test-app-dev-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-service-name=pan-test-app-dev-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
298
- "gcloud run jobs execute pan-test-app-dev-api-migration --project=google-project-id --region=europe-west6",
299
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
300
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
301
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-dev-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
302
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api@$version --quiet --delete-tags; done",
303
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
304
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
305
- "echo Uploading SBOM to Dependency Track",
306
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" "__sbom.json" vex.json || true",
307
- ],
308
- "services": [
309
- {
310
- "command": [
311
- "--tls=false",
312
- ],
313
- "name": "docker:24.0.6-dind",
314
- },
315
- ],
316
- "stage": "deploy dev",
317
- "variables": {
318
- "APP_DIR": "api",
319
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
320
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
321
- "BUILD_INFO_ID": "some-id",
322
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
323
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-migration:run",
324
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run",
325
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
326
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
327
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
328
- "DB_NAME": "pan-test-app-dev-api",
329
- "DB_PASSWORD": "$CL_dev_api_DB_PASSWORD",
330
- "DB_USER": "my-user",
331
- "DOCKER_BUILDKIT": "1",
332
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
333
- "DOCKER_DRIVER": "overlay2",
334
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
335
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api",
336
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
337
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
338
- "DOCKER_TLS_CERTDIR": "",
339
- "ENV_SHORT": "dev",
340
- "ENV_TYPE": "dev",
341
- "ENV_VARS": "ENV_SHORT: 'dev'
342
- APP_DIR: 'api'
343
- ENV_TYPE: 'dev'
344
- BUILD_INFO_ID: 'some-id'
345
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
346
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
347
- HOST: 'pan-test-app-dev-api-unknown-host.example.com'
348
- ROOT_URL: 'https://pan-test-app-dev-api-unknown-host.example.com'
349
- HOST_CANONICAL: 'pan-test-app-dev-api-unknown-host.example.com'
350
- ROOT_URL_INTERNAL: 'https://pan-test-app-dev-api-unknown-host.example.com'
351
- HOST_INTERNAL: 'pan-test-app-dev-api-unknown-host.example.com'
352
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
353
- DB_NAME: 'pan-test-app-dev-api'
354
- DB_USER: 'my-user'
355
- DB_PASSWORD: '$CL_dev_api_DB_PASSWORD'
356
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
357
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
358
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-migration:run'
359
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-dev-api-send-reminders:run'
360
- GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix'
361
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
362
- ",
363
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
364
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
365
- "HOST": "pan-test-app-dev-api-unknown-host.example.com",
366
- "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
367
- "HOST_INTERNAL": "pan-test-app-dev-api-unknown-host.example.com",
368
- "KUBERNETES_CPU_REQUEST": "0.5",
369
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
370
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
371
- "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
372
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-api-unknown-host.example.com",
373
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
374
- },
375
- },
376
- "api 🛑 Stop ⚠️ | dev ": {
377
- "environment": {
378
- "action": "stop",
379
- "name": "dev/api",
380
- "url": "https://pan-test-app-dev-api-unknown-host.example.com",
381
- },
382
- "image": "path/to/docker/gcloud:the-version",
383
- "interruptible": true,
384
- "needs": [],
385
- "retry": {
386
- "max": 2,
387
- "when": [
388
- "runner_system_failure",
389
- "stuck_or_timeout_failure",
390
- ],
391
- },
392
- "rules": [
393
- {
394
- "allow_failure": true,
395
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
396
- "when": "on_success",
397
- },
398
- {
399
- "allow_failure": true,
400
- "when": "manual",
401
- },
402
- ],
403
- "script": [
404
- "set +e",
405
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
406
- "gcloud run services delete pan-test-app-dev-api --project=google-project-id --region=europe-west6",
407
- "gcloud scheduler jobs delete pan-test-app-dev-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
408
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-dev-api-migration --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
409
- "gcloud run jobs delete pan-test-app-dev-api-migration --project=google-project-id --region=europe-west6",
410
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-dev-api-send-reminders --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
411
- "gcloud run jobs delete pan-test-app-dev-api-send-reminders --project=google-project-id --region=europe-west6",
412
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/api --quiet --delete-tags",
413
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
414
- "echo Disabling component in Dependency Track",
415
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" || true",
416
- "set -e",
417
- ],
418
- "stage": "stop dev",
419
- "variables": {
420
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
421
- "GIT_STRATEGY": "none",
422
- "KUBERNETES_CPU_REQUEST": "0.5",
423
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
424
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
425
- },
426
- },
427
- "api 🛡 audit": {
428
- "allow_failure": true,
429
- "image": "path/to/docker/jobs-default:the-version",
430
- "interruptible": true,
431
- "needs": [],
432
- "retry": {
433
- "max": 2,
434
- "when": [
435
- "runner_system_failure",
436
- "stuck_or_timeout_failure",
437
- ],
438
- },
439
- "script": [
440
- "cd api",
441
- "yarn npm audit --environment production",
442
- ],
443
- "stage": "test",
444
- "variables": {
445
- "APP_PATH": "api",
446
- "KUBERNETES_CPU_REQUEST": "0.5",
447
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
448
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
449
- },
450
- },
451
- "api 🧪 test": {
452
- "cache": [
453
- {
454
- "key": "api-yarn",
455
- "paths": [
456
- "api/.yarn",
457
- ],
458
- "policy": "pull-push",
459
- },
460
- {
461
- "key": "api-node-modules",
462
- "paths": [
463
- "api/node_modules",
464
- ],
465
- "policy": "pull-push",
466
- },
467
- ],
468
- "image": "path/to/docker/jobs-testing-chrome:the-version",
469
- "interruptible": true,
470
- "needs": [],
471
- "retry": {
472
- "max": 2,
473
- "when": [
474
- "runner_system_failure",
475
- "stuck_or_timeout_failure",
476
- ],
477
- },
478
- "script": [
479
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
480
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
481
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
482
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
483
- "cd api",
484
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
485
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
486
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
487
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
488
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
489
- "yarn install --immutable",
490
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
491
- "yarn test",
492
- ],
493
- "stage": "test",
494
- "variables": {
495
- "APP_PATH": "api",
496
- "KUBERNETES_CPU_REQUEST": "0.5",
497
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
498
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
499
- },
500
- },
501
- "api 🧾 sbom | dev ": {
502
- "allow_failure": true,
503
- "artifacts": {
504
- "paths": [
505
- "__sbom.json",
506
- ],
507
- },
508
- "image": "aquasec/trivy:0.38.3",
509
- "interruptible": true,
510
- "needs": [],
511
- "retry": {
512
- "max": 2,
513
- "when": [
514
- "runner_system_failure",
515
- "stuck_or_timeout_failure",
516
- ],
517
- },
518
- "script": [
519
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
520
- ],
521
- "stage": "build",
522
- "variables": {},
523
- },
524
- "www 👮 lint": {
525
- "cache": [
526
- {
527
- "key": "www-yarn",
528
- "paths": [
529
- "www/.yarn",
530
- ],
531
- "policy": "pull-push",
532
- },
533
- {
534
- "key": "www-node-modules",
535
- "paths": [
536
- "www/node_modules",
537
- ],
538
- "policy": "pull-push",
539
- },
540
- ],
541
- "image": "path/to/docker/jobs-default:the-version",
542
- "interruptible": true,
543
- "needs": [],
544
- "retry": {
545
- "max": 2,
546
- "when": [
547
- "runner_system_failure",
548
- "stuck_or_timeout_failure",
549
- ],
550
- },
551
- "script": [
552
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
553
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
554
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
555
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
556
- "cd www",
557
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
558
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
559
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
560
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
561
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
562
- "yarn install --immutable",
563
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
564
- "yarn lint",
565
- ],
566
- "stage": "test",
567
- "variables": {
568
- "APP_PATH": "www",
569
- "KUBERNETES_CPU_REQUEST": "0.5",
570
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
571
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
572
- },
573
- },
574
- "www 🔨 app | dev ": {
575
- "artifacts": {
576
- "expire_in": "1 day",
577
- "paths": [
578
- "www/__build_info.json",
579
- "www/dist",
580
- "www/.next",
581
- ],
582
- "reports": {
583
- "junit": undefined,
584
- },
585
- "when": "always",
586
- },
587
- "cache": [
588
- {
589
- "key": "www-yarn",
590
- "paths": [
591
- "www/.yarn",
592
- ],
593
- "policy": "pull-push",
594
- },
595
- {
596
- "key": "www-node-modules",
597
- "paths": [
598
- "www/node_modules",
599
- ],
600
- "policy": "pull-push",
601
- },
602
- {
603
- "key": "www-next-cache",
604
- "paths": [
605
- "www/.next/cache/",
606
- ],
607
- "policy": "pull-push",
608
- },
609
- ],
610
- "image": "path/to/docker/jobs-default:the-version",
611
- "interruptible": true,
612
- "needs": [],
613
- "retry": {
614
- "max": 2,
615
- "when": [
616
- "runner_system_failure",
617
- "stuck_or_timeout_failure",
618
- ],
619
- },
620
- "script": [
621
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
622
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
623
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
624
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
625
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
626
- "cd www",
627
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
628
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
629
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
630
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
631
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
632
- "yarn install --immutable",
633
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
634
- "yarn build",
635
- ],
636
- "stage": "build",
637
- "variables": {
638
- "API_URL": "https://pan-test-app-dev-api-unknown-host.example.com/graphql",
639
- "APP_DIR": "www",
640
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
641
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
642
- "BUILD_INFO_ID": "some-id",
643
- "ENV_SHORT": "dev",
644
- "ENV_TYPE": "dev",
645
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey",
646
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_www_GCLOUD_RUN_canonicalHostSuffix",
647
- "HOST": "pan-test-app-dev-www-unknown-host.example.com",
648
- "HOST_CANONICAL": "pan-test-app-dev-www-unknown-host.example.com",
649
- "HOST_INTERNAL": "pan-test-app-dev-www-unknown-host.example.com",
650
- "KUBERNETES_CPU_REQUEST": "0.5",
651
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
652
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
653
- "ROOT_URL": "https://pan-test-app-dev-www-unknown-host.example.com",
654
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-www-unknown-host.example.com",
655
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
656
- },
657
- },
658
- "www 🔨 docker | dev ": {
659
- "cache": [
660
- {
661
- "key": "www-yarn",
662
- "paths": [
663
- "www/.yarn",
664
- ],
665
- "policy": "pull",
666
- },
667
- ],
668
- "image": "path/to/docker/docker-build:the-version",
669
- "interruptible": true,
670
- "needs": [
671
- "www 🔨 app | dev ",
672
- ],
673
- "retry": {
674
- "max": 2,
675
- "when": [
676
- "runner_system_failure",
677
- "stuck_or_timeout_failure",
678
- ],
679
- },
680
- "script": [
681
- "ensureNodeDockerfile",
682
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
683
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey")",
684
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
685
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
686
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
687
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
688
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
689
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
690
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
691
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
692
- "docker push $DOCKER_CACHE_IMAGE",
693
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
694
- ],
695
- "services": [
696
- {
697
- "command": [
698
- "--tls=false",
699
- ],
700
- "name": "docker:24.0.6-dind",
701
- },
702
- ],
703
- "stage": "build",
704
- "variables": {
705
- "APP_DIR": "www",
706
- "DOCKERFILE_ADDITIONS": undefined,
707
- "DOCKERFILE_ADDITIONS_END": undefined,
708
- "DOCKER_BUILDKIT": "1",
709
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
710
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
711
- RUN yarn plugin import workspace-tools
712
- RUN yarn workspaces focus --production && yarn rebuild",
713
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
714
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
715
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
716
- COPY --chown=node:node .yarn /app/.yarn",
717
- "DOCKER_DIR": ".",
718
- "DOCKER_DRIVER": "overlay2",
719
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
720
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www",
721
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
722
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
723
- "DOCKER_TLS_CERTDIR": "",
724
- "KUBERNETES_CPU_REQUEST": "0.5",
725
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
726
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
727
- },
728
- },
729
- "www 🚀 Deploy | dev ": {
730
- "allow_failure": false,
731
- "artifacts": {
732
- "paths": [
733
- "____envvars.yaml",
734
- ],
735
- },
736
- "environment": {
737
- "auto_stop_in": "4 weeks",
738
- "name": "dev/www",
739
- "on_stop": "www 🛑 Stop ⚠️ | dev ",
740
- "url": "https://pan-test-app-dev-www-unknown-host.example.com",
741
- },
742
- "image": "path/to/docker/gcloud:the-version",
743
- "interruptible": true,
744
- "needs": [
745
- {
746
- "artifacts": false,
747
- "job": "www 👮 lint",
748
- },
749
- {
750
- "artifacts": false,
751
- "job": "www 🔨 app | dev ",
752
- },
753
- {
754
- "artifacts": false,
755
- "job": "www 🔨 docker | dev ",
756
- },
757
- {
758
- "artifacts": false,
759
- "job": "www 🧪 test",
760
- },
761
- {
762
- "artifacts": true,
763
- "job": "www 🧾 sbom | dev ",
764
- },
765
- {
766
- "artifacts": false,
767
- "job": "www 🛡 audit",
768
- },
769
- ],
770
- "retry": {
771
- "max": 2,
772
- "when": [
773
- "runner_system_failure",
774
- "stuck_or_timeout_failure",
775
- ],
776
- },
777
- "rules": [
778
- {
779
- "when": "on_success",
780
- },
781
- ],
782
- "script": [
783
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
784
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey")",
785
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
786
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
787
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
788
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
789
- "echo "$ENV_VARS" > ____envvars.yaml",
790
- "gcloud run deploy pan-test-app-dev-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-service-name=pan-test-app-dev-www --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
791
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
792
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
793
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-dev-www --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
794
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www@$version --quiet --delete-tags; done",
795
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
796
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
797
- "echo Uploading SBOM to Dependency Track",
798
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" "__sbom.json" vex.json || true",
799
- ],
800
- "services": [
801
- {
802
- "command": [
803
- "--tls=false",
804
- ],
805
- "name": "docker:24.0.6-dind",
806
- },
807
- ],
808
- "stage": "deploy dev",
809
- "variables": {
810
- "API_URL": "https://pan-test-app-dev-api-unknown-host.example.com/graphql",
811
- "APP_DIR": "www",
812
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
813
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
814
- "BUILD_INFO_ID": "some-id",
815
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
816
- "DOCKER_BUILDKIT": "1",
817
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
818
- "DOCKER_DRIVER": "overlay2",
819
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
820
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www",
821
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
822
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
823
- "DOCKER_TLS_CERTDIR": "",
824
- "ENV_SHORT": "dev",
825
- "ENV_TYPE": "dev",
826
- "ENV_VARS": "ENV_SHORT: 'dev'
827
- APP_DIR: 'www'
828
- ENV_TYPE: 'dev'
829
- BUILD_INFO_ID: 'some-id'
830
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
831
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
832
- HOST: 'pan-test-app-dev-www-unknown-host.example.com'
833
- ROOT_URL: 'https://pan-test-app-dev-www-unknown-host.example.com'
834
- HOST_CANONICAL: 'pan-test-app-dev-www-unknown-host.example.com'
835
- ROOT_URL_INTERNAL: 'https://pan-test-app-dev-www-unknown-host.example.com'
836
- HOST_INTERNAL: 'pan-test-app-dev-www-unknown-host.example.com'
837
- GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_www_GCLOUD_RUN_canonicalHostSuffix'
838
- API_URL: 'https://pan-test-app-dev-api-unknown-host.example.com/graphql'
839
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
840
- ",
841
- "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey",
842
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_www_GCLOUD_RUN_canonicalHostSuffix",
843
- "HOST": "pan-test-app-dev-www-unknown-host.example.com",
844
- "HOST_CANONICAL": "pan-test-app-dev-www-unknown-host.example.com",
845
- "HOST_INTERNAL": "pan-test-app-dev-www-unknown-host.example.com",
846
- "KUBERNETES_CPU_REQUEST": "0.5",
847
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
848
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
849
- "ROOT_URL": "https://pan-test-app-dev-www-unknown-host.example.com",
850
- "ROOT_URL_INTERNAL": "https://pan-test-app-dev-www-unknown-host.example.com",
851
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
852
- },
853
- },
854
- "www 🛑 Stop ⚠️ | dev ": {
855
- "environment": {
856
- "action": "stop",
857
- "name": "dev/www",
858
- "url": "https://pan-test-app-dev-www-unknown-host.example.com",
859
- },
860
- "image": "path/to/docker/gcloud:the-version",
861
- "interruptible": true,
862
- "needs": [],
863
- "retry": {
864
- "max": 2,
865
- "when": [
866
- "runner_system_failure",
867
- "stuck_or_timeout_failure",
868
- ],
869
- },
870
- "rules": [
871
- {
872
- "allow_failure": true,
873
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
874
- "when": "on_success",
875
- },
876
- {
877
- "allow_failure": true,
878
- "when": "manual",
879
- },
880
- ],
881
- "script": [
882
- "set +e",
883
- "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_www_GCLOUD_DEPLOY_credentialsKey")",
884
- "gcloud run services delete pan-test-app-dev-www --project=google-project-id --region=europe-west6",
885
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/www --quiet --delete-tags",
886
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
887
- "echo Disabling component in Dependency Track",
888
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" || true",
889
- "set -e",
890
- ],
891
- "stage": "stop dev",
892
- "variables": {
893
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
894
- "GIT_STRATEGY": "none",
895
- "KUBERNETES_CPU_REQUEST": "0.5",
896
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
897
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
898
- },
899
- },
900
- "www 🛡 audit": {
901
- "allow_failure": true,
902
- "image": "path/to/docker/jobs-default:the-version",
903
- "interruptible": true,
904
- "needs": [],
905
- "retry": {
906
- "max": 2,
907
- "when": [
908
- "runner_system_failure",
909
- "stuck_or_timeout_failure",
910
- ],
911
- },
912
- "script": [
913
- "cd www",
914
- "yarn npm audit --environment production",
915
- ],
916
- "stage": "test",
917
- "variables": {
918
- "APP_PATH": "www",
919
- "KUBERNETES_CPU_REQUEST": "0.5",
920
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
921
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
922
- },
923
- },
924
- "www 🧪 test": {
925
- "cache": [
926
- {
927
- "key": "www-yarn",
928
- "paths": [
929
- "www/.yarn",
930
- ],
931
- "policy": "pull-push",
932
- },
933
- {
934
- "key": "www-node-modules",
935
- "paths": [
936
- "www/node_modules",
937
- ],
938
- "policy": "pull-push",
939
- },
940
- ],
941
- "image": "path/to/docker/jobs-testing-chrome:the-version",
942
- "interruptible": true,
943
- "needs": [],
944
- "retry": {
945
- "max": 2,
946
- "when": [
947
- "runner_system_failure",
948
- "stuck_or_timeout_failure",
949
- ],
950
- },
951
- "script": [
952
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
953
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
954
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
955
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
956
- "cd www",
957
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
958
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
959
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
960
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
961
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
962
- "yarn install --immutable",
963
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
964
- "yarn test",
965
- ],
966
- "stage": "test",
967
- "variables": {
968
- "APP_PATH": "www",
969
- "KUBERNETES_CPU_REQUEST": "0.5",
970
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
971
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
972
- },
973
- },
974
- "www 🧾 sbom | dev ": {
975
- "allow_failure": true,
976
- "artifacts": {
977
- "paths": [
978
- "__sbom.json",
979
- ],
980
- },
981
- "image": "aquasec/trivy:0.38.3",
982
- "interruptible": true,
983
- "needs": [],
984
- "retry": {
985
- "max": 2,
986
- "when": [
987
- "runner_system_failure",
988
- "stuck_or_timeout_failure",
989
- ],
990
- },
991
- "script": [
992
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
993
- ],
994
- "stage": "build",
995
- "variables": {},
996
- },
997
- },
998
- "stages": [
999
- "setup",
1000
- "setup dev",
1001
- "setup review",
1002
- "setup stage",
1003
- "setup prod",
1004
- "setup local",
1005
- "test",
1006
- "test dev",
1007
- "test review",
1008
- "test stage",
1009
- "test prod",
1010
- "test local",
1011
- "build",
1012
- "build dev",
1013
- "build review",
1014
- "build stage",
1015
- "build prod",
1016
- "build local",
1017
- "deploy",
1018
- "deploy dev",
1019
- "deploy review",
1020
- "deploy stage",
1021
- "deploy prod",
1022
- "deploy local",
1023
- "verify",
1024
- "verify dev",
1025
- "verify review",
1026
- "verify stage",
1027
- "verify prod",
1028
- "verify local",
1029
- "rollback",
1030
- "rollback dev",
1031
- "rollback review",
1032
- "rollback stage",
1033
- "rollback prod",
1034
- "rollback local",
1035
- "stop",
1036
- "stop dev",
1037
- "stop review",
1038
- "stop stage",
1039
- "stop prod",
1040
- "stop local",
1041
- ],
1042
- "variables": {
1043
- "FF_USE_FASTZIP": "true",
1044
- "GIT_DEPTH": 1,
1045
- },
1046
- "workflow": {
1047
- "rules": [
1048
- {
1049
- "if": "$CI_COMMIT_TAG",
1050
- },
1051
- {
1052
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1053
- "when": "never",
1054
- },
1055
- {
1056
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1057
- },
1058
- {
1059
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1060
- },
1061
- {
1062
- "if": "$CI_MERGE_REQUEST_ID",
1063
- },
1064
- ],
1065
- },
1066
- },
1067
- "mr": {
1068
- "image": "path/to/docker/jobs-default:the-version",
1069
- "jobs": {
1070
- "api 👮 lint": {
1071
- "cache": [
1072
- {
1073
- "key": "api-yarn",
1074
- "paths": [
1075
- "api/.yarn",
1076
- ],
1077
- "policy": "pull-push",
1078
- },
1079
- {
1080
- "key": "api-node-modules",
1081
- "paths": [
1082
- "api/node_modules",
1083
- ],
1084
- "policy": "pull-push",
1085
- },
1086
- ],
1087
- "image": "path/to/docker/jobs-default:the-version",
1088
- "interruptible": true,
1089
- "needs": [],
1090
- "retry": {
1091
- "max": 2,
1092
- "when": [
1093
- "runner_system_failure",
1094
- "stuck_or_timeout_failure",
1095
- ],
1096
- },
1097
- "script": [
1098
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1099
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1100
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1101
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1102
- "cd api",
1103
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1104
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1105
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1106
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1107
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1108
- "yarn install --immutable",
1109
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1110
- "yarn lint",
1111
- ],
1112
- "stage": "test",
1113
- "variables": {
1114
- "APP_PATH": "api",
1115
- "KUBERNETES_CPU_REQUEST": "0.5",
1116
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1117
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1118
- },
1119
- },
1120
- "api 🔨 app | review ": {
1121
- "artifacts": {
1122
- "expire_in": "1 day",
1123
- "paths": [
1124
- "api/__build_info.json",
1125
- "api/dist",
1126
- "api/.next",
1127
- ],
1128
- "reports": {
1129
- "junit": undefined,
1130
- },
1131
- "when": "always",
1132
- },
1133
- "cache": [
1134
- {
1135
- "key": "api-yarn",
1136
- "paths": [
1137
- "api/.yarn",
1138
- ],
1139
- "policy": "pull-push",
1140
- },
1141
- {
1142
- "key": "api-node-modules",
1143
- "paths": [
1144
- "api/node_modules",
1145
- ],
1146
- "policy": "pull-push",
1147
- },
1148
- {
1149
- "key": "api-next-cache",
1150
- "paths": [
1151
- "api/.next/cache/",
1152
- ],
1153
- "policy": "pull-push",
1154
- },
1155
- ],
1156
- "image": "path/to/docker/jobs-default:the-version",
1157
- "interruptible": true,
1158
- "needs": [],
1159
- "retry": {
1160
- "max": 2,
1161
- "when": [
1162
- "runner_system_failure",
1163
- "stuck_or_timeout_failure",
1164
- ],
1165
- },
1166
- "script": [
1167
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
1168
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1169
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1170
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1171
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1172
- "cd api",
1173
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1174
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1175
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1176
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1177
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1178
- "yarn install --immutable",
1179
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1180
- "yarn build",
1181
- ],
1182
- "stage": "build",
1183
- "variables": {
1184
- "APP_DIR": "api",
1185
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1186
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1187
- "BUILD_INFO_ID": "some-id",
1188
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-migration:run",
1189
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run",
1190
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1191
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1192
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1193
- "DB_NAME": "pan-test-app-review-mr1234-api",
1194
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1195
- "DB_USER": "my-user",
1196
- "ENV_SHORT": "review",
1197
- "ENV_TYPE": "review",
1198
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
1199
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
1200
- "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1201
- "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1202
- "HOST_INTERNAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1203
- "KUBERNETES_CPU_REQUEST": "0.5",
1204
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1205
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1206
- "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1207
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1208
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1209
- },
1210
- },
1211
- "api 🔨 docker | review ": {
1212
- "cache": [
1213
- {
1214
- "key": "api-yarn",
1215
- "paths": [
1216
- "api/.yarn",
1217
- ],
1218
- "policy": "pull",
1219
- },
1220
- ],
1221
- "image": "path/to/docker/docker-build:the-version",
1222
- "interruptible": true,
1223
- "needs": [
1224
- "api 🔨 app | review ",
1225
- ],
1226
- "retry": {
1227
- "max": 2,
1228
- "when": [
1229
- "runner_system_failure",
1230
- "stuck_or_timeout_failure",
1231
- ],
1232
- },
1233
- "script": [
1234
- "ensureNodeDockerfile",
1235
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
1236
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
1237
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
1238
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
1239
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
1240
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1241
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
1242
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
1243
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1244
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1245
- "docker push $DOCKER_CACHE_IMAGE",
1246
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
1247
- ],
1248
- "services": [
1249
- {
1250
- "command": [
1251
- "--tls=false",
1252
- ],
1253
- "name": "docker:24.0.6-dind",
1254
- },
1255
- ],
1256
- "stage": "build",
1257
- "variables": {
1258
- "APP_DIR": "api",
1259
- "DOCKERFILE_ADDITIONS": undefined,
1260
- "DOCKERFILE_ADDITIONS_END": undefined,
1261
- "DOCKER_BUILDKIT": "1",
1262
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
1263
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1264
- RUN yarn plugin import workspace-tools
1265
- RUN yarn workspaces focus --production && yarn rebuild",
1266
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
1267
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
1268
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1269
- COPY --chown=node:node .yarn /app/.yarn",
1270
- "DOCKER_DIR": ".",
1271
- "DOCKER_DRIVER": "overlay2",
1272
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1273
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234",
1274
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1275
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1276
- "DOCKER_TLS_CERTDIR": "",
1277
- "KUBERNETES_CPU_REQUEST": "0.5",
1278
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1279
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1280
- },
1281
- },
1282
- "api 🚀 Deploy | review ": {
1283
- "allow_failure": false,
1284
- "artifacts": {
1285
- "paths": [
1286
- "____envvars.yaml",
1287
- ],
1288
- },
1289
- "environment": {
1290
- "auto_stop_in": "1 week",
1291
- "name": "review/some-commit/api",
1292
- "on_stop": "api 🛑 Stop ⚠️ | review ",
1293
- "url": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1294
- },
1295
- "image": "path/to/docker/gcloud:the-version",
1296
- "interruptible": true,
1297
- "needs": [
1298
- {
1299
- "artifacts": false,
1300
- "job": "api 👮 lint",
1301
- },
1302
- {
1303
- "artifacts": false,
1304
- "job": "api 🔨 app | review ",
1305
- },
1306
- {
1307
- "artifacts": false,
1308
- "job": "api 🔨 docker | review ",
1309
- },
1310
- {
1311
- "artifacts": false,
1312
- "job": "api 🧪 test",
1313
- },
1314
- {
1315
- "artifacts": true,
1316
- "job": "api 🧾 sbom | review ",
1317
- },
1318
- {
1319
- "artifacts": false,
1320
- "job": "api 🛡 audit",
1321
- },
1322
- ],
1323
- "retry": {
1324
- "max": 2,
1325
- "when": [
1326
- "runner_system_failure",
1327
- "stuck_or_timeout_failure",
1328
- ],
1329
- },
1330
- "rules": [
1331
- {
1332
- "when": "on_success",
1333
- },
1334
- ],
1335
- "script": [
1336
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1337
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
1338
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
1339
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1340
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1341
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1342
- "echo "$ENV_VARS" > ____envvars.yaml",
1343
- "set +e",
1344
- "echo "ensuring Database..."",
1345
- "gcloud sql databases create pan-test-app-review-mr1234-api --instance=instancename --project projectId",
1346
- "set -e",
1347
- "set +e",
1348
- "gcloud scheduler jobs create http pan-test-app-review-mr1234-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1349
- "set -e",
1350
- "gcloud scheduler jobs update http pan-test-app-review-mr1234-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1351
- "set +e",
1352
- "gcloud run jobs create pan-test-app-review-mr1234-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-job-name=pan-test-app-review-mr1234-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
1353
- "set -e",
1354
- "gcloud run jobs update pan-test-app-review-mr1234-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-job-name=pan-test-app-review-mr1234-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
1355
- "set +e",
1356
- "gcloud run jobs create pan-test-app-review-mr1234-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-job-name=pan-test-app-review-mr1234-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
1357
- "set -e",
1358
- "gcloud run jobs update pan-test-app-review-mr1234-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-job-name=pan-test-app-review-mr1234-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
1359
- "gcloud run deploy pan-test-app-review-mr1234-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-service-name=pan-test-app-review-mr1234-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
1360
- "gcloud run jobs execute pan-test-app-review-mr1234-api-migration --project=google-project-id --region=europe-west6",
1361
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1362
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
1363
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-review-mr1234-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
1364
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234@$version --quiet --delete-tags; done",
1365
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1366
- "set +e",
1367
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
1368
- "set -e",
1369
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
1370
- "echo Uploading SBOM to Dependency Track",
1371
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" "__sbom.json" vex.json || true",
1372
- ],
1373
- "services": [
1374
- {
1375
- "command": [
1376
- "--tls=false",
1377
- ],
1378
- "name": "docker:24.0.6-dind",
1379
- },
1380
- ],
1381
- "stage": "deploy review",
1382
- "variables": {
1383
- "APP_DIR": "api",
1384
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1385
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1386
- "BUILD_INFO_ID": "some-id",
1387
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1388
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-migration:run",
1389
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run",
1390
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
1391
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
1392
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
1393
- "DB_NAME": "pan-test-app-review-mr1234-api",
1394
- "DB_PASSWORD": "$CL_review_api_DB_PASSWORD",
1395
- "DB_USER": "my-user",
1396
- "DOCKER_BUILDKIT": "1",
1397
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
1398
- "DOCKER_DRIVER": "overlay2",
1399
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1400
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234",
1401
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1402
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1403
- "DOCKER_TLS_CERTDIR": "",
1404
- "ENV_SHORT": "review",
1405
- "ENV_TYPE": "review",
1406
- "ENV_VARS": "ENV_SHORT: 'review'
1407
- APP_DIR: 'api'
1408
- ENV_TYPE: 'review'
1409
- BUILD_INFO_ID: 'some-id'
1410
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1411
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1412
- HOST: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1413
- ROOT_URL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
1414
- HOST_CANONICAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1415
- ROOT_URL_INTERNAL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
1416
- HOST_INTERNAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
1417
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
1418
- DB_NAME: 'pan-test-app-review-mr1234-api'
1419
- DB_USER: 'my-user'
1420
- DB_PASSWORD: '$CL_review_api_DB_PASSWORD'
1421
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
1422
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
1423
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-migration:run'
1424
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-review-mr1234-api-send-reminders:run'
1425
- GCLOUD_RUN_canonicalHostSuffix: '$CL_review_api_GCLOUD_RUN_canonicalHostSuffix'
1426
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
1427
- ",
1428
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
1429
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
1430
- "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1431
- "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1432
- "HOST_INTERNAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
1433
- "KUBERNETES_CPU_REQUEST": "0.5",
1434
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1435
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1436
- "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1437
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1438
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1439
- },
1440
- },
1441
- "api 🛑 Stop ⚠️ | review ": {
1442
- "environment": {
1443
- "action": "stop",
1444
- "name": "review/some-commit/api",
1445
- "url": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
1446
- },
1447
- "image": "path/to/docker/gcloud:the-version",
1448
- "interruptible": true,
1449
- "needs": [],
1450
- "retry": {
1451
- "max": 2,
1452
- "when": [
1453
- "runner_system_failure",
1454
- "stuck_or_timeout_failure",
1455
- ],
1456
- },
1457
- "rules": [
1458
- {
1459
- "allow_failure": true,
1460
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1461
- "when": "on_success",
1462
- },
1463
- {
1464
- "allow_failure": true,
1465
- "when": "manual",
1466
- },
1467
- ],
1468
- "script": [
1469
- "set +e",
1470
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
1471
- "gcloud run services delete pan-test-app-review-mr1234-api --project=google-project-id --region=europe-west6",
1472
- "gcloud scheduler jobs delete pan-test-app-review-mr1234-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
1473
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-review-mr1234-api-migration --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
1474
- "gcloud run jobs delete pan-test-app-review-mr1234-api-migration --project=google-project-id --region=europe-west6",
1475
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-review-mr1234-api-send-reminders --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
1476
- "gcloud run jobs delete pan-test-app-review-mr1234-api-send-reminders --project=google-project-id --region=europe-west6",
1477
- "echo "deleting database pan-test-app-review-mr1234-api..."",
1478
- "echo "👆 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down"",
1479
- "
1480
- until gcloud sql databases delete pan-test-app-review-mr1234-api --instance=instancename --project projectId
1481
- do
1482
- echo "Trying again."
1483
- sleep 10
1484
- done
1485
- ",
1486
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api/mr1234 --quiet --delete-tags",
1487
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1488
- "set +e",
1489
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
1490
- "set -e",
1491
- "echo Disabling component in Dependency Track",
1492
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" || true",
1493
- "set -e",
1494
- ],
1495
- "stage": "stop review",
1496
- "variables": {
1497
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1498
- "GIT_STRATEGY": "none",
1499
- "KUBERNETES_CPU_REQUEST": "0.5",
1500
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1501
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1502
- },
1503
- },
1504
- "api 🛡 audit": {
1505
- "allow_failure": true,
1506
- "image": "path/to/docker/jobs-default:the-version",
1507
- "interruptible": true,
1508
- "needs": [],
1509
- "retry": {
1510
- "max": 2,
1511
- "when": [
1512
- "runner_system_failure",
1513
- "stuck_or_timeout_failure",
1514
- ],
1515
- },
1516
- "script": [
1517
- "cd api",
1518
- "yarn npm audit --environment production",
1519
- ],
1520
- "stage": "test",
1521
- "variables": {
1522
- "APP_PATH": "api",
1523
- "KUBERNETES_CPU_REQUEST": "0.5",
1524
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1525
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1526
- },
1527
- },
1528
- "api 🧪 test": {
1529
- "cache": [
1530
- {
1531
- "key": "api-yarn",
1532
- "paths": [
1533
- "api/.yarn",
1534
- ],
1535
- "policy": "pull-push",
1536
- },
1537
- {
1538
- "key": "api-node-modules",
1539
- "paths": [
1540
- "api/node_modules",
1541
- ],
1542
- "policy": "pull-push",
1543
- },
1544
- ],
1545
- "image": "path/to/docker/jobs-testing-chrome:the-version",
1546
- "interruptible": true,
1547
- "needs": [],
1548
- "retry": {
1549
- "max": 2,
1550
- "when": [
1551
- "runner_system_failure",
1552
- "stuck_or_timeout_failure",
1553
- ],
1554
- },
1555
- "script": [
1556
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1557
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1558
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1559
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1560
- "cd api",
1561
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1562
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1563
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1564
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1565
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1566
- "yarn install --immutable",
1567
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1568
- "yarn test",
1569
- ],
1570
- "stage": "test",
1571
- "variables": {
1572
- "APP_PATH": "api",
1573
- "KUBERNETES_CPU_REQUEST": "0.5",
1574
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1575
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1576
- },
1577
- },
1578
- "api 🧾 sbom | review ": {
1579
- "allow_failure": true,
1580
- "artifacts": {
1581
- "paths": [
1582
- "__sbom.json",
1583
- ],
1584
- },
1585
- "image": "aquasec/trivy:0.38.3",
1586
- "interruptible": true,
1587
- "needs": [],
1588
- "retry": {
1589
- "max": 2,
1590
- "when": [
1591
- "runner_system_failure",
1592
- "stuck_or_timeout_failure",
1593
- ],
1594
- },
1595
- "script": [
1596
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
1597
- ],
1598
- "stage": "build",
1599
- "variables": {},
1600
- },
1601
- "www 👮 lint": {
1602
- "cache": [
1603
- {
1604
- "key": "www-yarn",
1605
- "paths": [
1606
- "www/.yarn",
1607
- ],
1608
- "policy": "pull-push",
1609
- },
1610
- {
1611
- "key": "www-node-modules",
1612
- "paths": [
1613
- "www/node_modules",
1614
- ],
1615
- "policy": "pull-push",
1616
- },
1617
- ],
1618
- "image": "path/to/docker/jobs-default:the-version",
1619
- "interruptible": true,
1620
- "needs": [],
1621
- "retry": {
1622
- "max": 2,
1623
- "when": [
1624
- "runner_system_failure",
1625
- "stuck_or_timeout_failure",
1626
- ],
1627
- },
1628
- "script": [
1629
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1630
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1631
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1632
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1633
- "cd www",
1634
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1635
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1636
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1637
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1638
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1639
- "yarn install --immutable",
1640
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1641
- "yarn lint",
1642
- ],
1643
- "stage": "test",
1644
- "variables": {
1645
- "APP_PATH": "www",
1646
- "KUBERNETES_CPU_REQUEST": "0.5",
1647
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1648
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1649
- },
1650
- },
1651
- "www 🔨 app | review ": {
1652
- "artifacts": {
1653
- "expire_in": "1 day",
1654
- "paths": [
1655
- "www/__build_info.json",
1656
- "www/dist",
1657
- "www/.next",
1658
- ],
1659
- "reports": {
1660
- "junit": undefined,
1661
- },
1662
- "when": "always",
1663
- },
1664
- "cache": [
1665
- {
1666
- "key": "www-yarn",
1667
- "paths": [
1668
- "www/.yarn",
1669
- ],
1670
- "policy": "pull-push",
1671
- },
1672
- {
1673
- "key": "www-node-modules",
1674
- "paths": [
1675
- "www/node_modules",
1676
- ],
1677
- "policy": "pull-push",
1678
- },
1679
- {
1680
- "key": "www-next-cache",
1681
- "paths": [
1682
- "www/.next/cache/",
1683
- ],
1684
- "policy": "pull-push",
1685
- },
1686
- ],
1687
- "image": "path/to/docker/jobs-default:the-version",
1688
- "interruptible": true,
1689
- "needs": [],
1690
- "retry": {
1691
- "max": 2,
1692
- "when": [
1693
- "runner_system_failure",
1694
- "stuck_or_timeout_failure",
1695
- ],
1696
- },
1697
- "script": [
1698
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
1699
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1700
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1701
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1702
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1703
- "cd www",
1704
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1705
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1706
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1707
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1708
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1709
- "yarn install --immutable",
1710
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1711
- "yarn build",
1712
- ],
1713
- "stage": "build",
1714
- "variables": {
1715
- "API_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com/graphql",
1716
- "APP_DIR": "www",
1717
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1718
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1719
- "BUILD_INFO_ID": "some-id",
1720
- "ENV_SHORT": "review",
1721
- "ENV_TYPE": "review",
1722
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_www_GCLOUD_DEPLOY_credentialsKey",
1723
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_www_GCLOUD_RUN_canonicalHostSuffix",
1724
- "HOST": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1725
- "HOST_CANONICAL": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1726
- "HOST_INTERNAL": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1727
- "KUBERNETES_CPU_REQUEST": "0.5",
1728
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
1729
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
1730
- "ROOT_URL": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1731
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1732
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
1733
- },
1734
- },
1735
- "www 🔨 docker | review ": {
1736
- "cache": [
1737
- {
1738
- "key": "www-yarn",
1739
- "paths": [
1740
- "www/.yarn",
1741
- ],
1742
- "policy": "pull",
1743
- },
1744
- ],
1745
- "image": "path/to/docker/docker-build:the-version",
1746
- "interruptible": true,
1747
- "needs": [
1748
- "www 🔨 app | review ",
1749
- ],
1750
- "retry": {
1751
- "max": 2,
1752
- "when": [
1753
- "runner_system_failure",
1754
- "stuck_or_timeout_failure",
1755
- ],
1756
- },
1757
- "script": [
1758
- "ensureNodeDockerfile",
1759
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
1760
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_www_GCLOUD_DEPLOY_credentialsKey")",
1761
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
1762
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
1763
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
1764
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1765
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
1766
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
1767
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1768
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1769
- "docker push $DOCKER_CACHE_IMAGE",
1770
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
1771
- ],
1772
- "services": [
1773
- {
1774
- "command": [
1775
- "--tls=false",
1776
- ],
1777
- "name": "docker:24.0.6-dind",
1778
- },
1779
- ],
1780
- "stage": "build",
1781
- "variables": {
1782
- "APP_DIR": "www",
1783
- "DOCKERFILE_ADDITIONS": undefined,
1784
- "DOCKERFILE_ADDITIONS_END": undefined,
1785
- "DOCKER_BUILDKIT": "1",
1786
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
1787
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1788
- RUN yarn plugin import workspace-tools
1789
- RUN yarn workspaces focus --production && yarn rebuild",
1790
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
1791
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
1792
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1793
- COPY --chown=node:node .yarn /app/.yarn",
1794
- "DOCKER_DIR": ".",
1795
- "DOCKER_DRIVER": "overlay2",
1796
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1797
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234",
1798
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1799
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1800
- "DOCKER_TLS_CERTDIR": "",
1801
- "KUBERNETES_CPU_REQUEST": "0.5",
1802
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
1803
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
1804
- },
1805
- },
1806
- "www 🚀 Deploy | review ": {
1807
- "allow_failure": false,
1808
- "artifacts": {
1809
- "paths": [
1810
- "____envvars.yaml",
1811
- ],
1812
- },
1813
- "environment": {
1814
- "auto_stop_in": "1 week",
1815
- "name": "review/some-commit/www",
1816
- "on_stop": "www 🛑 Stop ⚠️ | review ",
1817
- "url": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1818
- },
1819
- "image": "path/to/docker/gcloud:the-version",
1820
- "interruptible": true,
1821
- "needs": [
1822
- {
1823
- "artifacts": false,
1824
- "job": "www 👮 lint",
1825
- },
1826
- {
1827
- "artifacts": false,
1828
- "job": "www 🔨 app | review ",
1829
- },
1830
- {
1831
- "artifacts": false,
1832
- "job": "www 🔨 docker | review ",
1833
- },
1834
- {
1835
- "artifacts": false,
1836
- "job": "www 🧪 test",
1837
- },
1838
- {
1839
- "artifacts": true,
1840
- "job": "www 🧾 sbom | review ",
1841
- },
1842
- {
1843
- "artifacts": false,
1844
- "job": "www 🛡 audit",
1845
- },
1846
- ],
1847
- "retry": {
1848
- "max": 2,
1849
- "when": [
1850
- "runner_system_failure",
1851
- "stuck_or_timeout_failure",
1852
- ],
1853
- },
1854
- "rules": [
1855
- {
1856
- "when": "on_success",
1857
- },
1858
- ],
1859
- "script": [
1860
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1861
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_www_GCLOUD_DEPLOY_credentialsKey")",
1862
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
1863
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1864
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1865
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1866
- "echo "$ENV_VARS" > ____envvars.yaml",
1867
- "gcloud run deploy pan-test-app-review-mr1234-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-service-name=pan-test-app-review-mr1234-www --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
1868
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1869
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
1870
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-review-mr1234-www --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
1871
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234@$version --quiet --delete-tags; done",
1872
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
1873
- "set +e",
1874
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www --quiet --delete-tags",
1875
- "set -e",
1876
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
1877
- "echo Uploading SBOM to Dependency Track",
1878
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" "__sbom.json" vex.json || true",
1879
- ],
1880
- "services": [
1881
- {
1882
- "command": [
1883
- "--tls=false",
1884
- ],
1885
- "name": "docker:24.0.6-dind",
1886
- },
1887
- ],
1888
- "stage": "deploy review",
1889
- "variables": {
1890
- "API_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com/graphql",
1891
- "APP_DIR": "www",
1892
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1893
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1894
- "BUILD_INFO_ID": "some-id",
1895
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1896
- "DOCKER_BUILDKIT": "1",
1897
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
1898
- "DOCKER_DRIVER": "overlay2",
1899
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
1900
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234",
1901
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1902
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
1903
- "DOCKER_TLS_CERTDIR": "",
1904
- "ENV_SHORT": "review",
1905
- "ENV_TYPE": "review",
1906
- "ENV_VARS": "ENV_SHORT: 'review'
1907
- APP_DIR: 'www'
1908
- ENV_TYPE: 'review'
1909
- BUILD_INFO_ID: 'some-id'
1910
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1911
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
1912
- HOST: 'pan-test-app-review-mr1234-www-unknown-host.example.com'
1913
- ROOT_URL: 'https://pan-test-app-review-mr1234-www-unknown-host.example.com'
1914
- HOST_CANONICAL: 'pan-test-app-review-mr1234-www-unknown-host.example.com'
1915
- ROOT_URL_INTERNAL: 'https://pan-test-app-review-mr1234-www-unknown-host.example.com'
1916
- HOST_INTERNAL: 'pan-test-app-review-mr1234-www-unknown-host.example.com'
1917
- GCLOUD_RUN_canonicalHostSuffix: '$CL_review_www_GCLOUD_RUN_canonicalHostSuffix'
1918
- API_URL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com/graphql'
1919
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
1920
- ",
1921
- "GCLOUD_DEPLOY_credentialsKey": "$CL_review_www_GCLOUD_DEPLOY_credentialsKey",
1922
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_www_GCLOUD_RUN_canonicalHostSuffix",
1923
- "HOST": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1924
- "HOST_CANONICAL": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1925
- "HOST_INTERNAL": "pan-test-app-review-mr1234-www-unknown-host.example.com",
1926
- "KUBERNETES_CPU_REQUEST": "0.5",
1927
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1928
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1929
- "ROOT_URL": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1930
- "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1931
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
1932
- },
1933
- },
1934
- "www 🛑 Stop ⚠️ | review ": {
1935
- "environment": {
1936
- "action": "stop",
1937
- "name": "review/some-commit/www",
1938
- "url": "https://pan-test-app-review-mr1234-www-unknown-host.example.com",
1939
- },
1940
- "image": "path/to/docker/gcloud:the-version",
1941
- "interruptible": true,
1942
- "needs": [],
1943
- "retry": {
1944
- "max": 2,
1945
- "when": [
1946
- "runner_system_failure",
1947
- "stuck_or_timeout_failure",
1948
- ],
1949
- },
1950
- "rules": [
1951
- {
1952
- "allow_failure": true,
1953
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1954
- "when": "on_success",
1955
- },
1956
- {
1957
- "allow_failure": true,
1958
- "when": "manual",
1959
- },
1960
- ],
1961
- "script": [
1962
- "set +e",
1963
- "gcloud auth activate-service-account --key-file=<(echo "$CL_review_www_GCLOUD_DEPLOY_credentialsKey")",
1964
- "gcloud run services delete pan-test-app-review-mr1234-www --project=google-project-id --region=europe-west6",
1965
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www/mr1234 --quiet --delete-tags",
1966
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
1967
- "set +e",
1968
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/www --quiet --delete-tags",
1969
- "set -e",
1970
- "echo Disabling component in Dependency Track",
1971
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" || true",
1972
- "set -e",
1973
- ],
1974
- "stage": "stop review",
1975
- "variables": {
1976
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1977
- "GIT_STRATEGY": "none",
1978
- "KUBERNETES_CPU_REQUEST": "0.5",
1979
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
1980
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
1981
- },
1982
- },
1983
- "www 🛡 audit": {
1984
- "allow_failure": true,
1985
- "image": "path/to/docker/jobs-default:the-version",
1986
- "interruptible": true,
1987
- "needs": [],
1988
- "retry": {
1989
- "max": 2,
1990
- "when": [
1991
- "runner_system_failure",
1992
- "stuck_or_timeout_failure",
1993
- ],
1994
- },
1995
- "script": [
1996
- "cd www",
1997
- "yarn npm audit --environment production",
1998
- ],
1999
- "stage": "test",
2000
- "variables": {
2001
- "APP_PATH": "www",
2002
- "KUBERNETES_CPU_REQUEST": "0.5",
2003
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2004
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2005
- },
2006
- },
2007
- "www 🧪 test": {
2008
- "cache": [
2009
- {
2010
- "key": "www-yarn",
2011
- "paths": [
2012
- "www/.yarn",
2013
- ],
2014
- "policy": "pull-push",
2015
- },
2016
- {
2017
- "key": "www-node-modules",
2018
- "paths": [
2019
- "www/node_modules",
2020
- ],
2021
- "policy": "pull-push",
2022
- },
2023
- ],
2024
- "image": "path/to/docker/jobs-testing-chrome:the-version",
2025
- "interruptible": true,
2026
- "needs": [],
2027
- "retry": {
2028
- "max": 2,
2029
- "when": [
2030
- "runner_system_failure",
2031
- "stuck_or_timeout_failure",
2032
- ],
2033
- },
2034
- "script": [
2035
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2036
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2037
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2038
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2039
- "cd www",
2040
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2041
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2042
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2043
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2044
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2045
- "yarn install --immutable",
2046
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2047
- "yarn test",
2048
- ],
2049
- "stage": "test",
2050
- "variables": {
2051
- "APP_PATH": "www",
2052
- "KUBERNETES_CPU_REQUEST": "0.5",
2053
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2054
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2055
- },
2056
- },
2057
- "www 🧾 sbom | review ": {
2058
- "allow_failure": true,
2059
- "artifacts": {
2060
- "paths": [
2061
- "__sbom.json",
2062
- ],
2063
- },
2064
- "image": "aquasec/trivy:0.38.3",
2065
- "interruptible": true,
2066
- "needs": [],
2067
- "retry": {
2068
- "max": 2,
2069
- "when": [
2070
- "runner_system_failure",
2071
- "stuck_or_timeout_failure",
2072
- ],
2073
- },
2074
- "script": [
2075
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
2076
- ],
2077
- "stage": "build",
2078
- "variables": {},
2079
- },
2080
- },
2081
- "stages": [
2082
- "setup",
2083
- "setup dev",
2084
- "setup review",
2085
- "setup stage",
2086
- "setup prod",
2087
- "setup local",
2088
- "test",
2089
- "test dev",
2090
- "test review",
2091
- "test stage",
2092
- "test prod",
2093
- "test local",
2094
- "build",
2095
- "build dev",
2096
- "build review",
2097
- "build stage",
2098
- "build prod",
2099
- "build local",
2100
- "deploy",
2101
- "deploy dev",
2102
- "deploy review",
2103
- "deploy stage",
2104
- "deploy prod",
2105
- "deploy local",
2106
- "verify",
2107
- "verify dev",
2108
- "verify review",
2109
- "verify stage",
2110
- "verify prod",
2111
- "verify local",
2112
- "rollback",
2113
- "rollback dev",
2114
- "rollback review",
2115
- "rollback stage",
2116
- "rollback prod",
2117
- "rollback local",
2118
- "stop",
2119
- "stop dev",
2120
- "stop review",
2121
- "stop stage",
2122
- "stop prod",
2123
- "stop local",
2124
- ],
2125
- "variables": {
2126
- "FF_USE_FASTZIP": "true",
2127
- "GIT_DEPTH": 1,
2128
- },
2129
- "workflow": {
2130
- "rules": [
2131
- {
2132
- "if": "$CI_COMMIT_TAG",
2133
- },
2134
- {
2135
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
2136
- "when": "never",
2137
- },
2138
- {
2139
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
2140
- },
2141
- {
2142
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
2143
- },
2144
- {
2145
- "if": "$CI_MERGE_REQUEST_ID",
2146
- },
2147
- ],
2148
- },
2149
- },
2150
- "taggedRelease": {
2151
- "image": "path/to/docker/jobs-default:the-version",
2152
- "jobs": {
2153
- "api 🔨 app | prod ": {
2154
- "artifacts": {
2155
- "expire_in": "1 day",
2156
- "paths": [
2157
- "api/__build_info.json",
2158
- "api/dist",
2159
- "api/.next",
2160
- ],
2161
- "reports": {
2162
- "junit": undefined,
2163
- },
2164
- "when": "always",
2165
- },
2166
- "cache": [
2167
- {
2168
- "key": "api-yarn",
2169
- "paths": [
2170
- "api/.yarn",
2171
- ],
2172
- "policy": "pull-push",
2173
- },
2174
- {
2175
- "key": "api-node-modules",
2176
- "paths": [
2177
- "api/node_modules",
2178
- ],
2179
- "policy": "pull-push",
2180
- },
2181
- {
2182
- "key": "api-next-cache",
2183
- "paths": [
2184
- "api/.next/cache/",
2185
- ],
2186
- "policy": "pull-push",
2187
- },
2188
- ],
2189
- "image": "path/to/docker/jobs-default:the-version",
2190
- "interruptible": true,
2191
- "needs": [],
2192
- "retry": {
2193
- "max": 2,
2194
- "when": [
2195
- "runner_system_failure",
2196
- "stuck_or_timeout_failure",
2197
- ],
2198
- },
2199
- "script": [
2200
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2201
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2202
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2203
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2204
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2205
- "cd api",
2206
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2207
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2208
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2209
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2210
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2211
- "yarn install --immutable",
2212
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2213
- "yarn build",
2214
- ],
2215
- "stage": "build",
2216
- "variables": {
2217
- "APP_DIR": "api",
2218
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2219
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2220
- "BUILD_INFO_ID": "some-id",
2221
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-migration:run",
2222
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run",
2223
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2224
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2225
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2226
- "DB_NAME": "pan-test-app-prod-api",
2227
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2228
- "DB_USER": "my-user",
2229
- "ENV_SHORT": "prod",
2230
- "ENV_TYPE": "prod",
2231
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
2232
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
2233
- "HOST": "pan-test-app-prod-api-unknown-host.example.com",
2234
- "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
2235
- "HOST_INTERNAL": "pan-test-app-prod-api-unknown-host.example.com",
2236
- "KUBERNETES_CPU_REQUEST": "0.5",
2237
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2238
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2239
- "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
2240
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-api-unknown-host.example.com",
2241
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2242
- },
2243
- },
2244
- "api 🔨 app | stage ": {
2245
- "artifacts": {
2246
- "expire_in": "1 day",
2247
- "paths": [
2248
- "api/__build_info.json",
2249
- "api/dist",
2250
- "api/.next",
2251
- ],
2252
- "reports": {
2253
- "junit": undefined,
2254
- },
2255
- "when": "always",
2256
- },
2257
- "cache": [
2258
- {
2259
- "key": "api-yarn",
2260
- "paths": [
2261
- "api/.yarn",
2262
- ],
2263
- "policy": "pull-push",
2264
- },
2265
- {
2266
- "key": "api-node-modules",
2267
- "paths": [
2268
- "api/node_modules",
2269
- ],
2270
- "policy": "pull-push",
2271
- },
2272
- {
2273
- "key": "api-next-cache",
2274
- "paths": [
2275
- "api/.next/cache/",
2276
- ],
2277
- "policy": "pull-push",
2278
- },
2279
- ],
2280
- "image": "path/to/docker/jobs-default:the-version",
2281
- "interruptible": true,
2282
- "needs": [],
2283
- "retry": {
2284
- "max": 2,
2285
- "when": [
2286
- "runner_system_failure",
2287
- "stuck_or_timeout_failure",
2288
- ],
2289
- },
2290
- "script": [
2291
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > api/__build_info.json",
2292
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2293
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2294
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2295
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2296
- "cd api",
2297
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2298
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2299
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2300
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2301
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2302
- "yarn install --immutable",
2303
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2304
- "yarn build",
2305
- ],
2306
- "stage": "build",
2307
- "variables": {
2308
- "APP_DIR": "api",
2309
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2310
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2311
- "BUILD_INFO_ID": "some-id",
2312
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-migration:run",
2313
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run",
2314
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2315
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2316
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2317
- "DB_NAME": "pan-test-app-stage-api",
2318
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
2319
- "DB_USER": "my-user",
2320
- "ENV_SHORT": "stage",
2321
- "ENV_TYPE": "stage",
2322
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
2323
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
2324
- "HOST": "pan-test-app-stage-api-unknown-host.example.com",
2325
- "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
2326
- "HOST_INTERNAL": "pan-test-app-stage-api-unknown-host.example.com",
2327
- "KUBERNETES_CPU_REQUEST": "0.5",
2328
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2329
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2330
- "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
2331
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-api-unknown-host.example.com",
2332
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2333
- },
2334
- },
2335
- "api 🔨 docker | prod ": {
2336
- "cache": [
2337
- {
2338
- "key": "api-yarn",
2339
- "paths": [
2340
- "api/.yarn",
2341
- ],
2342
- "policy": "pull",
2343
- },
2344
- ],
2345
- "image": "path/to/docker/docker-build:the-version",
2346
- "interruptible": true,
2347
- "needs": [
2348
- "api 🔨 app | prod ",
2349
- ],
2350
- "retry": {
2351
- "max": 2,
2352
- "when": [
2353
- "runner_system_failure",
2354
- "stuck_or_timeout_failure",
2355
- ],
2356
- },
2357
- "script": [
2358
- "ensureNodeDockerfile",
2359
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
2360
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
2361
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
2362
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
2363
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
2364
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2365
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
2366
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
2367
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2368
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2369
- "docker push $DOCKER_CACHE_IMAGE",
2370
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
2371
- ],
2372
- "services": [
2373
- {
2374
- "command": [
2375
- "--tls=false",
2376
- ],
2377
- "name": "docker:24.0.6-dind",
2378
- },
2379
- ],
2380
- "stage": "build",
2381
- "variables": {
2382
- "APP_DIR": "api",
2383
- "DOCKERFILE_ADDITIONS": undefined,
2384
- "DOCKERFILE_ADDITIONS_END": undefined,
2385
- "DOCKER_BUILDKIT": "1",
2386
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2387
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
2388
- RUN yarn plugin import workspace-tools
2389
- RUN yarn workspaces focus --production && yarn rebuild",
2390
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
2391
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
2392
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
2393
- COPY --chown=node:node .yarn /app/.yarn",
2394
- "DOCKER_DIR": ".",
2395
- "DOCKER_DRIVER": "overlay2",
2396
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2397
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api",
2398
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2399
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2400
- "DOCKER_TLS_CERTDIR": "",
2401
- "KUBERNETES_CPU_REQUEST": "0.5",
2402
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2403
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2404
- },
2405
- },
2406
- "api 🔨 docker | stage ": {
2407
- "cache": [
2408
- {
2409
- "key": "api-yarn",
2410
- "paths": [
2411
- "api/.yarn",
2412
- ],
2413
- "policy": "pull",
2414
- },
2415
- ],
2416
- "image": "path/to/docker/docker-build:the-version",
2417
- "interruptible": true,
2418
- "needs": [
2419
- "api 🔨 app | stage ",
2420
- ],
2421
- "retry": {
2422
- "max": 2,
2423
- "when": [
2424
- "runner_system_failure",
2425
- "stuck_or_timeout_failure",
2426
- ],
2427
- },
2428
- "script": [
2429
- "ensureNodeDockerfile",
2430
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
2431
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
2432
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
2433
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
2434
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
2435
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
2436
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
2437
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
2438
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
2439
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
2440
- "docker push $DOCKER_CACHE_IMAGE",
2441
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
2442
- ],
2443
- "services": [
2444
- {
2445
- "command": [
2446
- "--tls=false",
2447
- ],
2448
- "name": "docker:24.0.6-dind",
2449
- },
2450
- ],
2451
- "stage": "build",
2452
- "variables": {
2453
- "APP_DIR": "api",
2454
- "DOCKERFILE_ADDITIONS": undefined,
2455
- "DOCKERFILE_ADDITIONS_END": undefined,
2456
- "DOCKER_BUILDKIT": "1",
2457
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2458
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
2459
- RUN yarn plugin import workspace-tools
2460
- RUN yarn workspaces focus --production && yarn rebuild",
2461
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node api/package.json /app/api/package.json
2462
- COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
2463
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
2464
- COPY --chown=node:node .yarn /app/.yarn",
2465
- "DOCKER_DIR": ".",
2466
- "DOCKER_DRIVER": "overlay2",
2467
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2468
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api",
2469
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2470
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2471
- "DOCKER_TLS_CERTDIR": "",
2472
- "KUBERNETES_CPU_REQUEST": "0.5",
2473
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
2474
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
2475
- },
2476
- },
2477
- "api 🚀 Deploy | prod ": {
2478
- "allow_failure": true,
2479
- "artifacts": {
2480
- "paths": [
2481
- "____envvars.yaml",
2482
- ],
2483
- },
2484
- "environment": {
2485
- "auto_stop_in": undefined,
2486
- "name": "prod/api",
2487
- "on_stop": "api 🛑 Stop ⚠️ | prod ",
2488
- "url": "https://pan-test-app-prod-api-unknown-host.example.com",
2489
- },
2490
- "image": "path/to/docker/gcloud:the-version",
2491
- "interruptible": true,
2492
- "needs": [
2493
- {
2494
- "artifacts": false,
2495
- "job": "api 🔨 app | prod ",
2496
- },
2497
- {
2498
- "artifacts": false,
2499
- "job": "api 🔨 docker | prod ",
2500
- },
2501
- {
2502
- "artifacts": true,
2503
- "job": "api 🧾 sbom | prod ",
2504
- },
2505
- ],
2506
- "retry": {
2507
- "max": 2,
2508
- "when": [
2509
- "runner_system_failure",
2510
- "stuck_or_timeout_failure",
2511
- ],
2512
- },
2513
- "rules": [
2514
- {
2515
- "when": "manual",
2516
- },
2517
- ],
2518
- "script": [
2519
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
2520
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
2521
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
2522
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
2523
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
2524
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
2525
- "echo "$ENV_VARS" > ____envvars.yaml",
2526
- "set +e",
2527
- "echo "ensuring Database..."",
2528
- "gcloud sql databases create pan-test-app-prod-api --instance=instancename --project projectId",
2529
- "set -e",
2530
- "set +e",
2531
- "gcloud scheduler jobs create http pan-test-app-prod-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2532
- "set -e",
2533
- "gcloud scheduler jobs update http pan-test-app-prod-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2534
- "set +e",
2535
- "gcloud run jobs create pan-test-app-prod-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-job-name=pan-test-app-prod-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2536
- "set -e",
2537
- "gcloud run jobs update pan-test-app-prod-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-job-name=pan-test-app-prod-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2538
- "set +e",
2539
- "gcloud run jobs create pan-test-app-prod-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-job-name=pan-test-app-prod-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2540
- "set -e",
2541
- "gcloud run jobs update pan-test-app-prod-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-job-name=pan-test-app-prod-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2542
- "gcloud run deploy pan-test-app-prod-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-service-name=pan-test-app-prod-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
2543
- "gcloud run jobs execute pan-test-app-prod-api-migration --project=google-project-id --region=europe-west6",
2544
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
2545
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
2546
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-prod-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
2547
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api@$version --quiet --delete-tags; done",
2548
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2549
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
2550
- "echo Uploading SBOM to Dependency Track",
2551
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" "__sbom.json" vex.json || true",
2552
- ],
2553
- "services": [
2554
- {
2555
- "command": [
2556
- "--tls=false",
2557
- ],
2558
- "name": "docker:24.0.6-dind",
2559
- },
2560
- ],
2561
- "stage": "deploy prod",
2562
- "variables": {
2563
- "APP_DIR": "api",
2564
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2565
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2566
- "BUILD_INFO_ID": "some-id",
2567
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2568
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-migration:run",
2569
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run",
2570
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2571
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2572
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2573
- "DB_NAME": "pan-test-app-prod-api",
2574
- "DB_PASSWORD": "$CL_prod_api_DB_PASSWORD",
2575
- "DB_USER": "my-user",
2576
- "DOCKER_BUILDKIT": "1",
2577
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2578
- "DOCKER_DRIVER": "overlay2",
2579
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2580
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api",
2581
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2582
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2583
- "DOCKER_TLS_CERTDIR": "",
2584
- "ENV_SHORT": "prod",
2585
- "ENV_TYPE": "prod",
2586
- "ENV_VARS": "ENV_SHORT: 'prod'
2587
- APP_DIR: 'api'
2588
- ENV_TYPE: 'prod'
2589
- BUILD_INFO_ID: 'some-id'
2590
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2591
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2592
- HOST: 'pan-test-app-prod-api-unknown-host.example.com'
2593
- ROOT_URL: 'https://pan-test-app-prod-api-unknown-host.example.com'
2594
- HOST_CANONICAL: 'pan-test-app-prod-api-unknown-host.example.com'
2595
- ROOT_URL_INTERNAL: 'https://pan-test-app-prod-api-unknown-host.example.com'
2596
- HOST_INTERNAL: 'pan-test-app-prod-api-unknown-host.example.com'
2597
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
2598
- DB_NAME: 'pan-test-app-prod-api'
2599
- DB_USER: 'my-user'
2600
- DB_PASSWORD: '$CL_prod_api_DB_PASSWORD'
2601
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
2602
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
2603
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-migration:run'
2604
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-prod-api-send-reminders:run'
2605
- GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix'
2606
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
2607
- ",
2608
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
2609
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
2610
- "HOST": "pan-test-app-prod-api-unknown-host.example.com",
2611
- "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
2612
- "HOST_INTERNAL": "pan-test-app-prod-api-unknown-host.example.com",
2613
- "KUBERNETES_CPU_REQUEST": "0.5",
2614
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2615
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2616
- "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
2617
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-api-unknown-host.example.com",
2618
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2619
- },
2620
- },
2621
- "api 🚀 Deploy | stage ": {
2622
- "allow_failure": false,
2623
- "artifacts": {
2624
- "paths": [
2625
- "____envvars.yaml",
2626
- ],
2627
- },
2628
- "environment": {
2629
- "auto_stop_in": undefined,
2630
- "name": "stage/api",
2631
- "on_stop": "api 🛑 Stop ⚠️ | stage ",
2632
- "url": "https://pan-test-app-stage-api-unknown-host.example.com",
2633
- },
2634
- "image": "path/to/docker/gcloud:the-version",
2635
- "interruptible": true,
2636
- "needs": [
2637
- {
2638
- "artifacts": false,
2639
- "job": "api 🔨 app | stage ",
2640
- },
2641
- {
2642
- "artifacts": false,
2643
- "job": "api 🔨 docker | stage ",
2644
- },
2645
- {
2646
- "artifacts": true,
2647
- "job": "api 🧾 sbom | stage ",
2648
- },
2649
- ],
2650
- "retry": {
2651
- "max": 2,
2652
- "when": [
2653
- "runner_system_failure",
2654
- "stuck_or_timeout_failure",
2655
- ],
2656
- },
2657
- "rules": [
2658
- {
2659
- "when": "on_success",
2660
- },
2661
- ],
2662
- "script": [
2663
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
2664
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
2665
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
2666
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
2667
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
2668
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
2669
- "echo "$ENV_VARS" > ____envvars.yaml",
2670
- "set +e",
2671
- "echo "ensuring Database..."",
2672
- "gcloud sql databases create pan-test-app-stage-api --instance=instancename --project projectId",
2673
- "set -e",
2674
- "set +e",
2675
- "gcloud scheduler jobs create http pan-test-app-stage-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2676
- "set -e",
2677
- "gcloud scheduler jobs update http pan-test-app-stage-api-send-reminders-scheduler --project=google-project-id --location=europe-west6 --schedule="0 * * * *" --max-retry-attempts=0 --uri="https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
2678
- "set +e",
2679
- "gcloud run jobs create pan-test-app-stage-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-job-name=pan-test-app-stage-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2680
- "set -e",
2681
- "gcloud run jobs update pan-test-app-stage-api-migration --command="yarn,migrate" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-job-name=pan-test-app-stage-api-migration --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2682
- "set +e",
2683
- "gcloud run jobs create pan-test-app-stage-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-job-name=pan-test-app-stage-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2684
- "set -e",
2685
- "gcloud run jobs update pan-test-app-stage-api-send-reminders --command="yarn,job:send-reminders" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-job-name=pan-test-app-stage-api-send-reminders --memory=512Mi --task-timeout=15m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
2686
- "gcloud run deploy pan-test-app-stage-api --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --set-cloudsql-instances=projectId:region:instancename --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-service-name=pan-test-app-stage-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=5 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
2687
- "gcloud run jobs execute pan-test-app-stage-api-migration --project=google-project-id --region=europe-west6",
2688
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
2689
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
2690
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-stage-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
2691
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api@$version --quiet --delete-tags; done",
2692
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2693
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
2694
- "echo Uploading SBOM to Dependency Track",
2695
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" "__sbom.json" vex.json || true",
2696
- ],
2697
- "services": [
2698
- {
2699
- "command": [
2700
- "--tls=false",
2701
- ],
2702
- "name": "docker:24.0.6-dind",
2703
- },
2704
- ],
2705
- "stage": "deploy stage",
2706
- "variables": {
2707
- "APP_DIR": "api",
2708
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2709
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2710
- "BUILD_INFO_ID": "some-id",
2711
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2712
- "CLOUD_RUN_JOB_TRIGGER_URL_migration": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-migration:run",
2713
- "CLOUD_RUN_JOB_TRIGGER_URL_send_reminders": "https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run",
2714
- "CLOUD_SQL_INSTANCE_CONNECTION_NAME": "projectId:region:instancename",
2715
- "DATABASE_JDBC_URL": "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD",
2716
- "DATABASE_URL": "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME",
2717
- "DB_NAME": "pan-test-app-stage-api",
2718
- "DB_PASSWORD": "$CL_stage_api_DB_PASSWORD",
2719
- "DB_USER": "my-user",
2720
- "DOCKER_BUILDKIT": "1",
2721
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api",
2722
- "DOCKER_DRIVER": "overlay2",
2723
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
2724
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api",
2725
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
2726
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
2727
- "DOCKER_TLS_CERTDIR": "",
2728
- "ENV_SHORT": "stage",
2729
- "ENV_TYPE": "stage",
2730
- "ENV_VARS": "ENV_SHORT: 'stage'
2731
- APP_DIR: 'api'
2732
- ENV_TYPE: 'stage'
2733
- BUILD_INFO_ID: 'some-id'
2734
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
2735
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
2736
- HOST: 'pan-test-app-stage-api-unknown-host.example.com'
2737
- ROOT_URL: 'https://pan-test-app-stage-api-unknown-host.example.com'
2738
- HOST_CANONICAL: 'pan-test-app-stage-api-unknown-host.example.com'
2739
- ROOT_URL_INTERNAL: 'https://pan-test-app-stage-api-unknown-host.example.com'
2740
- HOST_INTERNAL: 'pan-test-app-stage-api-unknown-host.example.com'
2741
- CLOUD_SQL_INSTANCE_CONNECTION_NAME: 'projectId:region:instancename'
2742
- DB_NAME: 'pan-test-app-stage-api'
2743
- DB_USER: 'my-user'
2744
- DB_PASSWORD: '$CL_stage_api_DB_PASSWORD'
2745
- DATABASE_URL: 'postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME'
2746
- DATABASE_JDBC_URL: 'jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD'
2747
- CLOUD_RUN_JOB_TRIGGER_URL_migration: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-migration:run'
2748
- CLOUD_RUN_JOB_TRIGGER_URL_send_reminders: 'https://europe-west6-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/google-project-id/jobs/pan-test-app-stage-api-send-reminders:run'
2749
- GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix'
2750
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
2751
- ",
2752
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
2753
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
2754
- "HOST": "pan-test-app-stage-api-unknown-host.example.com",
2755
- "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
2756
- "HOST_INTERNAL": "pan-test-app-stage-api-unknown-host.example.com",
2757
- "KUBERNETES_CPU_REQUEST": "0.5",
2758
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2759
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2760
- "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
2761
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-api-unknown-host.example.com",
2762
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_SQL_INSTANCE_CONNECTION_NAME","DB_NAME","DB_USER","DB_PASSWORD","DATABASE_URL","DATABASE_JDBC_URL","CLOUD_RUN_JOB_TRIGGER_URL_migration","CLOUD_RUN_JOB_TRIGGER_URL_send_reminders","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
2763
- },
2764
- },
2765
- "api 🛑 Stop ⚠️ | prod ": {
2766
- "environment": {
2767
- "action": "stop",
2768
- "name": "prod/api",
2769
- "url": "https://pan-test-app-prod-api-unknown-host.example.com",
2770
- },
2771
- "image": "path/to/docker/gcloud:the-version",
2772
- "interruptible": true,
2773
- "needs": [],
2774
- "retry": {
2775
- "max": 2,
2776
- "when": [
2777
- "runner_system_failure",
2778
- "stuck_or_timeout_failure",
2779
- ],
2780
- },
2781
- "rules": [
2782
- {
2783
- "allow_failure": true,
2784
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2785
- "when": "on_success",
2786
- },
2787
- {
2788
- "allow_failure": true,
2789
- "when": "manual",
2790
- },
2791
- ],
2792
- "script": [
2793
- "set +e",
2794
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
2795
- "gcloud run services delete pan-test-app-prod-api --project=google-project-id --region=europe-west6",
2796
- "gcloud scheduler jobs delete pan-test-app-prod-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
2797
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-prod-api-migration --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2798
- "gcloud run jobs delete pan-test-app-prod-api-migration --project=google-project-id --region=europe-west6",
2799
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-prod-api-send-reminders --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2800
- "gcloud run jobs delete pan-test-app-prod-api-send-reminders --project=google-project-id --region=europe-west6",
2801
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/api --quiet --delete-tags",
2802
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2803
- "echo Disabling component in Dependency Track",
2804
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" || true",
2805
- "set -e",
2806
- ],
2807
- "stage": "stop prod",
2808
- "variables": {
2809
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2810
- "GIT_STRATEGY": "none",
2811
- "KUBERNETES_CPU_REQUEST": "0.5",
2812
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2813
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2814
- },
2815
- },
2816
- "api 🛑 Stop ⚠️ | stage ": {
2817
- "environment": {
2818
- "action": "stop",
2819
- "name": "stage/api",
2820
- "url": "https://pan-test-app-stage-api-unknown-host.example.com",
2821
- },
2822
- "image": "path/to/docker/gcloud:the-version",
2823
- "interruptible": true,
2824
- "needs": [],
2825
- "retry": {
2826
- "max": 2,
2827
- "when": [
2828
- "runner_system_failure",
2829
- "stuck_or_timeout_failure",
2830
- ],
2831
- },
2832
- "rules": [
2833
- {
2834
- "allow_failure": true,
2835
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
2836
- "when": "on_success",
2837
- },
2838
- {
2839
- "allow_failure": true,
2840
- "when": "manual",
2841
- },
2842
- ],
2843
- "script": [
2844
- "set +e",
2845
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
2846
- "gcloud run services delete pan-test-app-stage-api --project=google-project-id --region=europe-west6",
2847
- "gcloud scheduler jobs delete pan-test-app-stage-api-send-reminders-scheduler --project=google-project-id --location=europe-west6",
2848
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-stage-api-migration --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2849
- "gcloud run jobs delete pan-test-app-stage-api-migration --project=google-project-id --region=europe-west6",
2850
- "gcloud run jobs executions list --project=google-project-id --region=europe-west6 --job pan-test-app-stage-api-send-reminders --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=google-project-id --region=europe-west6",
2851
- "gcloud run jobs delete pan-test-app-stage-api-send-reminders --project=google-project-id --region=europe-west6",
2852
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/api --quiet --delete-tags",
2853
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
2854
- "echo Disabling component in Dependency Track",
2855
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" || true",
2856
- "set -e",
2857
- ],
2858
- "stage": "stop stage",
2859
- "variables": {
2860
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
2861
- "GIT_STRATEGY": "none",
2862
- "KUBERNETES_CPU_REQUEST": "0.5",
2863
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
2864
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
2865
- },
2866
- },
2867
- "api 🧾 sbom | prod ": {
2868
- "allow_failure": true,
2869
- "artifacts": {
2870
- "paths": [
2871
- "__sbom.json",
2872
- ],
2873
- },
2874
- "image": "aquasec/trivy:0.38.3",
2875
- "interruptible": true,
2876
- "needs": [],
2877
- "retry": {
2878
- "max": 2,
2879
- "when": [
2880
- "runner_system_failure",
2881
- "stuck_or_timeout_failure",
2882
- ],
2883
- },
2884
- "script": [
2885
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2886
- ],
2887
- "stage": "build",
2888
- "variables": {},
2889
- },
2890
- "api 🧾 sbom | stage ": {
2891
- "allow_failure": true,
2892
- "artifacts": {
2893
- "paths": [
2894
- "__sbom.json",
2895
- ],
2896
- },
2897
- "image": "aquasec/trivy:0.38.3",
2898
- "interruptible": true,
2899
- "needs": [],
2900
- "retry": {
2901
- "max": 2,
2902
- "when": [
2903
- "runner_system_failure",
2904
- "stuck_or_timeout_failure",
2905
- ],
2906
- },
2907
- "script": [
2908
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
2909
- ],
2910
- "stage": "build",
2911
- "variables": {},
2912
- },
2913
- "www 🔨 app | prod ": {
2914
- "artifacts": {
2915
- "expire_in": "1 day",
2916
- "paths": [
2917
- "www/__build_info.json",
2918
- "www/dist",
2919
- "www/.next",
2920
- ],
2921
- "reports": {
2922
- "junit": undefined,
2923
- },
2924
- "when": "always",
2925
- },
2926
- "cache": [
2927
- {
2928
- "key": "www-yarn",
2929
- "paths": [
2930
- "www/.yarn",
2931
- ],
2932
- "policy": "pull-push",
2933
- },
2934
- {
2935
- "key": "www-node-modules",
2936
- "paths": [
2937
- "www/node_modules",
2938
- ],
2939
- "policy": "pull-push",
2940
- },
2941
- {
2942
- "key": "www-next-cache",
2943
- "paths": [
2944
- "www/.next/cache/",
2945
- ],
2946
- "policy": "pull-push",
2947
- },
2948
- ],
2949
- "image": "path/to/docker/jobs-default:the-version",
2950
- "interruptible": true,
2951
- "needs": [],
2952
- "retry": {
2953
- "max": 2,
2954
- "when": [
2955
- "runner_system_failure",
2956
- "stuck_or_timeout_failure",
2957
- ],
2958
- },
2959
- "script": [
2960
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
2961
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2962
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2963
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2964
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2965
- "cd www",
2966
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
2967
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
2968
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
2969
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
2970
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
2971
- "yarn install --immutable",
2972
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
2973
- "yarn build",
2974
- ],
2975
- "stage": "build",
2976
- "variables": {
2977
- "API_URL": "https://pan-test-app-prod-api-unknown-host.example.com/graphql",
2978
- "APP_DIR": "www",
2979
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
2980
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
2981
- "BUILD_INFO_ID": "some-id",
2982
- "ENV_SHORT": "prod",
2983
- "ENV_TYPE": "prod",
2984
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey",
2985
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_www_GCLOUD_RUN_canonicalHostSuffix",
2986
- "HOST": "pan-test-app-prod-www-unknown-host.example.com",
2987
- "HOST_CANONICAL": "pan-test-app-prod-www-unknown-host.example.com",
2988
- "HOST_INTERNAL": "pan-test-app-prod-www-unknown-host.example.com",
2989
- "KUBERNETES_CPU_REQUEST": "0.5",
2990
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
2991
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
2992
- "ROOT_URL": "https://pan-test-app-prod-www-unknown-host.example.com",
2993
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-www-unknown-host.example.com",
2994
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
2995
- },
2996
- },
2997
- "www 🔨 app | stage ": {
2998
- "artifacts": {
2999
- "expire_in": "1 day",
3000
- "paths": [
3001
- "www/__build_info.json",
3002
- "www/dist",
3003
- "www/.next",
3004
- ],
3005
- "reports": {
3006
- "junit": undefined,
3007
- },
3008
- "when": "always",
3009
- },
3010
- "cache": [
3011
- {
3012
- "key": "www-yarn",
3013
- "paths": [
3014
- "www/.yarn",
3015
- ],
3016
- "policy": "pull-push",
3017
- },
3018
- {
3019
- "key": "www-node-modules",
3020
- "paths": [
3021
- "www/node_modules",
3022
- ],
3023
- "policy": "pull-push",
3024
- },
3025
- {
3026
- "key": "www-next-cache",
3027
- "paths": [
3028
- "www/.next/cache/",
3029
- ],
3030
- "policy": "pull-push",
3031
- },
3032
- ],
3033
- "image": "path/to/docker/jobs-default:the-version",
3034
- "interruptible": true,
3035
- "needs": [],
3036
- "retry": {
3037
- "max": 2,
3038
- "when": [
3039
- "runner_system_failure",
3040
- "stuck_or_timeout_failure",
3041
- ],
3042
- },
3043
- "script": [
3044
- "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
3045
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
3046
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
3047
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
3048
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
3049
- "cd www",
3050
- "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
3051
- "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
3052
- "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
3053
- "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
3054
- "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
3055
- "yarn install --immutable",
3056
- "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
3057
- "yarn build",
3058
- ],
3059
- "stage": "build",
3060
- "variables": {
3061
- "API_URL": "https://pan-test-app-stage-api-unknown-host.example.com/graphql",
3062
- "APP_DIR": "www",
3063
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3064
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3065
- "BUILD_INFO_ID": "some-id",
3066
- "ENV_SHORT": "stage",
3067
- "ENV_TYPE": "stage",
3068
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey",
3069
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_www_GCLOUD_RUN_canonicalHostSuffix",
3070
- "HOST": "pan-test-app-stage-www-unknown-host.example.com",
3071
- "HOST_CANONICAL": "pan-test-app-stage-www-unknown-host.example.com",
3072
- "HOST_INTERNAL": "pan-test-app-stage-www-unknown-host.example.com",
3073
- "KUBERNETES_CPU_REQUEST": "0.5",
3074
- "KUBERNETES_MEMORY_LIMIT": "4Gi",
3075
- "KUBERNETES_MEMORY_REQUEST": "2Gi",
3076
- "ROOT_URL": "https://pan-test-app-stage-www-unknown-host.example.com",
3077
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-www-unknown-host.example.com",
3078
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
3079
- },
3080
- },
3081
- "www 🔨 docker | prod ": {
3082
- "cache": [
3083
- {
3084
- "key": "www-yarn",
3085
- "paths": [
3086
- "www/.yarn",
3087
- ],
3088
- "policy": "pull",
3089
- },
3090
- ],
3091
- "image": "path/to/docker/docker-build:the-version",
3092
- "interruptible": true,
3093
- "needs": [
3094
- "www 🔨 app | prod ",
3095
- ],
3096
- "retry": {
3097
- "max": 2,
3098
- "when": [
3099
- "runner_system_failure",
3100
- "stuck_or_timeout_failure",
3101
- ],
3102
- },
3103
- "script": [
3104
- "ensureNodeDockerfile",
3105
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
3106
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey")",
3107
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
3108
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
3109
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
3110
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3111
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
3112
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
3113
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3114
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3115
- "docker push $DOCKER_CACHE_IMAGE",
3116
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
3117
- ],
3118
- "services": [
3119
- {
3120
- "command": [
3121
- "--tls=false",
3122
- ],
3123
- "name": "docker:24.0.6-dind",
3124
- },
3125
- ],
3126
- "stage": "build",
3127
- "variables": {
3128
- "APP_DIR": "www",
3129
- "DOCKERFILE_ADDITIONS": undefined,
3130
- "DOCKERFILE_ADDITIONS_END": undefined,
3131
- "DOCKER_BUILDKIT": "1",
3132
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
3133
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
3134
- RUN yarn plugin import workspace-tools
3135
- RUN yarn workspaces focus --production && yarn rebuild",
3136
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
3137
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
3138
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
3139
- COPY --chown=node:node .yarn /app/.yarn",
3140
- "DOCKER_DIR": ".",
3141
- "DOCKER_DRIVER": "overlay2",
3142
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3143
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www",
3144
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3145
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3146
- "DOCKER_TLS_CERTDIR": "",
3147
- "KUBERNETES_CPU_REQUEST": "0.5",
3148
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3149
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3150
- },
3151
- },
3152
- "www 🔨 docker | stage ": {
3153
- "cache": [
3154
- {
3155
- "key": "www-yarn",
3156
- "paths": [
3157
- "www/.yarn",
3158
- ],
3159
- "policy": "pull",
3160
- },
3161
- ],
3162
- "image": "path/to/docker/docker-build:the-version",
3163
- "interruptible": true,
3164
- "needs": [
3165
- "www 🔨 app | stage ",
3166
- ],
3167
- "retry": {
3168
- "max": 2,
3169
- "when": [
3170
- "runner_system_failure",
3171
- "stuck_or_timeout_failure",
3172
- ],
3173
- },
3174
- "script": [
3175
- "ensureNodeDockerfile",
3176
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
3177
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey")",
3178
- "gcloud auth configure-docker europe-west6-docker.pkg.dev",
3179
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
3180
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
3181
- "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
3182
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
3183
- "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
3184
- "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
3185
- "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
3186
- "docker push $DOCKER_CACHE_IMAGE",
3187
- "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
3188
- ],
3189
- "services": [
3190
- {
3191
- "command": [
3192
- "--tls=false",
3193
- ],
3194
- "name": "docker:24.0.6-dind",
3195
- },
3196
- ],
3197
- "stage": "build",
3198
- "variables": {
3199
- "APP_DIR": "www",
3200
- "DOCKERFILE_ADDITIONS": undefined,
3201
- "DOCKERFILE_ADDITIONS_END": undefined,
3202
- "DOCKER_BUILDKIT": "1",
3203
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
3204
- "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
3205
- RUN yarn plugin import workspace-tools
3206
- RUN yarn workspaces focus --production && yarn rebuild",
3207
- "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
3208
- COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
3209
- COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
3210
- COPY --chown=node:node .yarn /app/.yarn",
3211
- "DOCKER_DIR": ".",
3212
- "DOCKER_DRIVER": "overlay2",
3213
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3214
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www",
3215
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3216
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3217
- "DOCKER_TLS_CERTDIR": "",
3218
- "KUBERNETES_CPU_REQUEST": "0.5",
3219
- "KUBERNETES_MEMORY_LIMIT": "2Gi",
3220
- "KUBERNETES_MEMORY_REQUEST": "1Gi",
3221
- },
3222
- },
3223
- "www 🚀 Deploy | prod ": {
3224
- "allow_failure": true,
3225
- "artifacts": {
3226
- "paths": [
3227
- "____envvars.yaml",
3228
- ],
3229
- },
3230
- "environment": {
3231
- "auto_stop_in": undefined,
3232
- "name": "prod/www",
3233
- "on_stop": "www 🛑 Stop ⚠️ | prod ",
3234
- "url": "https://pan-test-app-prod-www-unknown-host.example.com",
3235
- },
3236
- "image": "path/to/docker/gcloud:the-version",
3237
- "interruptible": true,
3238
- "needs": [
3239
- {
3240
- "artifacts": false,
3241
- "job": "www 🔨 app | prod ",
3242
- },
3243
- {
3244
- "artifacts": false,
3245
- "job": "www 🔨 docker | prod ",
3246
- },
3247
- {
3248
- "artifacts": true,
3249
- "job": "www 🧾 sbom | prod ",
3250
- },
3251
- ],
3252
- "retry": {
3253
- "max": 2,
3254
- "when": [
3255
- "runner_system_failure",
3256
- "stuck_or_timeout_failure",
3257
- ],
3258
- },
3259
- "rules": [
3260
- {
3261
- "when": "manual",
3262
- },
3263
- ],
3264
- "script": [
3265
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
3266
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey")",
3267
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
3268
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
3269
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
3270
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
3271
- "echo "$ENV_VARS" > ____envvars.yaml",
3272
- "gcloud run deploy pan-test-app-prod-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-service-name=pan-test-app-prod-www --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
3273
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
3274
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
3275
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-prod-www --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
3276
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www@$version --quiet --delete-tags; done",
3277
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
3278
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
3279
- "echo Uploading SBOM to Dependency Track",
3280
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" "__sbom.json" vex.json || true",
3281
- ],
3282
- "services": [
3283
- {
3284
- "command": [
3285
- "--tls=false",
3286
- ],
3287
- "name": "docker:24.0.6-dind",
3288
- },
3289
- ],
3290
- "stage": "deploy prod",
3291
- "variables": {
3292
- "API_URL": "https://pan-test-app-prod-api-unknown-host.example.com/graphql",
3293
- "APP_DIR": "www",
3294
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3295
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3296
- "BUILD_INFO_ID": "some-id",
3297
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3298
- "DOCKER_BUILDKIT": "1",
3299
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
3300
- "DOCKER_DRIVER": "overlay2",
3301
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3302
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www",
3303
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3304
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3305
- "DOCKER_TLS_CERTDIR": "",
3306
- "ENV_SHORT": "prod",
3307
- "ENV_TYPE": "prod",
3308
- "ENV_VARS": "ENV_SHORT: 'prod'
3309
- APP_DIR: 'www'
3310
- ENV_TYPE: 'prod'
3311
- BUILD_INFO_ID: 'some-id'
3312
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3313
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3314
- HOST: 'pan-test-app-prod-www-unknown-host.example.com'
3315
- ROOT_URL: 'https://pan-test-app-prod-www-unknown-host.example.com'
3316
- HOST_CANONICAL: 'pan-test-app-prod-www-unknown-host.example.com'
3317
- ROOT_URL_INTERNAL: 'https://pan-test-app-prod-www-unknown-host.example.com'
3318
- HOST_INTERNAL: 'pan-test-app-prod-www-unknown-host.example.com'
3319
- GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_www_GCLOUD_RUN_canonicalHostSuffix'
3320
- API_URL: 'https://pan-test-app-prod-api-unknown-host.example.com/graphql'
3321
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
3322
- ",
3323
- "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey",
3324
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_www_GCLOUD_RUN_canonicalHostSuffix",
3325
- "HOST": "pan-test-app-prod-www-unknown-host.example.com",
3326
- "HOST_CANONICAL": "pan-test-app-prod-www-unknown-host.example.com",
3327
- "HOST_INTERNAL": "pan-test-app-prod-www-unknown-host.example.com",
3328
- "KUBERNETES_CPU_REQUEST": "0.5",
3329
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3330
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3331
- "ROOT_URL": "https://pan-test-app-prod-www-unknown-host.example.com",
3332
- "ROOT_URL_INTERNAL": "https://pan-test-app-prod-www-unknown-host.example.com",
3333
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
3334
- },
3335
- },
3336
- "www 🚀 Deploy | stage ": {
3337
- "allow_failure": false,
3338
- "artifacts": {
3339
- "paths": [
3340
- "____envvars.yaml",
3341
- ],
3342
- },
3343
- "environment": {
3344
- "auto_stop_in": undefined,
3345
- "name": "stage/www",
3346
- "on_stop": "www 🛑 Stop ⚠️ | stage ",
3347
- "url": "https://pan-test-app-stage-www-unknown-host.example.com",
3348
- },
3349
- "image": "path/to/docker/gcloud:the-version",
3350
- "interruptible": true,
3351
- "needs": [
3352
- {
3353
- "artifacts": false,
3354
- "job": "www 🔨 app | stage ",
3355
- },
3356
- {
3357
- "artifacts": false,
3358
- "job": "www 🔨 docker | stage ",
3359
- },
3360
- {
3361
- "artifacts": true,
3362
- "job": "www 🧾 sbom | stage ",
3363
- },
3364
- ],
3365
- "retry": {
3366
- "max": 2,
3367
- "when": [
3368
- "runner_system_failure",
3369
- "stuck_or_timeout_failure",
3370
- ],
3371
- },
3372
- "rules": [
3373
- {
3374
- "when": "on_success",
3375
- },
3376
- ],
3377
- "script": [
3378
- "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
3379
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey")",
3380
- "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
3381
- "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
3382
- "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
3383
- "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
3384
- "echo "$ENV_VARS" > ____envvars.yaml",
3385
- "gcloud run deploy pan-test-app-stage-www --command="yarn,start" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=www,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-service-name=pan-test-app-stage-www --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
3386
- "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
3387
- "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
3388
- "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-stage-www --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
3389
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www@$version --quiet --delete-tags; done",
3390
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
3391
- "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
3392
- "echo Uploading SBOM to Dependency Track",
3393
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" "__sbom.json" vex.json || true",
3394
- ],
3395
- "services": [
3396
- {
3397
- "command": [
3398
- "--tls=false",
3399
- ],
3400
- "name": "docker:24.0.6-dind",
3401
- },
3402
- ],
3403
- "stage": "deploy stage",
3404
- "variables": {
3405
- "API_URL": "https://pan-test-app-stage-api-unknown-host.example.com/graphql",
3406
- "APP_DIR": "www",
3407
- "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
3408
- "BUILD_INFO_CURRENT_VERSION": "3.2.1",
3409
- "BUILD_INFO_ID": "some-id",
3410
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3411
- "DOCKER_BUILDKIT": "1",
3412
- "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www",
3413
- "DOCKER_DRIVER": "overlay2",
3414
- "DOCKER_HOST": "tcp://0.0.0.0:2375",
3415
- "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www",
3416
- "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
3417
- "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
3418
- "DOCKER_TLS_CERTDIR": "",
3419
- "ENV_SHORT": "stage",
3420
- "ENV_TYPE": "stage",
3421
- "ENV_VARS": "ENV_SHORT: 'stage'
3422
- APP_DIR: 'www'
3423
- ENV_TYPE: 'stage'
3424
- BUILD_INFO_ID: 'some-id'
3425
- BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
3426
- BUILD_INFO_CURRENT_VERSION: '3.2.1'
3427
- HOST: 'pan-test-app-stage-www-unknown-host.example.com'
3428
- ROOT_URL: 'https://pan-test-app-stage-www-unknown-host.example.com'
3429
- HOST_CANONICAL: 'pan-test-app-stage-www-unknown-host.example.com'
3430
- ROOT_URL_INTERNAL: 'https://pan-test-app-stage-www-unknown-host.example.com'
3431
- HOST_INTERNAL: 'pan-test-app-stage-www-unknown-host.example.com'
3432
- GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_www_GCLOUD_RUN_canonicalHostSuffix'
3433
- API_URL: 'https://pan-test-app-stage-api-unknown-host.example.com/graphql'
3434
- _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]'
3435
- ",
3436
- "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey",
3437
- "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_www_GCLOUD_RUN_canonicalHostSuffix",
3438
- "HOST": "pan-test-app-stage-www-unknown-host.example.com",
3439
- "HOST_CANONICAL": "pan-test-app-stage-www-unknown-host.example.com",
3440
- "HOST_INTERNAL": "pan-test-app-stage-www-unknown-host.example.com",
3441
- "KUBERNETES_CPU_REQUEST": "0.5",
3442
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3443
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3444
- "ROOT_URL": "https://pan-test-app-stage-www-unknown-host.example.com",
3445
- "ROOT_URL_INTERNAL": "https://pan-test-app-stage-www-unknown-host.example.com",
3446
- "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix","API_URL"]",
3447
- },
3448
- },
3449
- "www 🛑 Stop ⚠️ | prod ": {
3450
- "environment": {
3451
- "action": "stop",
3452
- "name": "prod/www",
3453
- "url": "https://pan-test-app-prod-www-unknown-host.example.com",
3454
- },
3455
- "image": "path/to/docker/gcloud:the-version",
3456
- "interruptible": true,
3457
- "needs": [],
3458
- "retry": {
3459
- "max": 2,
3460
- "when": [
3461
- "runner_system_failure",
3462
- "stuck_or_timeout_failure",
3463
- ],
3464
- },
3465
- "rules": [
3466
- {
3467
- "allow_failure": true,
3468
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3469
- "when": "on_success",
3470
- },
3471
- {
3472
- "allow_failure": true,
3473
- "when": "manual",
3474
- },
3475
- ],
3476
- "script": [
3477
- "set +e",
3478
- "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_www_GCLOUD_DEPLOY_credentialsKey")",
3479
- "gcloud run services delete pan-test-app-prod-www --project=google-project-id --region=europe-west6",
3480
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/www --quiet --delete-tags",
3481
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
3482
- "echo Disabling component in Dependency Track",
3483
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" || true",
3484
- "set -e",
3485
- ],
3486
- "stage": "stop prod",
3487
- "variables": {
3488
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3489
- "GIT_STRATEGY": "none",
3490
- "KUBERNETES_CPU_REQUEST": "0.5",
3491
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3492
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3493
- },
3494
- },
3495
- "www 🛑 Stop ⚠️ | stage ": {
3496
- "environment": {
3497
- "action": "stop",
3498
- "name": "stage/www",
3499
- "url": "https://pan-test-app-stage-www-unknown-host.example.com",
3500
- },
3501
- "image": "path/to/docker/gcloud:the-version",
3502
- "interruptible": true,
3503
- "needs": [],
3504
- "retry": {
3505
- "max": 2,
3506
- "when": [
3507
- "runner_system_failure",
3508
- "stuck_or_timeout_failure",
3509
- ],
3510
- },
3511
- "rules": [
3512
- {
3513
- "allow_failure": true,
3514
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
3515
- "when": "on_success",
3516
- },
3517
- {
3518
- "allow_failure": true,
3519
- "when": "manual",
3520
- },
3521
- ],
3522
- "script": [
3523
- "set +e",
3524
- "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_www_GCLOUD_DEPLOY_credentialsKey")",
3525
- "gcloud run services delete pan-test-app-stage-www --project=google-project-id --region=europe-west6",
3526
- "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/www --quiet --delete-tags",
3527
- "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/www@$version --quiet --delete-tags; done",
3528
- "echo Disabling component in Dependency Track",
3529
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" || true",
3530
- "set -e",
3531
- ],
3532
- "stage": "stop stage",
3533
- "variables": {
3534
- "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
3535
- "GIT_STRATEGY": "none",
3536
- "KUBERNETES_CPU_REQUEST": "0.5",
3537
- "KUBERNETES_MEMORY_LIMIT": "400Mi",
3538
- "KUBERNETES_MEMORY_REQUEST": "200Mi",
3539
- },
3540
- },
3541
- "www 🧾 sbom | prod ": {
3542
- "allow_failure": true,
3543
- "artifacts": {
3544
- "paths": [
3545
- "__sbom.json",
3546
- ],
3547
- },
3548
- "image": "aquasec/trivy:0.38.3",
3549
- "interruptible": true,
3550
- "needs": [],
3551
- "retry": {
3552
- "max": 2,
3553
- "when": [
3554
- "runner_system_failure",
3555
- "stuck_or_timeout_failure",
3556
- ],
3557
- },
3558
- "script": [
3559
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
3560
- ],
3561
- "stage": "build",
3562
- "variables": {},
3563
- },
3564
- "www 🧾 sbom | stage ": {
3565
- "allow_failure": true,
3566
- "artifacts": {
3567
- "paths": [
3568
- "__sbom.json",
3569
- ],
3570
- },
3571
- "image": "aquasec/trivy:0.38.3",
3572
- "interruptible": true,
3573
- "needs": [],
3574
- "retry": {
3575
- "max": 2,
3576
- "when": [
3577
- "runner_system_failure",
3578
- "stuck_or_timeout_failure",
3579
- ],
3580
- },
3581
- "script": [
3582
- "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
3583
- ],
3584
- "stage": "build",
3585
- "variables": {},
3586
- },
3587
- },
3588
- "stages": [
3589
- "setup",
3590
- "setup dev",
3591
- "setup review",
3592
- "setup stage",
3593
- "setup prod",
3594
- "setup local",
3595
- "test",
3596
- "test dev",
3597
- "test review",
3598
- "test stage",
3599
- "test prod",
3600
- "test local",
3601
- "build",
3602
- "build dev",
3603
- "build review",
3604
- "build stage",
3605
- "build prod",
3606
- "build local",
3607
- "deploy",
3608
- "deploy dev",
3609
- "deploy review",
3610
- "deploy stage",
3611
- "deploy prod",
3612
- "deploy local",
3613
- "verify",
3614
- "verify dev",
3615
- "verify review",
3616
- "verify stage",
3617
- "verify prod",
3618
- "verify local",
3619
- "rollback",
3620
- "rollback dev",
3621
- "rollback review",
3622
- "rollback stage",
3623
- "rollback prod",
3624
- "rollback local",
3625
- "stop",
3626
- "stop dev",
3627
- "stop review",
3628
- "stop stage",
3629
- "stop prod",
3630
- "stop local",
3631
- ],
3632
- "variables": {
3633
- "FF_USE_FASTZIP": "true",
3634
- "GIT_DEPTH": 1,
3635
- },
3636
- "workflow": {
3637
- "rules": [
3638
- {
3639
- "if": "$CI_COMMIT_TAG",
3640
- },
3641
- {
3642
- "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
3643
- "when": "never",
3644
- },
3645
- {
3646
- "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
3647
- },
3648
- {
3649
- "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
3650
- },
3651
- {
3652
- "if": "$CI_MERGE_REQUEST_ID",
3653
- },
3654
- ],
3655
- },
3656
- },
3657
- }
3658
- `;