@catladder/pipeline 0.0.0-update-docker-for-apps-e047cc44 → 0.0.0-update-node-b0c7282d

package/examples/__snapshots__/cloud-run-meteor-with-worker.ts.snap

@@ -0,0 +1,1813 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`matches snapshot 1`] = `
+{
+  "mainBranch": {
+    "image": "path/to/docker/jobs-default:the-version",
+    "jobs": {
+      "web 👮 lint": {
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-default:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "yarn lint",
+        ],
+        "stage": "test",
+        "variables": {
+          "APP_PATH": "web",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "2Gi",
+        },
+      },
+      "web 🔨 app | dev ": {
+        "artifacts": {
+          "paths": [
+            "web/__build_info.json",
+            "web/dist",
+          ],
+          "reports": {
+            "junit": undefined,
+          },
+        },
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "webmeteor-build-cache",
+            "paths": [
+              "web/.meteor/local/resolver-result-cache.json",
+              "web/.meteor/local/plugin-cache",
+              "web/.meteor/local/isopacks",
+              "web/.meteor/local/bundler-cache/scanner",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-meteor:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > web/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "echo "add healthcheck package"",
+          "meteor add panter:healthroute --allow-superuser",
+          "meteor add qualia:prod-shell --allow-superuser",
+          "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
+          "cp ./__build_info.json ./dist/bundle/programs/server",
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "ENV_SHORT": "dev",
+          "ENV_TYPE": "dev",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-dev-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-dev-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
+          "ROOT_URL": "https://pan-test-app-dev-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🔨 docker | dev ": {
+        "image": "path/to/docker/docker-build:the-version",
+        "interruptible": true,
+        "needs": [
+          "web 🔨 app | dev ",
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "ensureMeteorDockerfile",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
+          "echo $CL_dev_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud auth configure-docker europe-west6-docker.pkg.dev",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
+          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
+          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
+          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
+          "docker push $DOCKER_CACHE_IMAGE",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "DOCKERFILE_ADDITIONS": undefined,
+          "DOCKERFILE_ADDITIONS_END": undefined,
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DIR": ".",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "2Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_INSTALL_SCRIPTS": "",
+        },
+      },
+      "web 🚀 Deploy | dev ": {
+        "allow_failure": false,
+        "artifacts": {
+          "paths": [
+            "____envvars.yaml",
+          ],
+        },
+        "environment": {
+          "auto_stop_in": "4 weeks",
+          "name": "dev/web",
+          "on_stop": "web 🛑 Stop ⚠️ | dev ",
+          "url": "https://pan-test-app-dev-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [
+          {
+            "artifacts": false,
+            "job": "web 👮 lint",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🔨 app | dev ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🔨 docker | dev ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🧪 test",
+          },
+          {
+            "artifacts": true,
+            "job": "web 🧾 sbom | dev ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🛡 audit",
+          },
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "when": "on_success",
+          },
+        ],
+        "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
+          "echo $CL_dev_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
+          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
+          "echo "$ENV_VARS" > ____envvars.yaml",
+          "gcloud run deploy pan-test-app-dev-web --command="node,main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=dev,env-name=dev,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "gcloud run deploy pan-test-app-dev-web-worker --command="/bin/sh -c,BACKGROUND_JOBS_ENABLED=1 node main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=dev,env-name=dev,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=1 --max-instances=1 --no-cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
+          "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-dev-web --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web@$version --quiet --delete-tags; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/web" "https://pan-test-app-dev-web-unknown-host.example.com" "__sbom.json" vex.json || true",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "deploy dev",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "ENV_SHORT": "dev",
+          "ENV_TYPE": "dev",
+          "ENV_VARS": "ENV_SHORT: 'dev'
+APP_DIR: 'web'
+ENV_TYPE: 'dev'
+BUILD_INFO_ID: 'some-id'
+BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
+BUILD_INFO_CURRENT_VERSION: '3.2.1'
+HOST: 'pan-test-app-dev-web-unknown-host.example.com'
+ROOT_URL: 'https://pan-test-app-dev-web-unknown-host.example.com'
+HOST_CANONICAL: 'pan-test-app-dev-web-unknown-host.example.com'
+GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_web_GCLOUD_RUN_canonicalHostSuffix'
+_ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
+",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-dev-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-dev-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+          "ROOT_URL": "https://pan-test-app-dev-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🛑 Stop ⚠️ | dev ": {
+        "environment": {
+          "action": "stop",
+          "name": "dev/web",
+          "url": "https://pan-test-app-dev-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "allow_failure": true,
+            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
+            "when": "on_success",
+          },
+          {
+            "allow_failure": true,
+            "when": "manual",
+          },
+        ],
+        "script": [
+          "set +e",
+          "echo $CL_dev_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud run services delete pan-test-app-dev-web --project=google-project-id --region=europe-west6",
+          "gcloud run services delete pan-test-app-dev-web-worker --project=google-project-id --region=europe-west6",
+          "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/dev/web --quiet --delete-tags",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/web" "https://pan-test-app-dev-web-unknown-host.example.com" || true",
+          "set -e",
+        ],
+        "stage": "stop dev",
+        "variables": {
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "GIT_STRATEGY": "none",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+        },
+      },
+      "web 🛡 audit": {
+        "allow_failure": true,
+        "image": "path/to/docker/jobs-default:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "cd web",
+          "yarn npm audit --environment production",
+        ],
+        "stage": "test",
+        "variables": {
+          "APP_PATH": "web",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "2Gi",
+        },
+      },
+      "web 🧪 test": {
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-testing-chrome:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "yarn test",
+        ],
+        "stage": "test",
+        "variables": {
+          "APP_PATH": "web",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "2Gi",
+        },
+      },
+      "web 🧾 sbom | dev ": {
+        "allow_failure": true,
+        "artifacts": {
+          "paths": [
+            "__sbom.json",
+          ],
+        },
+        "image": "aquasec/trivy:0.38.3",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "trivy fs --quiet --format cyclonedx --output "__sbom.json" web",
+        ],
+        "stage": "build",
+        "variables": {},
+      },
+    },
+    "stages": [
+      "setup",
+      "setup dev",
+      "setup review",
+      "setup stage",
+      "setup prod",
+      "setup local",
+      "test",
+      "test dev",
+      "test review",
+      "test stage",
+      "test prod",
+      "test local",
+      "build",
+      "build dev",
+      "build review",
+      "build stage",
+      "build prod",
+      "build local",
+      "deploy",
+      "deploy dev",
+      "deploy review",
+      "deploy stage",
+      "deploy prod",
+      "deploy local",
+      "verify",
+      "verify dev",
+      "verify review",
+      "verify stage",
+      "verify prod",
+      "verify local",
+      "rollback",
+      "rollback dev",
+      "rollback review",
+      "rollback stage",
+      "rollback prod",
+      "rollback local",
+      "stop",
+      "stop dev",
+      "stop review",
+      "stop stage",
+      "stop prod",
+      "stop local",
+    ],
+    "variables": {
+      "FF_USE_FASTZIP": "true",
+      "GIT_DEPTH": 1,
+    },
+    "workflow": {
+      "rules": [
+        {
+          "if": "$CI_COMMIT_TAG",
+        },
+        {
+          "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
+          "when": "never",
+        },
+        {
+          "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
+        },
+        {
+          "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
+        },
+        {
+          "if": "$CI_MERGE_REQUEST_ID",
+        },
+      ],
+    },
+  },
+  "mr": {
+    "image": "path/to/docker/jobs-default:the-version",
+    "jobs": {
+      "web 👮 lint": {
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-default:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "yarn lint",
+        ],
+        "stage": "test",
+        "variables": {
+          "APP_PATH": "web",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "2Gi",
+        },
+      },
+      "web 🔨 app | review ": {
+        "artifacts": {
+          "paths": [
+            "web/__build_info.json",
+            "web/dist",
+          ],
+          "reports": {
+            "junit": undefined,
+          },
+        },
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "webmeteor-build-cache",
+            "paths": [
+              "web/.meteor/local/resolver-result-cache.json",
+              "web/.meteor/local/plugin-cache",
+              "web/.meteor/local/isopacks",
+              "web/.meteor/local/bundler-cache/scanner",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-meteor:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > web/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "echo "add healthcheck package"",
+          "meteor add panter:healthroute --allow-superuser",
+          "meteor add qualia:prod-shell --allow-superuser",
+          "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
+          "cp ./__build_info.json ./dist/bundle/programs/server",
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "ENV_SHORT": "review",
+          "ENV_TYPE": "review",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_review_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-review-mr1234-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-review-mr1234-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
+          "ROOT_URL": "https://pan-test-app-review-mr1234-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🔨 docker | review ": {
+        "image": "path/to/docker/docker-build:the-version",
+        "interruptible": true,
+        "needs": [
+          "web 🔨 app | review ",
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "ensureMeteorDockerfile",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
+          "echo $CL_review_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud auth configure-docker europe-west6-docker.pkg.dev",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
+          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
+          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
+          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
+          "docker push $DOCKER_CACHE_IMAGE",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "DOCKERFILE_ADDITIONS": undefined,
+          "DOCKERFILE_ADDITIONS_END": undefined,
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DIR": ".",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "2Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_INSTALL_SCRIPTS": "",
+        },
+      },
+      "web 🚀 Deploy | review ": {
+        "allow_failure": false,
+        "artifacts": {
+          "paths": [
+            "____envvars.yaml",
+          ],
+        },
+        "environment": {
+          "auto_stop_in": "1 week",
+          "name": "review/some-commit/web",
+          "on_stop": "web 🛑 Stop ⚠️ | review ",
+          "url": "https://pan-test-app-review-mr1234-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [
+          {
+            "artifacts": false,
+            "job": "web 👮 lint",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🔨 app | review ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🔨 docker | review ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🧪 test",
+          },
+          {
+            "artifacts": true,
+            "job": "web 🧾 sbom | review ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🛡 audit",
+          },
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "when": "on_success",
+          },
+        ],
+        "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
+          "echo $CL_review_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
+          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
+          "echo "$ENV_VARS" > ____envvars.yaml",
+          "gcloud run deploy pan-test-app-review-mr1234-web --command="node,main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=review,env-name=review,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "gcloud run deploy pan-test-app-review-mr1234-web-worker --command="/bin/sh -c,BACKGROUND_JOBS_ENABLED=1 node main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=review,env-name=review,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=1 --max-instances=1 --no-cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
+          "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-review-mr1234-web --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234@$version --quiet --delete-tags; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "set +e",
+          "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web --quiet --delete-tags",
+          "set -e",
+          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/web" "https://pan-test-app-review-mr1234-web-unknown-host.example.com" "__sbom.json" vex.json || true",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "deploy review",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "ENV_SHORT": "review",
+          "ENV_TYPE": "review",
+          "ENV_VARS": "ENV_SHORT: 'review'
+APP_DIR: 'web'
+ENV_TYPE: 'review'
+BUILD_INFO_ID: 'some-id'
+BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
+BUILD_INFO_CURRENT_VERSION: '3.2.1'
+HOST: 'pan-test-app-review-mr1234-web-unknown-host.example.com'
+ROOT_URL: 'https://pan-test-app-review-mr1234-web-unknown-host.example.com'
+HOST_CANONICAL: 'pan-test-app-review-mr1234-web-unknown-host.example.com'
+GCLOUD_RUN_canonicalHostSuffix: '$CL_review_web_GCLOUD_RUN_canonicalHostSuffix'
+_ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
+",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_review_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-review-mr1234-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-review-mr1234-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+          "ROOT_URL": "https://pan-test-app-review-mr1234-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🛑 Stop ⚠️ | review ": {
+        "environment": {
+          "action": "stop",
+          "name": "review/some-commit/web",
+          "url": "https://pan-test-app-review-mr1234-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "allow_failure": true,
+            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
+            "when": "on_success",
+          },
+          {
+            "allow_failure": true,
+            "when": "manual",
+          },
+        ],
+        "script": [
+          "set +e",
+          "echo $CL_review_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud run services delete pan-test-app-review-mr1234-web --project=google-project-id --region=europe-west6",
+          "gcloud run services delete pan-test-app-review-mr1234-web-worker --project=google-project-id --region=europe-west6",
+          "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web/mr1234 --quiet --delete-tags",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "set +e",
+          "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/review/web --quiet --delete-tags",
+          "set -e",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/web" "https://pan-test-app-review-mr1234-web-unknown-host.example.com" || true",
+          "set -e",
+        ],
+        "stage": "stop review",
+        "variables": {
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "GIT_STRATEGY": "none",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+        },
+      },
+      "web 🛡 audit": {
+        "allow_failure": true,
+        "image": "path/to/docker/jobs-default:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "cd web",
+          "yarn npm audit --environment production",
+        ],
+        "stage": "test",
+        "variables": {
+          "APP_PATH": "web",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "2Gi",
+        },
+      },
+      "web 🧪 test": {
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-testing-chrome:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "yarn test",
+        ],
+        "stage": "test",
+        "variables": {
+          "APP_PATH": "web",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "2Gi",
+        },
+      },
+      "web 🧾 sbom | review ": {
+        "allow_failure": true,
+        "artifacts": {
+          "paths": [
+            "__sbom.json",
+          ],
+        },
+        "image": "aquasec/trivy:0.38.3",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "trivy fs --quiet --format cyclonedx --output "__sbom.json" web",
+        ],
+        "stage": "build",
+        "variables": {},
+      },
+    },
+    "stages": [
+      "setup",
+      "setup dev",
+      "setup review",
+      "setup stage",
+      "setup prod",
+      "setup local",
+      "test",
+      "test dev",
+      "test review",
+      "test stage",
+      "test prod",
+      "test local",
+      "build",
+      "build dev",
+      "build review",
+      "build stage",
+      "build prod",
+      "build local",
+      "deploy",
+      "deploy dev",
+      "deploy review",
+      "deploy stage",
+      "deploy prod",
+      "deploy local",
+      "verify",
+      "verify dev",
+      "verify review",
+      "verify stage",
+      "verify prod",
+      "verify local",
+      "rollback",
+      "rollback dev",
+      "rollback review",
+      "rollback stage",
+      "rollback prod",
+      "rollback local",
+      "stop",
+      "stop dev",
+      "stop review",
+      "stop stage",
+      "stop prod",
+      "stop local",
+    ],
+    "variables": {
+      "FF_USE_FASTZIP": "true",
+      "GIT_DEPTH": 1,
+    },
+    "workflow": {
+      "rules": [
+        {
+          "if": "$CI_COMMIT_TAG",
+        },
+        {
+          "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
+          "when": "never",
+        },
+        {
+          "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
+        },
+        {
+          "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
+        },
+        {
+          "if": "$CI_MERGE_REQUEST_ID",
+        },
+      ],
+    },
+  },
+  "taggedRelease": {
+    "image": "path/to/docker/jobs-default:the-version",
+    "jobs": {
+      "web 🔨 app | prod ": {
+        "artifacts": {
+          "paths": [
+            "web/__build_info.json",
+            "web/dist",
+          ],
+          "reports": {
+            "junit": undefined,
+          },
+        },
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "webmeteor-build-cache",
+            "paths": [
+              "web/.meteor/local/resolver-result-cache.json",
+              "web/.meteor/local/plugin-cache",
+              "web/.meteor/local/isopacks",
+              "web/.meteor/local/bundler-cache/scanner",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-meteor:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > web/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "echo "add healthcheck package"",
+          "meteor add panter:healthroute --allow-superuser",
+          "meteor add qualia:prod-shell --allow-superuser",
+          "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
+          "cp ./__build_info.json ./dist/bundle/programs/server",
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "ENV_SHORT": "prod",
+          "ENV_TYPE": "prod",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-prod-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-prod-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
+          "ROOT_URL": "https://pan-test-app-prod-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🔨 app | stage ": {
+        "artifacts": {
+          "paths": [
+            "web/__build_info.json",
+            "web/dist",
+          ],
+          "reports": {
+            "junit": undefined,
+          },
+        },
+        "cache": [
+          {
+            "key": "web-yarn",
+            "paths": [
+              "web/.yarn",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "web-node-modules",
+            "paths": [
+              "web/node_modules",
+            ],
+            "policy": "pull-push",
+          },
+          {
+            "key": "webmeteor-build-cache",
+            "paths": [
+              "web/.meteor/local/resolver-result-cache.json",
+              "web/.meteor/local/plugin-cache",
+              "web/.meteor/local/isopacks",
+              "web/.meteor/local/bundler-cache/scanner",
+            ],
+            "policy": "pull-push",
+          },
+        ],
+        "image": "path/to/docker/jobs-meteor:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > web/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "cd web",
+          "echo -e "\\e[0Ksection_start:$(date +%s):yarn prepare[collapsed=true]\\r\\e[0KNode and yarn install"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):node install[collapsed=true]\\r\\e[0KEnsure node version"",
+          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
+          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
+          "echo -e "\\e[0Ksection_end:$(date +%s):node install\\r\\e[0K"",
+          "yarn install --immutable",
+          "echo -e "\\e[0Ksection_end:$(date +%s):yarn prepare\\r\\e[0K"",
+          "echo "add healthcheck package"",
+          "meteor add panter:healthroute --allow-superuser",
+          "meteor add qualia:prod-shell --allow-superuser",
+          "TOOL_NODE_FLAGS="--max_old_space_size=3584 --min_semi_space_size=8 --max_semi_space_size=256 --optimize_for_size" meteor build ./dist --architecture os.linux.x86_64 --allow-superuser --server-only --directory",
+          "cp ./__build_info.json ./dist/bundle/programs/server",
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "ENV_SHORT": "stage",
+          "ENV_TYPE": "stage",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-stage-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-stage-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "2",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "4Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_DISABLE_OPTIMISTIC_CACHING": "1",
+          "ROOT_URL": "https://pan-test-app-stage-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🔨 docker | prod ": {
+        "image": "path/to/docker/docker-build:the-version",
+        "interruptible": true,
+        "needs": [
+          "web 🔨 app | prod ",
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "ensureMeteorDockerfile",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
+          "echo $CL_prod_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud auth configure-docker europe-west6-docker.pkg.dev",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
+          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
+          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
+          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
+          "docker push $DOCKER_CACHE_IMAGE",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "DOCKERFILE_ADDITIONS": undefined,
+          "DOCKERFILE_ADDITIONS_END": undefined,
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DIR": ".",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "2Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_INSTALL_SCRIPTS": "",
+        },
+      },
+      "web 🔨 docker | stage ": {
+        "image": "path/to/docker/docker-build:the-version",
+        "interruptible": true,
+        "needs": [
+          "web 🔨 app | stage ",
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "ensureMeteorDockerfile",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
+          "echo $CL_stage_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud auth configure-docker europe-west6-docker.pkg.dev",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
+          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
+          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
+          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
+          "docker push $DOCKER_CACHE_IMAGE",
+          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "build",
+        "variables": {
+          "APP_DIR": "web",
+          "DOCKERFILE_ADDITIONS": undefined,
+          "DOCKERFILE_ADDITIONS_END": undefined,
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DIR": ".",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "2Gi",
+          "KUBERNETES_MEMORY_REQUEST": "1Gi",
+          "METEOR_INSTALL_SCRIPTS": "",
+        },
+      },
+      "web 🚀 Deploy | prod ": {
+        "allow_failure": true,
+        "artifacts": {
+          "paths": [
+            "____envvars.yaml",
+          ],
+        },
+        "environment": {
+          "auto_stop_in": undefined,
+          "name": "prod/web",
+          "on_stop": "web 🛑 Stop ⚠️ | prod ",
+          "url": "https://pan-test-app-prod-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [
+          {
+            "artifacts": false,
+            "job": "web 🔨 app | prod ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🔨 docker | prod ",
+          },
+          {
+            "artifacts": true,
+            "job": "web 🧾 sbom | prod ",
+          },
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "when": "manual",
+          },
+        ],
+        "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
+          "echo $CL_prod_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
+          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
+          "echo "$ENV_VARS" > ____envvars.yaml",
+          "gcloud run deploy pan-test-app-prod-web --command="node,main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=prod,env-name=prod,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "gcloud run deploy pan-test-app-prod-web-worker --command="/bin/sh -c,BACKGROUND_JOBS_ENABLED=1 node main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=prod,env-name=prod,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=1 --max-instances=1 --no-cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
+          "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-prod-web --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web@$version --quiet --delete-tags; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/web" "https://pan-test-app-prod-web-unknown-host.example.com" "__sbom.json" vex.json || true",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "deploy prod",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "ENV_SHORT": "prod",
+          "ENV_TYPE": "prod",
+          "ENV_VARS": "ENV_SHORT: 'prod'
+APP_DIR: 'web'
+ENV_TYPE: 'prod'
+BUILD_INFO_ID: 'some-id'
+BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
+BUILD_INFO_CURRENT_VERSION: '3.2.1'
+HOST: 'pan-test-app-prod-web-unknown-host.example.com'
+ROOT_URL: 'https://pan-test-app-prod-web-unknown-host.example.com'
+HOST_CANONICAL: 'pan-test-app-prod-web-unknown-host.example.com'
+GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_web_GCLOUD_RUN_canonicalHostSuffix'
+_ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
+",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-prod-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-prod-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+          "ROOT_URL": "https://pan-test-app-prod-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🚀 Deploy | stage ": {
+        "allow_failure": false,
+        "artifacts": {
+          "paths": [
+            "____envvars.yaml",
+          ],
+        },
+        "environment": {
+          "auto_stop_in": undefined,
+          "name": "stage/web",
+          "on_stop": "web 🛑 Stop ⚠️ | stage ",
+          "url": "https://pan-test-app-stage-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [
+          {
+            "artifacts": false,
+            "job": "web 🔨 app | stage ",
+          },
+          {
+            "artifacts": false,
+            "job": "web 🔨 docker | stage ",
+          },
+          {
+            "artifacts": true,
+            "job": "web 🧾 sbom | stage ",
+          },
+        ],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "when": "on_success",
+          },
+        ],
+        "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
+          "echo $CL_stage_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe google-project-id --format="value(projectNumber)")",
+          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
+          "echo "$ENV_VARS" > ____envvars.yaml",
+          "gcloud run deploy pan-test-app-stage-web --command="node,main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=stage,env-name=stage,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "gcloud run deploy pan-test-app-stage-web-worker --command="/bin/sh -c,BACKGROUND_JOBS_ENABLED=1 node main.js" --image=europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web:$DOCKER_IMAGE_TAG --project=google-project-id --region=europe-west6 --labels=customer-name=pan,component-name=web,app-name=test-app,env-type=stage,env-name=stage,build-type=meteor --env-vars-file=____envvars.yaml --min-instances=1 --max-instances=1 --no-cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
+          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
+          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
+          "gcloud run revisions list --project=google-project-id --region=europe-west6 --service=pan-test-app-stage-web --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=google-project-id --region=europe-west6 --quiet $revisionname ; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web@$version --quiet --delete-tags; done",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/web" "https://pan-test-app-stage-web-unknown-host.example.com" "__sbom.json" vex.json || true",
+        ],
+        "services": [
+          {
+            "command": [
+              "--tls=false",
+            ],
+            "name": "docker:24.0.6-dind",
+          },
+        ],
+        "stage": "deploy stage",
+        "variables": {
+          "APP_DIR": "web",
+          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
+          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
+          "BUILD_INFO_ID": "some-id",
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "DOCKER_BUILDKIT": "1",
+          "DOCKER_CACHE_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web",
+          "DOCKER_DRIVER": "overlay2",
+          "DOCKER_HOST": "tcp://0.0.0.0:2375",
+          "DOCKER_IMAGE": "europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web",
+          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
+          "DOCKER_REGISTRY": "europe-west6-docker.pkg.dev",
+          "DOCKER_TLS_CERTDIR": "",
+          "ENV_SHORT": "stage",
+          "ENV_TYPE": "stage",
+          "ENV_VARS": "ENV_SHORT: 'stage'
+APP_DIR: 'web'
+ENV_TYPE: 'stage'
+BUILD_INFO_ID: 'some-id'
+BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
+BUILD_INFO_CURRENT_VERSION: '3.2.1'
+HOST: 'pan-test-app-stage-web-unknown-host.example.com'
+ROOT_URL: 'https://pan-test-app-stage-web-unknown-host.example.com'
+HOST_CANONICAL: 'pan-test-app-stage-web-unknown-host.example.com'
+GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_web_GCLOUD_RUN_canonicalHostSuffix'
+_ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
+",
+          "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_web_GCLOUD_DEPLOY_credentialsKey",
+          "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_web_GCLOUD_RUN_canonicalHostSuffix",
+          "HOST": "pan-test-app-stage-web-unknown-host.example.com",
+          "HOST_CANONICAL": "pan-test-app-stage-web-unknown-host.example.com",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+          "ROOT_URL": "https://pan-test-app-stage-web-unknown-host.example.com",
+          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
+        },
+      },
+      "web 🛑 Stop ⚠️ | prod ": {
+        "environment": {
+          "action": "stop",
+          "name": "prod/web",
+          "url": "https://pan-test-app-prod-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "allow_failure": true,
+            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
+            "when": "on_success",
+          },
+          {
+            "allow_failure": true,
+            "when": "manual",
+          },
+        ],
+        "script": [
+          "set +e",
+          "echo $CL_prod_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud run services delete pan-test-app-prod-web --project=google-project-id --region=europe-west6",
+          "gcloud run services delete pan-test-app-prod-web-worker --project=google-project-id --region=europe-west6",
+          "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/prod/web --quiet --delete-tags",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/web" "https://pan-test-app-prod-web-unknown-host.example.com" || true",
+          "set -e",
+        ],
+        "stage": "stop prod",
+        "variables": {
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "GIT_STRATEGY": "none",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+        },
+      },
+      "web 🛑 Stop ⚠️ | stage ": {
+        "environment": {
+          "action": "stop",
+          "name": "stage/web",
+          "url": "https://pan-test-app-stage-web-unknown-host.example.com",
+        },
+        "image": "path/to/docker/gcloud:the-version",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "rules": [
+          {
+            "allow_failure": true,
+            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
+            "when": "on_success",
+          },
+          {
+            "allow_failure": true,
+            "when": "manual",
+          },
+        ],
+        "script": [
+          "set +e",
+          "echo $CL_stage_web_GCLOUD_DEPLOY_credentialsKey > ./____keyfile.json
+          ",
+          "gcloud auth activate-service-account --key-file="./____keyfile.json"",
+          "gcloud run services delete pan-test-app-stage-web --project=google-project-id --region=europe-west6",
+          "gcloud run services delete pan-test-app-stage-web-worker --project=google-project-id --region=europe-west6",
+          "gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/stage/web --quiet --delete-tags",
+          "gcloud artifacts docker images list europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete europe-west6-docker.pkg.dev/google-project-id/catladder-deploy/pan-test-app/caches/web@$version --quiet --delete-tags; done",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/web" "https://pan-test-app-stage-web-unknown-host.example.com" || true",
+          "set -e",
+        ],
+        "stage": "stop stage",
+        "variables": {
+          "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
+          "GIT_STRATEGY": "none",
+          "KUBERNETES_CPU_LIMIT": "1",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
+        },
+      },
+      "web 🧾 sbom | prod ": {
+        "allow_failure": true,
+        "artifacts": {
+          "paths": [
+            "__sbom.json",
+          ],
+        },
+        "image": "aquasec/trivy:0.38.3",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "trivy fs --quiet --format cyclonedx --output "__sbom.json" web",
+        ],
+        "stage": "build",
+        "variables": {},
+      },
+      "web 🧾 sbom | stage ": {
+        "allow_failure": true,
+        "artifacts": {
+          "paths": [
+            "__sbom.json",
+          ],
+        },
+        "image": "aquasec/trivy:0.38.3",
+        "interruptible": true,
+        "needs": [],
+        "retry": {
+          "max": 2,
+          "when": [
+            "runner_system_failure",
+            "stuck_or_timeout_failure",
+          ],
+        },
+        "script": [
+          "trivy fs --quiet --format cyclonedx --output "__sbom.json" web",
+        ],
+        "stage": "build",
+        "variables": {},
+      },
+    },
+    "stages": [
+      "setup",
+      "setup dev",
+      "setup review",
+      "setup stage",
+      "setup prod",
+      "setup local",
+      "test",
+      "test dev",
+      "test review",
+      "test stage",
+      "test prod",
+      "test local",
+      "build",
+      "build dev",
+      "build review",
+      "build stage",
+      "build prod",
+      "build local",
+      "deploy",
+      "deploy dev",
+      "deploy review",
+      "deploy stage",
+      "deploy prod",
+      "deploy local",
+      "verify",
+      "verify dev",
+      "verify review",
+      "verify stage",
+      "verify prod",
+      "verify local",
+      "rollback",
+      "rollback dev",
+      "rollback review",
+      "rollback stage",
+      "rollback prod",
+      "rollback local",
+      "stop",
+      "stop dev",
+      "stop review",
+      "stop stage",
+      "stop prod",
+      "stop local",
+    ],
+    "variables": {
+      "FF_USE_FASTZIP": "true",
+      "GIT_DEPTH": 1,
+    },
+    "workflow": {
+      "rules": [
+        {
+          "if": "$CI_COMMIT_TAG",
+        },
+        {
+          "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
+          "when": "never",
+        },
+        {
+          "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
+        },
+        {
+          "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
+        },
+        {
+          "if": "$CI_MERGE_REQUEST_ID",
+        },
+      ],
+    },
+  },
+}
+`;