@catladder/pipeline 1.139.4 โ†’ 1.140.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. package/dist/bundles/catladder-gitlab/index.js +3 -3
  2. package/dist/constants.js +1 -1
  3. package/dist/context/getEnvironment.js +9 -5
  4. package/dist/deploy/cloudRun/index.js +5 -2
  5. package/dist/tsconfig.tsbuildinfo +1 -1
  6. package/dist/types/context.d.ts +1 -1
  7. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +36 -12
  8. package/examples/__snapshots__/cloud-run-meteor-with-worker.ts.snap +36 -12
  9. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +36 -12
  10. package/examples/__snapshots__/cloud-run-no-service.ts.snap +1903 -0
  11. package/examples/__snapshots__/cloud-run-non-public.ts.snap +36 -12
  12. package/examples/__snapshots__/cloud-run-post-stop-job.ts.snap +36 -12
  13. package/examples/__snapshots__/cloud-run-service-gen2.ts.snap +36 -12
  14. package/examples/__snapshots__/cloud-run-service-with-volumes.ts.snap +36 -12
  15. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +72 -24
  16. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +72 -24
  17. package/examples/__snapshots__/cloud-run-with-worker.ts.snap +36 -12
  18. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +36 -12
  19. package/examples/__snapshots__/custom-build-job.ts.snap +36 -12
  20. package/examples/__snapshots__/custom-sbom-java.ts.snap +36 -12
  21. package/examples/__snapshots__/local-dot-env.ts.snap +36 -12
  22. package/examples/__snapshots__/native-app.ts.snap +36 -12
  23. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +36 -12
  24. package/examples/__snapshots__/node-build-with-docker-additions.ts.snap +36 -12
  25. package/examples/cloud-run-no-service.ts +32 -0
  26. package/package.json +1 -1
  27. package/src/context/getEnvironment.ts +11 -4
  28. package/src/deploy/cloudRun/index.ts +6 -0
  29. package/src/types/context.ts +1 -1
package/examples/__snapshots__/cloud-run-no-service.ts.snap ADDED
@@ -0,0 +1,1903 @@
1
+ // Jest Snapshot v1, https://goo.gl/fbAQLP
2
+
3
+ exports[`matches snapshot 1`] = `
4
+ {
5
+ "mainBranch": {
6
+ "image": "path/to/docker/jobs-default:the-version",
7
+ "jobs": {
8
+ "api ๐Ÿ‘ฎ lint": {
9
+ "cache": [
10
+ {
11
+ "key": "app-yarn",
12
+ "paths": [
13
+ "app/.yarn",
14
+ ],
15
+ "policy": "pull-push",
16
+ },
17
+ {
18
+ "key": "app-node-modules",
19
+ "paths": [
20
+ "app/node_modules",
21
+ ],
22
+ "policy": "pull-push",
23
+ },
24
+ ],
25
+ "image": "path/to/docker/jobs-default:the-version",
26
+ "interruptible": true,
27
+ "needs": [],
28
+ "retry": {
29
+ "max": 2,
30
+ "when": [
31
+ "runner_system_failure",
32
+ "stuck_or_timeout_failure",
33
+ ],
34
+ },
35
+ "script": [
36
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
37
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
38
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
39
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
40
+ "cd app",
41
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
42
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
43
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
44
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
45
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
46
+ "yarn install --immutable",
47
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
48
+ "yarn lint",
49
+ ],
50
+ "stage": "test",
51
+ "variables": {
52
+ "APP_PATH": "app",
53
+ "KUBERNETES_CPU_REQUEST": "0.5",
54
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
55
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
56
+ },
57
+ },
58
+ "api ๐Ÿ”จ app | dev ": {
59
+ "artifacts": {
60
+ "expire_in": "1 day",
61
+ "paths": [
62
+ "app/__build_info.json",
63
+ "app/dist",
64
+ "app/.next",
65
+ ],
66
+ "reports": {
67
+ "junit": undefined,
68
+ },
69
+ "when": "always",
70
+ },
71
+ "cache": [
72
+ {
73
+ "key": "app-yarn",
74
+ "paths": [
75
+ "app/.yarn",
76
+ ],
77
+ "policy": "pull-push",
78
+ },
79
+ {
80
+ "key": "app-node-modules",
81
+ "paths": [
82
+ "app/node_modules",
83
+ ],
84
+ "policy": "pull-push",
85
+ },
86
+ {
87
+ "key": "api-next-cache",
88
+ "paths": [
89
+ "app/.next/cache/",
90
+ ],
91
+ "policy": "pull-push",
92
+ },
93
+ ],
94
+ "image": "path/to/docker/jobs-default:the-version",
95
+ "interruptible": true,
96
+ "needs": [],
97
+ "retry": {
98
+ "max": 2,
99
+ "when": [
100
+ "runner_system_failure",
101
+ "stuck_or_timeout_failure",
102
+ ],
103
+ },
104
+ "script": [
105
+ "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
106
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
107
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
108
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
109
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
110
+ "cd app",
111
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
112
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
113
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
114
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
115
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
116
+ "yarn install --immutable",
117
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
118
+ "yarn build",
119
+ ],
120
+ "stage": "build",
121
+ "variables": {
122
+ "APP_DIR": "app",
123
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
124
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
125
+ "BUILD_INFO_ID": "some-id",
126
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-dev-api-alarm-clock:run",
127
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
128
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
129
+ "ENV_SHORT": "dev",
130
+ "ENV_TYPE": "dev",
131
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
132
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
133
+ "HOST": "pan-test-app-dev-api-unknown-host.example.com",
134
+ "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
135
+ "HOST_INTERNAL": "pan-test-app-dev-api-unknown-host.example.com",
136
+ "KUBERNETES_CPU_REQUEST": "0.5",
137
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
138
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
139
+ "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
140
+ "ROOT_URL_INTERNAL": "https://pan-test-app-dev-api-unknown-host.example.com",
141
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
142
+ },
143
+ },
144
+ "api ๐Ÿ”จ docker | dev ": {
145
+ "cache": [
146
+ {
147
+ "key": "app-yarn",
148
+ "paths": [
149
+ "app/.yarn",
150
+ ],
151
+ "policy": "pull",
152
+ },
153
+ ],
154
+ "image": "path/to/docker/docker-build:the-version",
155
+ "interruptible": true,
156
+ "needs": [
157
+ "api ๐Ÿ”จ app | dev ",
158
+ ],
159
+ "retry": {
160
+ "max": 2,
161
+ "when": [
162
+ "runner_system_failure",
163
+ "stuck_or_timeout_failure",
164
+ ],
165
+ },
166
+ "script": [
167
+ "ensureNodeDockerfile",
168
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
169
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
170
+ "gcloud auth configure-docker asia-east1-docker.pkg.dev",
171
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
172
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
173
+ "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
174
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
175
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
176
+ "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
177
+ "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
178
+ "docker push $DOCKER_CACHE_IMAGE",
179
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
180
+ ],
181
+ "services": [
182
+ {
183
+ "command": [
184
+ "--tls=false",
185
+ ],
186
+ "name": "docker:24.0.6-dind",
187
+ },
188
+ ],
189
+ "stage": "build",
190
+ "variables": {
191
+ "APP_DIR": "app",
192
+ "DOCKERFILE_ADDITIONS": undefined,
193
+ "DOCKERFILE_ADDITIONS_END": undefined,
194
+ "DOCKER_BUILDKIT": "1",
195
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
196
+ "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
197
+ RUN yarn plugin import workspace-tools
198
+ RUN yarn workspaces focus --production && yarn rebuild",
199
+ "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node app/package.json /app/app/package.json
200
+ COPY --chown=node:node app/yarn.lock /app/app/yarn.lock
201
+ COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
202
+ COPY --chown=node:node .yarn /app/.yarn",
203
+ "DOCKER_DIR": ".",
204
+ "DOCKER_DRIVER": "overlay2",
205
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
206
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api",
207
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
208
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
209
+ "DOCKER_TLS_CERTDIR": "",
210
+ "KUBERNETES_CPU_REQUEST": "0.5",
211
+ "KUBERNETES_MEMORY_LIMIT": "2Gi",
212
+ "KUBERNETES_MEMORY_REQUEST": "1Gi",
213
+ },
214
+ },
215
+ "api ๐Ÿš€ Deploy | dev ": {
216
+ "allow_failure": false,
217
+ "artifacts": {
218
+ "paths": [
219
+ "____envvars.yaml",
220
+ ],
221
+ },
222
+ "environment": {
223
+ "auto_stop_in": "4 weeks",
224
+ "name": "dev/api",
225
+ "on_stop": "api ๐Ÿ›‘ Stop โš ๏ธ | dev ",
226
+ },
227
+ "image": "path/to/docker/gcloud:the-version",
228
+ "interruptible": true,
229
+ "needs": [
230
+ {
231
+ "artifacts": false,
232
+ "job": "api ๐Ÿ‘ฎ lint",
233
+ },
234
+ {
235
+ "artifacts": false,
236
+ "job": "api ๐Ÿ”จ app | dev ",
237
+ },
238
+ {
239
+ "artifacts": false,
240
+ "job": "api ๐Ÿ”จ docker | dev ",
241
+ },
242
+ {
243
+ "artifacts": false,
244
+ "job": "api ๐Ÿงช test",
245
+ },
246
+ {
247
+ "artifacts": true,
248
+ "job": "api ๐Ÿงพ sbom | dev ",
249
+ },
250
+ {
251
+ "artifacts": false,
252
+ "job": "api ๐Ÿ›ก audit",
253
+ },
254
+ ],
255
+ "retry": {
256
+ "max": 2,
257
+ "when": [
258
+ "runner_system_failure",
259
+ "stuck_or_timeout_failure",
260
+ ],
261
+ },
262
+ "rules": [
263
+ {
264
+ "when": "on_success",
265
+ },
266
+ ],
267
+ "script": [
268
+ "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
269
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
270
+ "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
271
+ "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
272
+ "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
273
+ "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
274
+ "echo "$ENV_VARS" > ____envvars.yaml",
275
+ "set +e",
276
+ "gcloud scheduler jobs create http pan-test-app-dev-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-dev-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
277
+ "set -e",
278
+ "gcloud scheduler jobs update http pan-test-app-dev-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-dev-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
279
+ "set +e",
280
+ "gcloud run jobs create pan-test-app-dev-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-job-name=pan-test-app-dev-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
281
+ "set -e",
282
+ "gcloud run jobs update pan-test-app-dev-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-job-name=pan-test-app-dev-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0 ",
283
+ "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
284
+ "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
285
+ "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-dev-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
286
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api@$version --quiet --delete-tags; done",
287
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
288
+ "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
289
+ "echo Uploading SBOM to Dependency Track",
290
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" "__sbom.json" vex.json || true",
291
+ ],
292
+ "services": [
293
+ {
294
+ "command": [
295
+ "--tls=false",
296
+ ],
297
+ "name": "docker:24.0.6-dind",
298
+ },
299
+ ],
300
+ "stage": "deploy dev",
301
+ "variables": {
302
+ "APP_DIR": "app",
303
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
304
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
305
+ "BUILD_INFO_ID": "some-id",
306
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
307
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-dev-api-alarm-clock:run",
308
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
309
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
310
+ "DOCKER_BUILDKIT": "1",
311
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
312
+ "DOCKER_DRIVER": "overlay2",
313
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
314
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api",
315
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
316
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
317
+ "DOCKER_TLS_CERTDIR": "",
318
+ "ENV_SHORT": "dev",
319
+ "ENV_TYPE": "dev",
320
+ "ENV_VARS": "ENV_SHORT: 'dev'
321
+ APP_DIR: 'app'
322
+ ENV_TYPE: 'dev'
323
+ BUILD_INFO_ID: 'some-id'
324
+ BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
325
+ BUILD_INFO_CURRENT_VERSION: '3.2.1'
326
+ HOST: 'pan-test-app-dev-api-unknown-host.example.com'
327
+ ROOT_URL: 'https://pan-test-app-dev-api-unknown-host.example.com'
328
+ HOST_CANONICAL: 'pan-test-app-dev-api-unknown-host.example.com'
329
+ ROOT_URL_INTERNAL: 'https://pan-test-app-dev-api-unknown-host.example.com'
330
+ HOST_INTERNAL: 'pan-test-app-dev-api-unknown-host.example.com'
331
+ CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock: 'https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-dev-api-alarm-clock:run'
332
+ DEPLOY_CLOUD_RUN_PROJECT_ID: 'asdf'
333
+ DEPLOY_CLOUD_RUN_REGION: 'asia-east1'
334
+ GCLOUD_RUN_canonicalHostSuffix: '$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix'
335
+ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
336
+ ",
337
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey",
338
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix",
339
+ "HOST": "pan-test-app-dev-api-unknown-host.example.com",
340
+ "HOST_CANONICAL": "pan-test-app-dev-api-unknown-host.example.com",
341
+ "HOST_INTERNAL": "pan-test-app-dev-api-unknown-host.example.com",
342
+ "KUBERNETES_CPU_REQUEST": "0.5",
343
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
344
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
345
+ "ROOT_URL": "https://pan-test-app-dev-api-unknown-host.example.com",
346
+ "ROOT_URL_INTERNAL": "https://pan-test-app-dev-api-unknown-host.example.com",
347
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
348
+ },
349
+ },
350
+ "api ๐Ÿ›‘ Stop โš ๏ธ | dev ": {
351
+ "environment": {
352
+ "action": "stop",
353
+ "name": "dev/api",
354
+ },
355
+ "image": "path/to/docker/gcloud:the-version",
356
+ "interruptible": true,
357
+ "needs": [],
358
+ "retry": {
359
+ "max": 2,
360
+ "when": [
361
+ "runner_system_failure",
362
+ "stuck_or_timeout_failure",
363
+ ],
364
+ },
365
+ "rules": [
366
+ {
367
+ "allow_failure": true,
368
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
369
+ "when": "on_success",
370
+ },
371
+ {
372
+ "allow_failure": true,
373
+ "when": "manual",
374
+ },
375
+ ],
376
+ "script": [
377
+ "set +e",
378
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
379
+ "gcloud scheduler jobs delete pan-test-app-dev-api-alarm-clock-scheduler --project=asdf --location=asia-east1",
380
+ "gcloud run jobs executions list --project=asdf --region=asia-east1 --job pan-test-app-dev-api-alarm-clock --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=asdf --region=asia-east1",
381
+ "gcloud run jobs delete pan-test-app-dev-api-alarm-clock --project=asdf --region=asia-east1",
382
+ "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api --quiet --delete-tags",
383
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
384
+ "echo Disabling component in Dependency Track",
385
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-dev-api-unknown-host.example.com" || true",
386
+ "set -e",
387
+ ],
388
+ "stage": "stop dev",
389
+ "variables": {
390
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
391
+ "GIT_STRATEGY": "none",
392
+ "KUBERNETES_CPU_REQUEST": "0.5",
393
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
394
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
395
+ },
396
+ },
397
+ "api ๐Ÿ›ก audit": {
398
+ "allow_failure": true,
399
+ "image": "path/to/docker/jobs-default:the-version",
400
+ "interruptible": true,
401
+ "needs": [],
402
+ "retry": {
403
+ "max": 2,
404
+ "when": [
405
+ "runner_system_failure",
406
+ "stuck_or_timeout_failure",
407
+ ],
408
+ },
409
+ "script": [
410
+ "cd app",
411
+ "yarn npm audit --environment production",
412
+ ],
413
+ "stage": "test",
414
+ "variables": {
415
+ "APP_PATH": "app",
416
+ "KUBERNETES_CPU_REQUEST": "0.5",
417
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
418
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
419
+ },
420
+ },
421
+ "api ๐Ÿงช test": {
422
+ "cache": [
423
+ {
424
+ "key": "app-yarn",
425
+ "paths": [
426
+ "app/.yarn",
427
+ ],
428
+ "policy": "pull-push",
429
+ },
430
+ {
431
+ "key": "app-node-modules",
432
+ "paths": [
433
+ "app/node_modules",
434
+ ],
435
+ "policy": "pull-push",
436
+ },
437
+ ],
438
+ "image": "path/to/docker/jobs-testing-chrome:the-version",
439
+ "interruptible": true,
440
+ "needs": [],
441
+ "retry": {
442
+ "max": 2,
443
+ "when": [
444
+ "runner_system_failure",
445
+ "stuck_or_timeout_failure",
446
+ ],
447
+ },
448
+ "script": [
449
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
450
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
451
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
452
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
453
+ "cd app",
454
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
455
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
456
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
457
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
458
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
459
+ "yarn install --immutable",
460
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
461
+ "yarn test",
462
+ ],
463
+ "stage": "test",
464
+ "variables": {
465
+ "APP_PATH": "app",
466
+ "KUBERNETES_CPU_REQUEST": "0.5",
467
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
468
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
469
+ },
470
+ },
471
+ "api ๐Ÿงพ sbom | dev ": {
472
+ "allow_failure": true,
473
+ "artifacts": {
474
+ "paths": [
475
+ "__sbom.json",
476
+ ],
477
+ },
478
+ "image": "aquasec/trivy:0.38.3",
479
+ "interruptible": true,
480
+ "needs": [],
481
+ "retry": {
482
+ "max": 2,
483
+ "when": [
484
+ "runner_system_failure",
485
+ "stuck_or_timeout_failure",
486
+ ],
487
+ },
488
+ "script": [
489
+ "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
490
+ ],
491
+ "stage": "build",
492
+ "variables": {},
493
+ },
494
+ },
495
+ "stages": [
496
+ "setup",
497
+ "setup dev",
498
+ "setup review",
499
+ "setup stage",
500
+ "setup prod",
501
+ "setup local",
502
+ "test",
503
+ "test dev",
504
+ "test review",
505
+ "test stage",
506
+ "test prod",
507
+ "test local",
508
+ "build",
509
+ "build dev",
510
+ "build review",
511
+ "build stage",
512
+ "build prod",
513
+ "build local",
514
+ "deploy",
515
+ "deploy dev",
516
+ "deploy review",
517
+ "deploy stage",
518
+ "deploy prod",
519
+ "deploy local",
520
+ "verify",
521
+ "verify dev",
522
+ "verify review",
523
+ "verify stage",
524
+ "verify prod",
525
+ "verify local",
526
+ "rollback",
527
+ "rollback dev",
528
+ "rollback review",
529
+ "rollback stage",
530
+ "rollback prod",
531
+ "rollback local",
532
+ "stop",
533
+ "stop dev",
534
+ "stop review",
535
+ "stop stage",
536
+ "stop prod",
537
+ "stop local",
538
+ ],
539
+ "variables": {
540
+ "FF_USE_FASTZIP": "true",
541
+ "GIT_DEPTH": 1,
542
+ },
543
+ "workflow": {
544
+ "rules": [
545
+ {
546
+ "if": "$CI_COMMIT_TAG",
547
+ },
548
+ {
549
+ "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
550
+ "when": "never",
551
+ },
552
+ {
553
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
554
+ },
555
+ {
556
+ "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
557
+ },
558
+ {
559
+ "if": "$CI_MERGE_REQUEST_ID",
560
+ },
561
+ ],
562
+ },
563
+ },
564
+ "mr": {
565
+ "image": "path/to/docker/jobs-default:the-version",
566
+ "jobs": {
567
+ "api ๐Ÿ‘ฎ lint": {
568
+ "cache": [
569
+ {
570
+ "key": "app-yarn",
571
+ "paths": [
572
+ "app/.yarn",
573
+ ],
574
+ "policy": "pull-push",
575
+ },
576
+ {
577
+ "key": "app-node-modules",
578
+ "paths": [
579
+ "app/node_modules",
580
+ ],
581
+ "policy": "pull-push",
582
+ },
583
+ ],
584
+ "image": "path/to/docker/jobs-default:the-version",
585
+ "interruptible": true,
586
+ "needs": [],
587
+ "retry": {
588
+ "max": 2,
589
+ "when": [
590
+ "runner_system_failure",
591
+ "stuck_or_timeout_failure",
592
+ ],
593
+ },
594
+ "script": [
595
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
596
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
597
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
598
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
599
+ "cd app",
600
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
601
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
602
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
603
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
604
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
605
+ "yarn install --immutable",
606
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
607
+ "yarn lint",
608
+ ],
609
+ "stage": "test",
610
+ "variables": {
611
+ "APP_PATH": "app",
612
+ "KUBERNETES_CPU_REQUEST": "0.5",
613
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
614
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
615
+ },
616
+ },
617
+ "api ๐Ÿ”จ app | review ": {
618
+ "artifacts": {
619
+ "expire_in": "1 day",
620
+ "paths": [
621
+ "app/__build_info.json",
622
+ "app/dist",
623
+ "app/.next",
624
+ ],
625
+ "reports": {
626
+ "junit": undefined,
627
+ },
628
+ "when": "always",
629
+ },
630
+ "cache": [
631
+ {
632
+ "key": "app-yarn",
633
+ "paths": [
634
+ "app/.yarn",
635
+ ],
636
+ "policy": "pull-push",
637
+ },
638
+ {
639
+ "key": "app-node-modules",
640
+ "paths": [
641
+ "app/node_modules",
642
+ ],
643
+ "policy": "pull-push",
644
+ },
645
+ {
646
+ "key": "api-next-cache",
647
+ "paths": [
648
+ "app/.next/cache/",
649
+ ],
650
+ "policy": "pull-push",
651
+ },
652
+ ],
653
+ "image": "path/to/docker/jobs-default:the-version",
654
+ "interruptible": true,
655
+ "needs": [],
656
+ "retry": {
657
+ "max": 2,
658
+ "when": [
659
+ "runner_system_failure",
660
+ "stuck_or_timeout_failure",
661
+ ],
662
+ },
663
+ "script": [
664
+ "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
665
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
666
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
667
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
668
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
669
+ "cd app",
670
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
671
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
672
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
673
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
674
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
675
+ "yarn install --immutable",
676
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
677
+ "yarn build",
678
+ ],
679
+ "stage": "build",
680
+ "variables": {
681
+ "APP_DIR": "app",
682
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
683
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
684
+ "BUILD_INFO_ID": "some-id",
685
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-review-mr1234-api-alarm-clock:run",
686
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
687
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
688
+ "ENV_SHORT": "review",
689
+ "ENV_TYPE": "review",
690
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
691
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
692
+ "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
693
+ "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
694
+ "HOST_INTERNAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
695
+ "KUBERNETES_CPU_REQUEST": "0.5",
696
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
697
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
698
+ "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
699
+ "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
700
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
701
+ },
702
+ },
703
+ "api ๐Ÿ”จ docker | review ": {
704
+ "cache": [
705
+ {
706
+ "key": "app-yarn",
707
+ "paths": [
708
+ "app/.yarn",
709
+ ],
710
+ "policy": "pull",
711
+ },
712
+ ],
713
+ "image": "path/to/docker/docker-build:the-version",
714
+ "interruptible": true,
715
+ "needs": [
716
+ "api ๐Ÿ”จ app | review ",
717
+ ],
718
+ "retry": {
719
+ "max": 2,
720
+ "when": [
721
+ "runner_system_failure",
722
+ "stuck_or_timeout_failure",
723
+ ],
724
+ },
725
+ "script": [
726
+ "ensureNodeDockerfile",
727
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
728
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
729
+ "gcloud auth configure-docker asia-east1-docker.pkg.dev",
730
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
731
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
732
+ "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
733
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
734
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
735
+ "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
736
+ "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
737
+ "docker push $DOCKER_CACHE_IMAGE",
738
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
739
+ ],
740
+ "services": [
741
+ {
742
+ "command": [
743
+ "--tls=false",
744
+ ],
745
+ "name": "docker:24.0.6-dind",
746
+ },
747
+ ],
748
+ "stage": "build",
749
+ "variables": {
750
+ "APP_DIR": "app",
751
+ "DOCKERFILE_ADDITIONS": undefined,
752
+ "DOCKERFILE_ADDITIONS_END": undefined,
753
+ "DOCKER_BUILDKIT": "1",
754
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
755
+ "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
756
+ RUN yarn plugin import workspace-tools
757
+ RUN yarn workspaces focus --production && yarn rebuild",
758
+ "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node app/package.json /app/app/package.json
759
+ COPY --chown=node:node app/yarn.lock /app/app/yarn.lock
760
+ COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
761
+ COPY --chown=node:node .yarn /app/.yarn",
762
+ "DOCKER_DIR": ".",
763
+ "DOCKER_DRIVER": "overlay2",
764
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
765
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234",
766
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
767
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
768
+ "DOCKER_TLS_CERTDIR": "",
769
+ "KUBERNETES_CPU_REQUEST": "0.5",
770
+ "KUBERNETES_MEMORY_LIMIT": "2Gi",
771
+ "KUBERNETES_MEMORY_REQUEST": "1Gi",
772
+ },
773
+ },
774
+ "api ๐Ÿš€ Deploy | review ": {
775
+ "allow_failure": false,
776
+ "artifacts": {
777
+ "paths": [
778
+ "____envvars.yaml",
779
+ ],
780
+ },
781
+ "environment": {
782
+ "auto_stop_in": "1 week",
783
+ "name": "review/some-commit/api",
784
+ "on_stop": "api ๐Ÿ›‘ Stop โš ๏ธ | review ",
785
+ },
786
+ "image": "path/to/docker/gcloud:the-version",
787
+ "interruptible": true,
788
+ "needs": [
789
+ {
790
+ "artifacts": false,
791
+ "job": "api ๐Ÿ‘ฎ lint",
792
+ },
793
+ {
794
+ "artifacts": false,
795
+ "job": "api ๐Ÿ”จ app | review ",
796
+ },
797
+ {
798
+ "artifacts": false,
799
+ "job": "api ๐Ÿ”จ docker | review ",
800
+ },
801
+ {
802
+ "artifacts": false,
803
+ "job": "api ๐Ÿงช test",
804
+ },
805
+ {
806
+ "artifacts": true,
807
+ "job": "api ๐Ÿงพ sbom | review ",
808
+ },
809
+ {
810
+ "artifacts": false,
811
+ "job": "api ๐Ÿ›ก audit",
812
+ },
813
+ ],
814
+ "retry": {
815
+ "max": 2,
816
+ "when": [
817
+ "runner_system_failure",
818
+ "stuck_or_timeout_failure",
819
+ ],
820
+ },
821
+ "rules": [
822
+ {
823
+ "when": "on_success",
824
+ },
825
+ ],
826
+ "script": [
827
+ "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
828
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
829
+ "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
830
+ "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
831
+ "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
832
+ "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
833
+ "echo "$ENV_VARS" > ____envvars.yaml",
834
+ "set +e",
835
+ "gcloud scheduler jobs create http pan-test-app-review-mr1234-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-review-mr1234-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
836
+ "set -e",
837
+ "gcloud scheduler jobs update http pan-test-app-review-mr1234-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-review-mr1234-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
838
+ "set +e",
839
+ "gcloud run jobs create pan-test-app-review-mr1234-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-job-name=pan-test-app-review-mr1234-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
840
+ "set -e",
841
+ "gcloud run jobs update pan-test-app-review-mr1234-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-job-name=pan-test-app-review-mr1234-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0 ",
842
+ "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
843
+ "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
844
+ "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-review-mr1234-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
845
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234@$version --quiet --delete-tags; done",
846
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
847
+ "set +e",
848
+ "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
849
+ "set -e",
850
+ "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
851
+ "echo Uploading SBOM to Dependency Track",
852
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" "__sbom.json" vex.json || true",
853
+ ],
854
+ "services": [
855
+ {
856
+ "command": [
857
+ "--tls=false",
858
+ ],
859
+ "name": "docker:24.0.6-dind",
860
+ },
861
+ ],
862
+ "stage": "deploy review",
863
+ "variables": {
864
+ "APP_DIR": "app",
865
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
866
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
867
+ "BUILD_INFO_ID": "some-id",
868
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
869
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-review-mr1234-api-alarm-clock:run",
870
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
871
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
872
+ "DOCKER_BUILDKIT": "1",
873
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
874
+ "DOCKER_DRIVER": "overlay2",
875
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
876
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234",
877
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
878
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
879
+ "DOCKER_TLS_CERTDIR": "",
880
+ "ENV_SHORT": "review",
881
+ "ENV_TYPE": "review",
882
+ "ENV_VARS": "ENV_SHORT: 'review'
883
+ APP_DIR: 'app'
884
+ ENV_TYPE: 'review'
885
+ BUILD_INFO_ID: 'some-id'
886
+ BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
887
+ BUILD_INFO_CURRENT_VERSION: '3.2.1'
888
+ HOST: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
889
+ ROOT_URL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
890
+ HOST_CANONICAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
891
+ ROOT_URL_INTERNAL: 'https://pan-test-app-review-mr1234-api-unknown-host.example.com'
892
+ HOST_INTERNAL: 'pan-test-app-review-mr1234-api-unknown-host.example.com'
893
+ CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock: 'https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-review-mr1234-api-alarm-clock:run'
894
+ DEPLOY_CLOUD_RUN_PROJECT_ID: 'asdf'
895
+ DEPLOY_CLOUD_RUN_REGION: 'asia-east1'
896
+ GCLOUD_RUN_canonicalHostSuffix: '$CL_review_api_GCLOUD_RUN_canonicalHostSuffix'
897
+ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
898
+ ",
899
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_review_api_GCLOUD_DEPLOY_credentialsKey",
900
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix",
901
+ "HOST": "pan-test-app-review-mr1234-api-unknown-host.example.com",
902
+ "HOST_CANONICAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
903
+ "HOST_INTERNAL": "pan-test-app-review-mr1234-api-unknown-host.example.com",
904
+ "KUBERNETES_CPU_REQUEST": "0.5",
905
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
906
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
907
+ "ROOT_URL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
908
+ "ROOT_URL_INTERNAL": "https://pan-test-app-review-mr1234-api-unknown-host.example.com",
909
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
910
+ },
911
+ },
912
+ "api ๐Ÿ›‘ Stop โš ๏ธ | review ": {
913
+ "environment": {
914
+ "action": "stop",
915
+ "name": "review/some-commit/api",
916
+ },
917
+ "image": "path/to/docker/gcloud:the-version",
918
+ "interruptible": true,
919
+ "needs": [],
920
+ "retry": {
921
+ "max": 2,
922
+ "when": [
923
+ "runner_system_failure",
924
+ "stuck_or_timeout_failure",
925
+ ],
926
+ },
927
+ "rules": [
928
+ {
929
+ "allow_failure": true,
930
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
931
+ "when": "on_success",
932
+ },
933
+ {
934
+ "allow_failure": true,
935
+ "when": "manual",
936
+ },
937
+ ],
938
+ "script": [
939
+ "set +e",
940
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
941
+ "gcloud scheduler jobs delete pan-test-app-review-mr1234-api-alarm-clock-scheduler --project=asdf --location=asia-east1",
942
+ "gcloud run jobs executions list --project=asdf --region=asia-east1 --job pan-test-app-review-mr1234-api-alarm-clock --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=asdf --region=asia-east1",
943
+ "gcloud run jobs delete pan-test-app-review-mr1234-api-alarm-clock --project=asdf --region=asia-east1",
944
+ "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/mr1234 --quiet --delete-tags",
945
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
946
+ "set +e",
947
+ "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
948
+ "set -e",
949
+ "echo Disabling component in Dependency Track",
950
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-review-mr1234-api-unknown-host.example.com" || true",
951
+ "set -e",
952
+ ],
953
+ "stage": "stop review",
954
+ "variables": {
955
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
956
+ "GIT_STRATEGY": "none",
957
+ "KUBERNETES_CPU_REQUEST": "0.5",
958
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
959
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
960
+ },
961
+ },
962
+ "api ๐Ÿ›ก audit": {
963
+ "allow_failure": true,
964
+ "image": "path/to/docker/jobs-default:the-version",
965
+ "interruptible": true,
966
+ "needs": [],
967
+ "retry": {
968
+ "max": 2,
969
+ "when": [
970
+ "runner_system_failure",
971
+ "stuck_or_timeout_failure",
972
+ ],
973
+ },
974
+ "script": [
975
+ "cd app",
976
+ "yarn npm audit --environment production",
977
+ ],
978
+ "stage": "test",
979
+ "variables": {
980
+ "APP_PATH": "app",
981
+ "KUBERNETES_CPU_REQUEST": "0.5",
982
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
983
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
984
+ },
985
+ },
986
+ "api ๐Ÿงช test": {
987
+ "cache": [
988
+ {
989
+ "key": "app-yarn",
990
+ "paths": [
991
+ "app/.yarn",
992
+ ],
993
+ "policy": "pull-push",
994
+ },
995
+ {
996
+ "key": "app-node-modules",
997
+ "paths": [
998
+ "app/node_modules",
999
+ ],
1000
+ "policy": "pull-push",
1001
+ },
1002
+ ],
1003
+ "image": "path/to/docker/jobs-testing-chrome:the-version",
1004
+ "interruptible": true,
1005
+ "needs": [],
1006
+ "retry": {
1007
+ "max": 2,
1008
+ "when": [
1009
+ "runner_system_failure",
1010
+ "stuck_or_timeout_failure",
1011
+ ],
1012
+ },
1013
+ "script": [
1014
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1015
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1016
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1017
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1018
+ "cd app",
1019
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1020
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1021
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1022
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1023
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1024
+ "yarn install --immutable",
1025
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1026
+ "yarn test",
1027
+ ],
1028
+ "stage": "test",
1029
+ "variables": {
1030
+ "APP_PATH": "app",
1031
+ "KUBERNETES_CPU_REQUEST": "0.5",
1032
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
1033
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
1034
+ },
1035
+ },
1036
+ "api ๐Ÿงพ sbom | review ": {
1037
+ "allow_failure": true,
1038
+ "artifacts": {
1039
+ "paths": [
1040
+ "__sbom.json",
1041
+ ],
1042
+ },
1043
+ "image": "aquasec/trivy:0.38.3",
1044
+ "interruptible": true,
1045
+ "needs": [],
1046
+ "retry": {
1047
+ "max": 2,
1048
+ "when": [
1049
+ "runner_system_failure",
1050
+ "stuck_or_timeout_failure",
1051
+ ],
1052
+ },
1053
+ "script": [
1054
+ "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
1055
+ ],
1056
+ "stage": "build",
1057
+ "variables": {},
1058
+ },
1059
+ },
1060
+ "stages": [
1061
+ "setup",
1062
+ "setup dev",
1063
+ "setup review",
1064
+ "setup stage",
1065
+ "setup prod",
1066
+ "setup local",
1067
+ "test",
1068
+ "test dev",
1069
+ "test review",
1070
+ "test stage",
1071
+ "test prod",
1072
+ "test local",
1073
+ "build",
1074
+ "build dev",
1075
+ "build review",
1076
+ "build stage",
1077
+ "build prod",
1078
+ "build local",
1079
+ "deploy",
1080
+ "deploy dev",
1081
+ "deploy review",
1082
+ "deploy stage",
1083
+ "deploy prod",
1084
+ "deploy local",
1085
+ "verify",
1086
+ "verify dev",
1087
+ "verify review",
1088
+ "verify stage",
1089
+ "verify prod",
1090
+ "verify local",
1091
+ "rollback",
1092
+ "rollback dev",
1093
+ "rollback review",
1094
+ "rollback stage",
1095
+ "rollback prod",
1096
+ "rollback local",
1097
+ "stop",
1098
+ "stop dev",
1099
+ "stop review",
1100
+ "stop stage",
1101
+ "stop prod",
1102
+ "stop local",
1103
+ ],
1104
+ "variables": {
1105
+ "FF_USE_FASTZIP": "true",
1106
+ "GIT_DEPTH": 1,
1107
+ },
1108
+ "workflow": {
1109
+ "rules": [
1110
+ {
1111
+ "if": "$CI_COMMIT_TAG",
1112
+ },
1113
+ {
1114
+ "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1115
+ "when": "never",
1116
+ },
1117
+ {
1118
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1119
+ },
1120
+ {
1121
+ "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1122
+ },
1123
+ {
1124
+ "if": "$CI_MERGE_REQUEST_ID",
1125
+ },
1126
+ ],
1127
+ },
1128
+ },
1129
+ "taggedRelease": {
1130
+ "image": "path/to/docker/jobs-default:the-version",
1131
+ "jobs": {
1132
+ "api ๐Ÿ”จ app | prod ": {
1133
+ "artifacts": {
1134
+ "expire_in": "1 day",
1135
+ "paths": [
1136
+ "app/__build_info.json",
1137
+ "app/dist",
1138
+ "app/.next",
1139
+ ],
1140
+ "reports": {
1141
+ "junit": undefined,
1142
+ },
1143
+ "when": "always",
1144
+ },
1145
+ "cache": [
1146
+ {
1147
+ "key": "app-yarn",
1148
+ "paths": [
1149
+ "app/.yarn",
1150
+ ],
1151
+ "policy": "pull-push",
1152
+ },
1153
+ {
1154
+ "key": "app-node-modules",
1155
+ "paths": [
1156
+ "app/node_modules",
1157
+ ],
1158
+ "policy": "pull-push",
1159
+ },
1160
+ {
1161
+ "key": "api-next-cache",
1162
+ "paths": [
1163
+ "app/.next/cache/",
1164
+ ],
1165
+ "policy": "pull-push",
1166
+ },
1167
+ ],
1168
+ "image": "path/to/docker/jobs-default:the-version",
1169
+ "interruptible": true,
1170
+ "needs": [],
1171
+ "retry": {
1172
+ "max": 2,
1173
+ "when": [
1174
+ "runner_system_failure",
1175
+ "stuck_or_timeout_failure",
1176
+ ],
1177
+ },
1178
+ "script": [
1179
+ "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
1180
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1181
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1182
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1183
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1184
+ "cd app",
1185
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1186
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1187
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1188
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1189
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1190
+ "yarn install --immutable",
1191
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1192
+ "yarn build",
1193
+ ],
1194
+ "stage": "build",
1195
+ "variables": {
1196
+ "APP_DIR": "app",
1197
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1198
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1199
+ "BUILD_INFO_ID": "some-id",
1200
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-prod-api-alarm-clock:run",
1201
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
1202
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
1203
+ "ENV_SHORT": "prod",
1204
+ "ENV_TYPE": "prod",
1205
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
1206
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
1207
+ "HOST": "pan-test-app-prod-api-unknown-host.example.com",
1208
+ "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
1209
+ "HOST_INTERNAL": "pan-test-app-prod-api-unknown-host.example.com",
1210
+ "KUBERNETES_CPU_REQUEST": "0.5",
1211
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
1212
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
1213
+ "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
1214
+ "ROOT_URL_INTERNAL": "https://pan-test-app-prod-api-unknown-host.example.com",
1215
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1216
+ },
1217
+ },
1218
+ "api ๐Ÿ”จ app | stage ": {
1219
+ "artifacts": {
1220
+ "expire_in": "1 day",
1221
+ "paths": [
1222
+ "app/__build_info.json",
1223
+ "app/dist",
1224
+ "app/.next",
1225
+ ],
1226
+ "reports": {
1227
+ "junit": undefined,
1228
+ },
1229
+ "when": "always",
1230
+ },
1231
+ "cache": [
1232
+ {
1233
+ "key": "app-yarn",
1234
+ "paths": [
1235
+ "app/.yarn",
1236
+ ],
1237
+ "policy": "pull-push",
1238
+ },
1239
+ {
1240
+ "key": "app-node-modules",
1241
+ "paths": [
1242
+ "app/node_modules",
1243
+ ],
1244
+ "policy": "pull-push",
1245
+ },
1246
+ {
1247
+ "key": "api-next-cache",
1248
+ "paths": [
1249
+ "app/.next/cache/",
1250
+ ],
1251
+ "policy": "pull-push",
1252
+ },
1253
+ ],
1254
+ "image": "path/to/docker/jobs-default:the-version",
1255
+ "interruptible": true,
1256
+ "needs": [],
1257
+ "retry": {
1258
+ "max": 2,
1259
+ "when": [
1260
+ "runner_system_failure",
1261
+ "stuck_or_timeout_failure",
1262
+ ],
1263
+ },
1264
+ "script": [
1265
+ "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > app/__build_info.json",
1266
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1267
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1268
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1269
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1270
+ "cd app",
1271
+ "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
1272
+ "if [ -f ~/.nvm/nvm.sh ]; then source ~/.nvm/nvm.sh; fi",
1273
+ "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
1274
+ "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
1275
+ "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
1276
+ "yarn install --immutable",
1277
+ "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
1278
+ "yarn build",
1279
+ ],
1280
+ "stage": "build",
1281
+ "variables": {
1282
+ "APP_DIR": "app",
1283
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1284
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1285
+ "BUILD_INFO_ID": "some-id",
1286
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-stage-api-alarm-clock:run",
1287
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
1288
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
1289
+ "ENV_SHORT": "stage",
1290
+ "ENV_TYPE": "stage",
1291
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
1292
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
1293
+ "HOST": "pan-test-app-stage-api-unknown-host.example.com",
1294
+ "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
1295
+ "HOST_INTERNAL": "pan-test-app-stage-api-unknown-host.example.com",
1296
+ "KUBERNETES_CPU_REQUEST": "0.5",
1297
+ "KUBERNETES_MEMORY_LIMIT": "4Gi",
1298
+ "KUBERNETES_MEMORY_REQUEST": "2Gi",
1299
+ "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
1300
+ "ROOT_URL_INTERNAL": "https://pan-test-app-stage-api-unknown-host.example.com",
1301
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1302
+ },
1303
+ },
1304
+ "api ๐Ÿ”จ docker | prod ": {
1305
+ "cache": [
1306
+ {
1307
+ "key": "app-yarn",
1308
+ "paths": [
1309
+ "app/.yarn",
1310
+ ],
1311
+ "policy": "pull",
1312
+ },
1313
+ ],
1314
+ "image": "path/to/docker/docker-build:the-version",
1315
+ "interruptible": true,
1316
+ "needs": [
1317
+ "api ๐Ÿ”จ app | prod ",
1318
+ ],
1319
+ "retry": {
1320
+ "max": 2,
1321
+ "when": [
1322
+ "runner_system_failure",
1323
+ "stuck_or_timeout_failure",
1324
+ ],
1325
+ },
1326
+ "script": [
1327
+ "ensureNodeDockerfile",
1328
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
1329
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
1330
+ "gcloud auth configure-docker asia-east1-docker.pkg.dev",
1331
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
1332
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
1333
+ "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1334
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
1335
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
1336
+ "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1337
+ "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1338
+ "docker push $DOCKER_CACHE_IMAGE",
1339
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
1340
+ ],
1341
+ "services": [
1342
+ {
1343
+ "command": [
1344
+ "--tls=false",
1345
+ ],
1346
+ "name": "docker:24.0.6-dind",
1347
+ },
1348
+ ],
1349
+ "stage": "build",
1350
+ "variables": {
1351
+ "APP_DIR": "app",
1352
+ "DOCKERFILE_ADDITIONS": undefined,
1353
+ "DOCKERFILE_ADDITIONS_END": undefined,
1354
+ "DOCKER_BUILDKIT": "1",
1355
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
1356
+ "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1357
+ RUN yarn plugin import workspace-tools
1358
+ RUN yarn workspaces focus --production && yarn rebuild",
1359
+ "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node app/package.json /app/app/package.json
1360
+ COPY --chown=node:node app/yarn.lock /app/app/yarn.lock
1361
+ COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1362
+ COPY --chown=node:node .yarn /app/.yarn",
1363
+ "DOCKER_DIR": ".",
1364
+ "DOCKER_DRIVER": "overlay2",
1365
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
1366
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api",
1367
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1368
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
1369
+ "DOCKER_TLS_CERTDIR": "",
1370
+ "KUBERNETES_CPU_REQUEST": "0.5",
1371
+ "KUBERNETES_MEMORY_LIMIT": "2Gi",
1372
+ "KUBERNETES_MEMORY_REQUEST": "1Gi",
1373
+ },
1374
+ },
1375
+ "api ๐Ÿ”จ docker | stage ": {
1376
+ "cache": [
1377
+ {
1378
+ "key": "app-yarn",
1379
+ "paths": [
1380
+ "app/.yarn",
1381
+ ],
1382
+ "policy": "pull",
1383
+ },
1384
+ ],
1385
+ "image": "path/to/docker/docker-build:the-version",
1386
+ "interruptible": true,
1387
+ "needs": [
1388
+ "api ๐Ÿ”จ app | stage ",
1389
+ ],
1390
+ "retry": {
1391
+ "max": 2,
1392
+ "when": [
1393
+ "runner_system_failure",
1394
+ "stuck_or_timeout_failure",
1395
+ ],
1396
+ },
1397
+ "script": [
1398
+ "ensureNodeDockerfile",
1399
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
1400
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
1401
+ "gcloud auth configure-docker asia-east1-docker.pkg.dev",
1402
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
1403
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
1404
+ "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1",
1405
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
1406
+ "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
1407
+ "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
1408
+ "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
1409
+ "docker push $DOCKER_CACHE_IMAGE",
1410
+ "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
1411
+ ],
1412
+ "services": [
1413
+ {
1414
+ "command": [
1415
+ "--tls=false",
1416
+ ],
1417
+ "name": "docker:24.0.6-dind",
1418
+ },
1419
+ ],
1420
+ "stage": "build",
1421
+ "variables": {
1422
+ "APP_DIR": "app",
1423
+ "DOCKERFILE_ADDITIONS": undefined,
1424
+ "DOCKERFILE_ADDITIONS_END": undefined,
1425
+ "DOCKER_BUILDKIT": "1",
1426
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
1427
+ "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
1428
+ RUN yarn plugin import workspace-tools
1429
+ RUN yarn workspaces focus --production && yarn rebuild",
1430
+ "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node app/package.json /app/app/package.json
1431
+ COPY --chown=node:node app/yarn.lock /app/app/yarn.lock
1432
+ COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
1433
+ COPY --chown=node:node .yarn /app/.yarn",
1434
+ "DOCKER_DIR": ".",
1435
+ "DOCKER_DRIVER": "overlay2",
1436
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
1437
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api",
1438
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1439
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
1440
+ "DOCKER_TLS_CERTDIR": "",
1441
+ "KUBERNETES_CPU_REQUEST": "0.5",
1442
+ "KUBERNETES_MEMORY_LIMIT": "2Gi",
1443
+ "KUBERNETES_MEMORY_REQUEST": "1Gi",
1444
+ },
1445
+ },
1446
+ "api ๐Ÿš€ Deploy | prod ": {
1447
+ "allow_failure": true,
1448
+ "artifacts": {
1449
+ "paths": [
1450
+ "____envvars.yaml",
1451
+ ],
1452
+ },
1453
+ "environment": {
1454
+ "auto_stop_in": undefined,
1455
+ "name": "prod/api",
1456
+ "on_stop": "api ๐Ÿ›‘ Stop โš ๏ธ | prod ",
1457
+ },
1458
+ "image": "path/to/docker/gcloud:the-version",
1459
+ "interruptible": true,
1460
+ "needs": [
1461
+ {
1462
+ "artifacts": false,
1463
+ "job": "api ๐Ÿ”จ app | prod ",
1464
+ },
1465
+ {
1466
+ "artifacts": false,
1467
+ "job": "api ๐Ÿ”จ docker | prod ",
1468
+ },
1469
+ {
1470
+ "artifacts": true,
1471
+ "job": "api ๐Ÿงพ sbom | prod ",
1472
+ },
1473
+ ],
1474
+ "retry": {
1475
+ "max": 2,
1476
+ "when": [
1477
+ "runner_system_failure",
1478
+ "stuck_or_timeout_failure",
1479
+ ],
1480
+ },
1481
+ "rules": [
1482
+ {
1483
+ "when": "manual",
1484
+ },
1485
+ ],
1486
+ "script": [
1487
+ "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1488
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
1489
+ "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
1490
+ "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1491
+ "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1492
+ "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1493
+ "echo "$ENV_VARS" > ____envvars.yaml",
1494
+ "set +e",
1495
+ "gcloud scheduler jobs create http pan-test-app-prod-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-prod-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1496
+ "set -e",
1497
+ "gcloud scheduler jobs update http pan-test-app-prod-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-prod-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1498
+ "set +e",
1499
+ "gcloud run jobs create pan-test-app-prod-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-job-name=pan-test-app-prod-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
1500
+ "set -e",
1501
+ "gcloud run jobs update pan-test-app-prod-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-job-name=pan-test-app-prod-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0 ",
1502
+ "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1503
+ "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
1504
+ "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-prod-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
1505
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api@$version --quiet --delete-tags; done",
1506
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1507
+ "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
1508
+ "echo Uploading SBOM to Dependency Track",
1509
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" "__sbom.json" vex.json || true",
1510
+ ],
1511
+ "services": [
1512
+ {
1513
+ "command": [
1514
+ "--tls=false",
1515
+ ],
1516
+ "name": "docker:24.0.6-dind",
1517
+ },
1518
+ ],
1519
+ "stage": "deploy prod",
1520
+ "variables": {
1521
+ "APP_DIR": "app",
1522
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1523
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1524
+ "BUILD_INFO_ID": "some-id",
1525
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1526
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-prod-api-alarm-clock:run",
1527
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
1528
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
1529
+ "DOCKER_BUILDKIT": "1",
1530
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
1531
+ "DOCKER_DRIVER": "overlay2",
1532
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
1533
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api",
1534
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1535
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
1536
+ "DOCKER_TLS_CERTDIR": "",
1537
+ "ENV_SHORT": "prod",
1538
+ "ENV_TYPE": "prod",
1539
+ "ENV_VARS": "ENV_SHORT: 'prod'
1540
+ APP_DIR: 'app'
1541
+ ENV_TYPE: 'prod'
1542
+ BUILD_INFO_ID: 'some-id'
1543
+ BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1544
+ BUILD_INFO_CURRENT_VERSION: '3.2.1'
1545
+ HOST: 'pan-test-app-prod-api-unknown-host.example.com'
1546
+ ROOT_URL: 'https://pan-test-app-prod-api-unknown-host.example.com'
1547
+ HOST_CANONICAL: 'pan-test-app-prod-api-unknown-host.example.com'
1548
+ ROOT_URL_INTERNAL: 'https://pan-test-app-prod-api-unknown-host.example.com'
1549
+ HOST_INTERNAL: 'pan-test-app-prod-api-unknown-host.example.com'
1550
+ CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock: 'https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-prod-api-alarm-clock:run'
1551
+ DEPLOY_CLOUD_RUN_PROJECT_ID: 'asdf'
1552
+ DEPLOY_CLOUD_RUN_REGION: 'asia-east1'
1553
+ GCLOUD_RUN_canonicalHostSuffix: '$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix'
1554
+ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
1555
+ ",
1556
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey",
1557
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix",
1558
+ "HOST": "pan-test-app-prod-api-unknown-host.example.com",
1559
+ "HOST_CANONICAL": "pan-test-app-prod-api-unknown-host.example.com",
1560
+ "HOST_INTERNAL": "pan-test-app-prod-api-unknown-host.example.com",
1561
+ "KUBERNETES_CPU_REQUEST": "0.5",
1562
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
1563
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
1564
+ "ROOT_URL": "https://pan-test-app-prod-api-unknown-host.example.com",
1565
+ "ROOT_URL_INTERNAL": "https://pan-test-app-prod-api-unknown-host.example.com",
1566
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1567
+ },
1568
+ },
1569
+ "api ๐Ÿš€ Deploy | stage ": {
1570
+ "allow_failure": false,
1571
+ "artifacts": {
1572
+ "paths": [
1573
+ "____envvars.yaml",
1574
+ ],
1575
+ },
1576
+ "environment": {
1577
+ "auto_stop_in": undefined,
1578
+ "name": "stage/api",
1579
+ "on_stop": "api ๐Ÿ›‘ Stop โš ๏ธ | stage ",
1580
+ },
1581
+ "image": "path/to/docker/gcloud:the-version",
1582
+ "interruptible": true,
1583
+ "needs": [
1584
+ {
1585
+ "artifacts": false,
1586
+ "job": "api ๐Ÿ”จ app | stage ",
1587
+ },
1588
+ {
1589
+ "artifacts": false,
1590
+ "job": "api ๐Ÿ”จ docker | stage ",
1591
+ },
1592
+ {
1593
+ "artifacts": true,
1594
+ "job": "api ๐Ÿงพ sbom | stage ",
1595
+ },
1596
+ ],
1597
+ "retry": {
1598
+ "max": 2,
1599
+ "when": [
1600
+ "runner_system_failure",
1601
+ "stuck_or_timeout_failure",
1602
+ ],
1603
+ },
1604
+ "rules": [
1605
+ {
1606
+ "when": "on_success",
1607
+ },
1608
+ ],
1609
+ "script": [
1610
+ "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
1611
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
1612
+ "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
1613
+ "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
1614
+ "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
1615
+ "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
1616
+ "echo "$ENV_VARS" > ____envvars.yaml",
1617
+ "set +e",
1618
+ "gcloud scheduler jobs create http pan-test-app-stage-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-stage-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1619
+ "set -e",
1620
+ "gcloud scheduler jobs update http pan-test-app-stage-api-alarm-clock-scheduler --project=asdf --location=asia-east1 --schedule="0 7 0 0 1-5" --max-retry-attempts=0 --uri="https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-stage-api-alarm-clock:run" --http-method=POST --oauth-service-account-email=$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com",
1621
+ "set +e",
1622
+ "gcloud run jobs create pan-test-app-stage-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-job-name=pan-test-app-stage-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0",
1623
+ "set -e",
1624
+ "gcloud run jobs update pan-test-app-stage-api-alarm-clock --command="./wake-up-call" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-job-name=pan-test-app-stage-api-alarm-clock --memory=512Mi --task-timeout=10m --parallelism=1 --env-vars-file=____envvars.yaml --max-retries=0 ",
1625
+ "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
1626
+ "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
1627
+ "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-stage-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
1628
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api@$version --quiet --delete-tags; done",
1629
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1630
+ "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
1631
+ "echo Uploading SBOM to Dependency Track",
1632
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" "__sbom.json" vex.json || true",
1633
+ ],
1634
+ "services": [
1635
+ {
1636
+ "command": [
1637
+ "--tls=false",
1638
+ ],
1639
+ "name": "docker:24.0.6-dind",
1640
+ },
1641
+ ],
1642
+ "stage": "deploy stage",
1643
+ "variables": {
1644
+ "APP_DIR": "app",
1645
+ "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
1646
+ "BUILD_INFO_CURRENT_VERSION": "3.2.1",
1647
+ "BUILD_INFO_ID": "some-id",
1648
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1649
+ "CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock": "https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-stage-api-alarm-clock:run",
1650
+ "DEPLOY_CLOUD_RUN_PROJECT_ID": "asdf",
1651
+ "DEPLOY_CLOUD_RUN_REGION": "asia-east1",
1652
+ "DOCKER_BUILDKIT": "1",
1653
+ "DOCKER_CACHE_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api",
1654
+ "DOCKER_DRIVER": "overlay2",
1655
+ "DOCKER_HOST": "tcp://0.0.0.0:2375",
1656
+ "DOCKER_IMAGE": "asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api",
1657
+ "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
1658
+ "DOCKER_REGISTRY": "asia-east1-docker.pkg.dev",
1659
+ "DOCKER_TLS_CERTDIR": "",
1660
+ "ENV_SHORT": "stage",
1661
+ "ENV_TYPE": "stage",
1662
+ "ENV_VARS": "ENV_SHORT: 'stage'
1663
+ APP_DIR: 'app'
1664
+ ENV_TYPE: 'stage'
1665
+ BUILD_INFO_ID: 'some-id'
1666
+ BUILD_INFO_BUILD_TIME: '01-01-2023 12:13:14'
1667
+ BUILD_INFO_CURRENT_VERSION: '3.2.1'
1668
+ HOST: 'pan-test-app-stage-api-unknown-host.example.com'
1669
+ ROOT_URL: 'https://pan-test-app-stage-api-unknown-host.example.com'
1670
+ HOST_CANONICAL: 'pan-test-app-stage-api-unknown-host.example.com'
1671
+ ROOT_URL_INTERNAL: 'https://pan-test-app-stage-api-unknown-host.example.com'
1672
+ HOST_INTERNAL: 'pan-test-app-stage-api-unknown-host.example.com'
1673
+ CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock: 'https://asia-east1-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/asdf/jobs/pan-test-app-stage-api-alarm-clock:run'
1674
+ DEPLOY_CLOUD_RUN_PROJECT_ID: 'asdf'
1675
+ DEPLOY_CLOUD_RUN_REGION: 'asia-east1'
1676
+ GCLOUD_RUN_canonicalHostSuffix: '$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix'
1677
+ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]'
1678
+ ",
1679
+ "GCLOUD_DEPLOY_credentialsKey": "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey",
1680
+ "GCLOUD_RUN_canonicalHostSuffix": "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix",
1681
+ "HOST": "pan-test-app-stage-api-unknown-host.example.com",
1682
+ "HOST_CANONICAL": "pan-test-app-stage-api-unknown-host.example.com",
1683
+ "HOST_INTERNAL": "pan-test-app-stage-api-unknown-host.example.com",
1684
+ "KUBERNETES_CPU_REQUEST": "0.5",
1685
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
1686
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
1687
+ "ROOT_URL": "https://pan-test-app-stage-api-unknown-host.example.com",
1688
+ "ROOT_URL_INTERNAL": "https://pan-test-app-stage-api-unknown-host.example.com",
1689
+ "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL","HOST_INTERNAL","CLOUD_RUN_JOB_TRIGGER_URL_alarm_clock","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]",
1690
+ },
1691
+ },
1692
+ "api ๐Ÿ›‘ Stop โš ๏ธ | prod ": {
1693
+ "environment": {
1694
+ "action": "stop",
1695
+ "name": "prod/api",
1696
+ },
1697
+ "image": "path/to/docker/gcloud:the-version",
1698
+ "interruptible": true,
1699
+ "needs": [],
1700
+ "retry": {
1701
+ "max": 2,
1702
+ "when": [
1703
+ "runner_system_failure",
1704
+ "stuck_or_timeout_failure",
1705
+ ],
1706
+ },
1707
+ "rules": [
1708
+ {
1709
+ "allow_failure": true,
1710
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1711
+ "when": "on_success",
1712
+ },
1713
+ {
1714
+ "allow_failure": true,
1715
+ "when": "manual",
1716
+ },
1717
+ ],
1718
+ "script": [
1719
+ "set +e",
1720
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
1721
+ "gcloud scheduler jobs delete pan-test-app-prod-api-alarm-clock-scheduler --project=asdf --location=asia-east1",
1722
+ "gcloud run jobs executions list --project=asdf --region=asia-east1 --job pan-test-app-prod-api-alarm-clock --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=asdf --region=asia-east1",
1723
+ "gcloud run jobs delete pan-test-app-prod-api-alarm-clock --project=asdf --region=asia-east1",
1724
+ "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api --quiet --delete-tags",
1725
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1726
+ "echo Disabling component in Dependency Track",
1727
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-prod-api-unknown-host.example.com" || true",
1728
+ "set -e",
1729
+ ],
1730
+ "stage": "stop prod",
1731
+ "variables": {
1732
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1733
+ "GIT_STRATEGY": "none",
1734
+ "KUBERNETES_CPU_REQUEST": "0.5",
1735
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
1736
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
1737
+ },
1738
+ },
1739
+ "api ๐Ÿ›‘ Stop โš ๏ธ | stage ": {
1740
+ "environment": {
1741
+ "action": "stop",
1742
+ "name": "stage/api",
1743
+ },
1744
+ "image": "path/to/docker/gcloud:the-version",
1745
+ "interruptible": true,
1746
+ "needs": [],
1747
+ "retry": {
1748
+ "max": 2,
1749
+ "when": [
1750
+ "runner_system_failure",
1751
+ "stuck_or_timeout_failure",
1752
+ ],
1753
+ },
1754
+ "rules": [
1755
+ {
1756
+ "allow_failure": true,
1757
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
1758
+ "when": "on_success",
1759
+ },
1760
+ {
1761
+ "allow_failure": true,
1762
+ "when": "manual",
1763
+ },
1764
+ ],
1765
+ "script": [
1766
+ "set +e",
1767
+ "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
1768
+ "gcloud scheduler jobs delete pan-test-app-stage-api-alarm-clock-scheduler --project=asdf --location=asia-east1",
1769
+ "gcloud run jobs executions list --project=asdf --region=asia-east1 --job pan-test-app-stage-api-alarm-clock --format="value(name)" | xargs -I {} gcloud run jobs executions delete {} --quiet --project=asdf --region=asia-east1",
1770
+ "gcloud run jobs delete pan-test-app-stage-api-alarm-clock --project=asdf --region=asia-east1",
1771
+ "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api --quiet --delete-tags",
1772
+ "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
1773
+ "echo Disabling component in Dependency Track",
1774
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://pan-test-app-stage-api-unknown-host.example.com" || true",
1775
+ "set -e",
1776
+ ],
1777
+ "stage": "stop stage",
1778
+ "variables": {
1779
+ "CLOUDSDK_CORE_DISABLE_PROMPTS": "1",
1780
+ "GIT_STRATEGY": "none",
1781
+ "KUBERNETES_CPU_REQUEST": "0.5",
1782
+ "KUBERNETES_MEMORY_LIMIT": "400Mi",
1783
+ "KUBERNETES_MEMORY_REQUEST": "200Mi",
1784
+ },
1785
+ },
1786
+ "api ๐Ÿงพ sbom | prod ": {
1787
+ "allow_failure": true,
1788
+ "artifacts": {
1789
+ "paths": [
1790
+ "__sbom.json",
1791
+ ],
1792
+ },
1793
+ "image": "aquasec/trivy:0.38.3",
1794
+ "interruptible": true,
1795
+ "needs": [],
1796
+ "retry": {
1797
+ "max": 2,
1798
+ "when": [
1799
+ "runner_system_failure",
1800
+ "stuck_or_timeout_failure",
1801
+ ],
1802
+ },
1803
+ "script": [
1804
+ "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
1805
+ ],
1806
+ "stage": "build",
1807
+ "variables": {},
1808
+ },
1809
+ "api ๐Ÿงพ sbom | stage ": {
1810
+ "allow_failure": true,
1811
+ "artifacts": {
1812
+ "paths": [
1813
+ "__sbom.json",
1814
+ ],
1815
+ },
1816
+ "image": "aquasec/trivy:0.38.3",
1817
+ "interruptible": true,
1818
+ "needs": [],
1819
+ "retry": {
1820
+ "max": 2,
1821
+ "when": [
1822
+ "runner_system_failure",
1823
+ "stuck_or_timeout_failure",
1824
+ ],
1825
+ },
1826
+ "script": [
1827
+ "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
1828
+ ],
1829
+ "stage": "build",
1830
+ "variables": {},
1831
+ },
1832
+ },
1833
+ "stages": [
1834
+ "setup",
1835
+ "setup dev",
1836
+ "setup review",
1837
+ "setup stage",
1838
+ "setup prod",
1839
+ "setup local",
1840
+ "test",
1841
+ "test dev",
1842
+ "test review",
1843
+ "test stage",
1844
+ "test prod",
1845
+ "test local",
1846
+ "build",
1847
+ "build dev",
1848
+ "build review",
1849
+ "build stage",
1850
+ "build prod",
1851
+ "build local",
1852
+ "deploy",
1853
+ "deploy dev",
1854
+ "deploy review",
1855
+ "deploy stage",
1856
+ "deploy prod",
1857
+ "deploy local",
1858
+ "verify",
1859
+ "verify dev",
1860
+ "verify review",
1861
+ "verify stage",
1862
+ "verify prod",
1863
+ "verify local",
1864
+ "rollback",
1865
+ "rollback dev",
1866
+ "rollback review",
1867
+ "rollback stage",
1868
+ "rollback prod",
1869
+ "rollback local",
1870
+ "stop",
1871
+ "stop dev",
1872
+ "stop review",
1873
+ "stop stage",
1874
+ "stop prod",
1875
+ "stop local",
1876
+ ],
1877
+ "variables": {
1878
+ "FF_USE_FASTZIP": "true",
1879
+ "GIT_DEPTH": 1,
1880
+ },
1881
+ "workflow": {
1882
+ "rules": [
1883
+ {
1884
+ "if": "$CI_COMMIT_TAG",
1885
+ },
1886
+ {
1887
+ "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
1888
+ "when": "never",
1889
+ },
1890
+ {
1891
+ "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
1892
+ },
1893
+ {
1894
+ "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
1895
+ },
1896
+ {
1897
+ "if": "$CI_MERGE_REQUEST_ID",
1898
+ },
1899
+ ],
1900
+ },
1901
+ },
1902
+ }
1903
+ `;