@catladder/pipeline 1.153.0 → 1.154.0

package/src/deploy/cloudRun/index.ts

@@ -1,9 +1,9 @@
-import type { DeployTypeDefinition } from "..";
+import type { DeployConfigCloudRun, DeployTypeDefinition } from "..";
 import {
-  BashExpression,
   getBashVariable,
   joinBashExpressions,
 } from "../../bash/BashExpression";
+import type { BuildConfig } from "../../build";
 import { getSecretVarName } from "../../context";
 import type { EnvironmentContext } from "../../types/environmentContext";
 import { sanitizeForBashVariable } from "../../utils/gitlab";
@@ -27,7 +27,7 @@ const getCloudSqlVariables = ({
   env,
   componentName,
   fullConfig,
-}: EnvironmentContext<any, "google-cloudrun">) => {
+}: EnvironmentContext<BuildConfig, DeployConfigCloudRun>) => {
   if (deployConfigRaw && deployConfigRaw.cloudSql) {
     const DB_NAME = getFullDbName(
       deployConfigRaw.cloudSql,
@@ -56,71 +56,72 @@ const getCloudSqlVariables = ({
   }
   return {};
 };
-export const GCLOUD_RUN_DEPLOY_TYPE: DeployTypeDefinition<"google-cloudrun"> = {
-  jobs: createGoogleCloudRunDeployJobs,
-  defaults: ({ deployConfigRaw, envType }) => {
-    if (deployConfigRaw && deployConfigRaw.cloudSql) {
-      return {
-        cloudSql: {
-          deleteDatabaseOnStop: envType === "review",
-        },
-      };
-    }
-    return {};
-  },
-  additionalSecretKeys: (ctx) => [
-    {
-      key: GCLOUD_DEPLOY_CREDENTIALS_KEY,
-      hidden: true,
-    },
-    {
-      key: GCLOUD_RUN_CANONICAL_HOST_SUFFIX,
-      hidden: true,
+export const GCLOUD_RUN_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigCloudRun> =
+  {
+    jobs: createGoogleCloudRunDeployJobs,
+    defaults: ({ deployConfigRaw, envType }) => {
+      if (deployConfigRaw && deployConfigRaw.cloudSql) {
+        return {
+          cloudSql: {
+            deleteDatabaseOnStop: envType === "review",
+          },
+        };
+      }
+      return {};
     },
-    ...(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql
-      ? [{ key: "DB_PASSWORD" }]
-      : []),
-  ],
-  getAdditionalEnvVars: (ctx) => {
-    const { fullName, env, componentName, deployConfigRaw } = ctx;
+    additionalSecretKeys: (ctx) => [
+      {
+        key: GCLOUD_DEPLOY_CREDENTIALS_KEY,
+        hidden: true,
+      },
+      {
+        key: GCLOUD_RUN_CANONICAL_HOST_SUFFIX,
+        hidden: true,
+      },
+      ...(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql
+        ? [{ key: "DB_PASSWORD" }]
+        : []),
+    ],
+    getAdditionalEnvVars: (ctx) => {
+      const { fullName, env, componentName, deployConfigRaw } = ctx;
 
-    const HOST_INTERNAL = joinBashExpressions(
-      [
-        fullName,
-        getBashVariable(
-          getSecretVarName(
-            env,
-            componentName,
-            GCLOUD_RUN_CANONICAL_HOST_SUFFIX,
+      const HOST_INTERNAL = joinBashExpressions(
+        [
+          fullName,
+          getBashVariable(
+            getSecretVarName(
+              env,
+              componentName,
+              GCLOUD_RUN_CANONICAL_HOST_SUFFIX,
+            ),
           ),
-        ),
-      ],
-      "-",
-    ).toLowerCase();
-    const jobTriggers =
-      deployConfigRaw && deployConfigRaw.jobs
-        ? Object.fromEntries(
-            Object.entries(deployConfigRaw.jobs).map(([name, job]) => [
-              "CLOUD_RUN_JOB_TRIGGER_URL_" + sanitizeForBashVariable(name),
-              `https://${
-                deployConfigRaw.region
-              }-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/${
-                deployConfigRaw.projectId
-              }/jobs/${getCloudRunJobName(fullName, name)}:run`,
-            ]),
-          )
-        : {};
+        ],
+        "-",
+      ).toLowerCase();
+      const jobTriggers =
+        deployConfigRaw && deployConfigRaw.jobs
+          ? Object.fromEntries(
+              Object.entries(deployConfigRaw.jobs).map(([name, job]) => [
+                "CLOUD_RUN_JOB_TRIGGER_URL_" + sanitizeForBashVariable(name),
+                `https://${
+                  deployConfigRaw.region
+                }-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/${
+                  deployConfigRaw.projectId
+                }/jobs/${getCloudRunJobName(fullName, name)}:run`,
+              ]),
+            )
+          : {};
 
-    return {
-      HOST_INTERNAL,
-      ...getCloudSqlVariables(ctx),
-      ...jobTriggers,
-      DEPLOY_CLOUD_RUN_PROJECT_ID: deployConfigRaw
-        ? deployConfigRaw.projectId
-        : undefined,
-      DEPLOY_CLOUD_RUN_REGION: deployConfigRaw
-        ? deployConfigRaw.region
-        : undefined,
-    };
-  },
-};
+      return {
+        HOST_INTERNAL,
+        ...getCloudSqlVariables(ctx),
+        ...jobTriggers,
+        DEPLOY_CLOUD_RUN_PROJECT_ID: deployConfigRaw
+          ? deployConfigRaw.projectId
+          : undefined,
+        DEPLOY_CLOUD_RUN_REGION: deployConfigRaw
+          ? deployConfigRaw.region
+          : undefined,
+      };
+    },
+  };

package/src/deploy/custom/index.ts

@@ -1,7 +1,7 @@
-import type { DeployTypeDefinition } from "..";
+import type { DeployConfigCustom, DeployTypeDefinition } from "..";
 import { createCustomDeployJobs } from "./deployJob";
 
-export const CUSTOM_DEPLOY_TYPE: DeployTypeDefinition<"custom"> = {
+export const CUSTOM_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigCustom> = {
   jobs: createCustomDeployJobs,
   defaults: () => ({}),
   additionalSecretKeys: () => [],

package/src/deploy/dockerTag/index.ts

@@ -1,9 +1,10 @@
-import type { DeployTypeDefinition } from "..";
+import type { DeployConfigDockerTag, DeployTypeDefinition } from "..";
 import { createDockerTagDeployJobs } from "./deployJob";
 
-export const DOCKER_TAG_DEPLOY_TYPE: DeployTypeDefinition<"dockerTag"> = {
-  jobs: createDockerTagDeployJobs,
-  defaults: () => ({}),
-  additionalSecretKeys: () => [],
-  getAdditionalEnvVars: () => ({}),
-};
+export const DOCKER_TAG_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigDockerTag> =
+  {
+    jobs: createDockerTagDeployJobs,
+    defaults: () => ({}),
+    additionalSecretKeys: () => [],
+    getAdditionalEnvVars: () => ({}),
+  };

package/src/deploy/index.ts

@@ -1,4 +1,4 @@
-import type { SecretEnvVar } from "..";
+import type { BuildConfig, SecretEnvVar } from "..";
 import type { BashExpression } from "../bash/BashExpression";
 import type { ComponentContext } from "../types/context";
 import type { EnvironmentContext } from "../types/environmentContext";
@@ -8,26 +8,28 @@ import { GCLOUD_RUN_DEPLOY_TYPE } from "./cloudRun";
 import { CUSTOM_DEPLOY_TYPE } from "./custom";
 import { DOCKER_TAG_DEPLOY_TYPE } from "./dockerTag";
 import { KUBERNETES_DEPLOY_TYPE } from "./kubernetes";
-import type { DeployConfigGeneric, DeployConfigType } from "./types";
+import type {
+  DeployConfig,
+  DeployConfigGeneric,
+  DeployConfigType,
+} from "./types";
 export * from "./cloudRun";
 export * from "./kubernetes";
 export * from "./types";
 export * from "./utils";
 
-export type DeployTypeDefinition<T extends DeployConfigType> = {
+export type DeployTypeDefinition<D extends DeployConfig> = {
   jobs: (context: ComponentContext) => CatladderJob[];
-  defaults: (
-    envContext: EnvironmentContext<any, T>,
-  ) => PartialDeep<DeployConfigGeneric<T>>;
+  defaults: (envContext: EnvironmentContext<BuildConfig, D>) => PartialDeep<D>;
   additionalSecretKeys: (
-    envContext: EnvironmentContext<any, T>,
+    envContext: EnvironmentContext<BuildConfig, D>,
   ) => SecretEnvVar[];
   getAdditionalEnvVars: (
-    envContext: EnvironmentContext<any, T>,
+    envContext: EnvironmentContext<BuildConfig, D>,
   ) => Record<string, string | BashExpression | undefined | null>;
 };
 export type DeployTypes = {
-  [T in DeployConfigType]: DeployTypeDefinition<T>;
+  [T in DeployConfigType]: DeployTypeDefinition<DeployConfigGeneric<T>>;
 };
 
 export const DEPLOY_TYPES: DeployTypes = {

package/src/deploy/kubernetes/additionalSecretKeys.ts

@@ -1,8 +1,10 @@
+import type { BuildConfig } from "../../build";
 import type { EnvironmentContext } from "../../types/environmentContext";
+import type { DeployConfigKubernetes } from "../types";
 
 export const additionalKubernetesSecretKeys = ({
   deployConfigRaw,
-}: EnvironmentContext<any, "kubernetes">) => {
+}: EnvironmentContext<BuildConfig, DeployConfigKubernetes>) => {
   if (!deployConfigRaw) {
     return [];
   }

package/src/deploy/kubernetes/cloudSql/index.ts

@@ -66,7 +66,7 @@ export const createKubernetesCloudsqlBaseValues = (
           config,
           context.fullConfig,
           context.environment.slugPrefix,
-          context.componentName,
+          context.name,
         ),
       },
     };

package/src/deploy/kubernetes/deployJob.ts

@@ -39,14 +39,14 @@ export const createKubernetesDeployJobs = (
       ...context.environment.envVars,
       RELEASE_NAME: context.environment.fullName,
       HELM_EXPERIMENTAL_OCI: "1",
-      KUBE_DOCKER_IMAGE_PULL_SECRET: `gitlab-registry-${context.componentName}`,
+      KUBE_DOCKER_IMAGE_PULL_SECRET: `gitlab-registry-${context.name}`,
       HELM_GITLAB_CHART_NAME:
         deployConfig.chartName ?? "/helm-charts/the-panter-chart",
       HELM_ARGS: [
         ...(deployConfig.debug ? ["--debug"] : []),
         ...(deployConfig.additionalHelmArgs ?? []),
       ].join(" "),
-      COMPONENT_NAME: context.componentName,
+      COMPONENT_NAME: context.name,
       /** @deprecated */
       BUILD_ID: context.environment.envVars.BUILD_INFO_BUILD_ID,
     },

package/src/deploy/kubernetes/index.ts

@@ -1,49 +1,50 @@
 import slugify from "slugify";
-import type { DeployTypeDefinition } from "..";
+import type { DeployConfigKubernetes, DeployTypeDefinition } from "..";
 import { getKubernetesNamespace } from "..";
 import { joinBashExpressions } from "../../bash/BashExpression";
 import { additionalKubernetesSecretKeys } from "./additionalSecretKeys";
 import { createKubernetesDeployJobs } from "./deployJob";
 export * from "./cloudSql";
-export const KUBERNETES_DEPLOY_TYPE: DeployTypeDefinition<"kubernetes"> = {
-  jobs: createKubernetesDeployJobs,
-  defaults: () => ({}),
-  additionalSecretKeys: additionalKubernetesSecretKeys,
-  getAdditionalEnvVars: ({
-    componentName,
-    fullConfig,
-    deployConfigRaw,
-    env,
-    reviewSlug,
-    envType,
-  }) => {
-    const KUBE_APP_NAME_PREFIX =
-      envType === "review" && reviewSlug ? reviewSlug.concat("-") : "";
-    const KUBE_APP_NAME = KUBE_APP_NAME_PREFIX.concat(componentName);
-    const KUBE_NAMESPACE = getKubernetesNamespace(fullConfig, env);
-    const componentSlug = slugify(componentName);
+export const KUBERNETES_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigKubernetes> =
+  {
+    jobs: createKubernetesDeployJobs,
+    defaults: () => ({}),
+    additionalSecretKeys: additionalKubernetesSecretKeys,
+    getAdditionalEnvVars: ({
+      componentName,
+      fullConfig,
+      deployConfigRaw,
+      env,
+      reviewSlug,
+      envType,
+    }) => {
+      const KUBE_APP_NAME_PREFIX =
+        envType === "review" && reviewSlug ? reviewSlug.concat("-") : "";
+      const KUBE_APP_NAME = KUBE_APP_NAME_PREFIX.concat(componentName);
+      const KUBE_NAMESPACE = getKubernetesNamespace(fullConfig, env);
+      const componentSlug = slugify(componentName);
 
-    const domainCanonical =
-      (deployConfigRaw && deployConfigRaw.cluster?.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
-      fullConfig.domainCanonical ||
-      "panter.cloud";
+      const domainCanonical =
+        (deployConfigRaw && deployConfigRaw.cluster?.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
+        fullConfig.domainCanonical ||
+        "panter.cloud";
 
-    const HOST_INTERNAL = joinBashExpressions(
-      [
-        componentSlug,
-        ...(envType === "review" && reviewSlug ? [reviewSlug] : []),
-        env,
-        fullConfig.appName,
-        fullConfig.customerName,
-        domainCanonical,
-      ],
-      ".",
-    ); // default for kubernetes and rest
-    return {
-      KUBE_NAMESPACE,
-      KUBE_APP_NAME,
-      KUBE_APP_NAME_PREFIX,
-      HOST_INTERNAL,
-    };
-  },
-};
+      const HOST_INTERNAL = joinBashExpressions(
+        [
+          componentSlug,
+          ...(envType === "review" && reviewSlug ? [reviewSlug] : []),
+          env,
+          fullConfig.appName,
+          fullConfig.customerName,
+          domainCanonical,
+        ],
+        ".",
+      ); // default for kubernetes and rest
+      return {
+        KUBE_NAMESPACE,
+        KUBE_APP_NAME,
+        KUBE_APP_NAME_PREFIX,
+        HOST_INTERNAL,
+      };
+    },
+  };

package/src/deploy/sbom.ts

@@ -1,8 +1,13 @@
-import type { ComponentContext } from "../types/context";
 import { SBOM_FILE } from "../build/sbom";
+import {
+  componentContextIsStandaloneBuild,
+  type ComponentContext,
+} from "../types/context";
 
 export const sbomDeactivated = (context: ComponentContext) =>
-  context.build.config.type === "custom" && context.build.config.sbom === false;
+  componentContextIsStandaloneBuild(context) &&
+  context.build.config.type === "custom" &&
+  context.build.config.sbom === false;
 
 export const getDependencyTrackUploadScript = (
   context: ComponentContext,
@@ -11,7 +16,7 @@ export const getDependencyTrackUploadScript = (
     ? []
     : [
         "echo 'Uploading SBOM to Dependency Track'",
-        `/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "${context.fullConfig.customerName}-${context.fullConfig.appName}/${context.componentName}" "${context.environment.url}" "${SBOM_FILE}" vex.json || true`,
+        `/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "${context.fullConfig.customerName}-${context.fullConfig.appName}/${context.name}" "${context.environment.url}" "${SBOM_FILE}" vex.json || true`,
       ];
 };
 
@@ -22,6 +27,6 @@ export const getDependencyTrackDeleteScript = (
     ? []
     : [
         "echo 'Disabling component in Dependency Track'",
-        `/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "${context.fullConfig.customerName}-${context.fullConfig.appName}/${context.componentName}" "${context.environment.url}" || true`,
+        `/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "${context.fullConfig.customerName}-${context.fullConfig.appName}/${context.name}" "${context.environment.url}" || true`,
       ];
 };

package/src/pipeline/createAllJobs.ts

@@ -1,71 +1,72 @@
-import { getAllEnvsByTrigger } from "../config";
-import { createComponentContext } from "../context";
-import type {
-  ComponentContext,
-  Config,
-  PipelineTrigger,
-  PipelineType,
-} from "../types";
+import type { CreateAllComponentsContextProps } from "../context/createAllComponentsContext";
+import { createAllComponentsContext } from "../context/createAllComponentsContext";
+import { createWorkspaceContext } from "../context/createWorkspaceContext";
+import type { ComponentContext, WorkspaceContext } from "../types";
+import { componentContextHasWorkspaceBuild } from "../types";
 import type { CatladderJob } from "../types/jobs";
 import { createJobsForComponentContext } from "./createJobsForComponent";
+import { createJobsForWorkspace } from "./createJobsForWorkspace";
 
-export type AllCatladderJobs = Array<{
-  context: ComponentContext;
-  jobs: Array<CatladderJob>;
-}>;
-
-export type AllJobsContext = {
-  config: Config;
-  trigger: PipelineTrigger;
-  pipelineType: PipelineType;
-};
-
-const createAllComponentContext = async ({
-  config,
-  trigger,
-  pipelineType,
-}: AllJobsContext): Promise<
-  Array<{
-    env: string;
-    componentName: string;
+export type AllCatladderJobs = {
+  workspaces: Array<{
+    context: WorkspaceContext;
+    jobs: Array<CatladderJob>;
+  }>;
+  components: Array<{
     context: ComponentContext;
-  }>
-> => {
-  return await Promise.all(
-    Object.keys(config.components).flatMap((componentName) => {
-      const envs = getAllEnvsByTrigger(config, componentName, trigger);
-      return envs.map(async (env) => {
-        const context = await createComponentContext({
-          config,
-          componentName,
-          env,
-          trigger,
-          pipelineType,
-        });
-
-        return {
-          env,
-          componentName,
-          context,
-        };
-      });
-    }),
-  );
+    jobs: Array<CatladderJob>;
+  }>;
 };
 
 export const createAllJobs = async ({
   config,
   trigger,
   pipelineType,
-}: AllJobsContext): Promise<AllCatladderJobs> => {
-  const allComponentContext = await createAllComponentContext({
+}: CreateAllComponentsContextProps): Promise<AllCatladderJobs> => {
+  const allComponentsContext = await createAllComponentsContext({
     config,
     trigger,
     pipelineType,
   });
 
-  return allComponentContext.map(({ context }) => ({
-    context,
-    jobs: createJobsForComponentContext(context),
-  }));
+  return {
+    workspaces: await Promise.all(
+      Object.keys(config.builds ?? {}).map(async (workspaceName) => {
+        const componentsInAllEnvs = allComponentsContext.filter(
+          (context) =>
+            componentContextHasWorkspaceBuild(context) &&
+            context.build.workspaceName === workspaceName,
+        );
+
+        const allEnvs = [...new Set(componentsInAllEnvs.map(({ env }) => env))];
+
+        return await Promise.all(
+          allEnvs.map(async (env) => {
+            const workspaceContext = await createWorkspaceContext({
+              components: componentsInAllEnvs.filter(
+                ({ env: componentEnv }) => componentEnv === env,
+              ),
+              workspaceName,
+              config,
+              trigger,
+              pipelineType,
+              env,
+            });
+
+            return {
+              context: workspaceContext,
+              jobs: createJobsForWorkspace(workspaceContext),
+            };
+          }),
+        );
+      }),
+    ).then((f) => f.flat()),
+
+    components: allComponentsContext.map((context) => {
+      return {
+        context,
+        jobs: createJobsForComponentContext(context),
+      };
+    }),
+  };
 };

package/src/pipeline/createChildPipeline.ts

@@ -17,6 +17,7 @@ export const createChildPipeline = async <T extends PipelineType>(
     trigger,
     pipelineType,
   });
+
   const stages = getPipelineStages(config);
 
   if (pipelineType === "gitlab") {

package/src/pipeline/createJobsForComponent.ts

@@ -24,10 +24,11 @@ const getCustomJobs = (context: ComponentContext) => {
 export const createJobsForComponentContext = (
   context: ComponentContext,
 ): CatladderJob[] => {
-  const buildJobs = BUILD_TYPES[context.build.config.type].jobs(context);
-  const deployJobs = context.deploy?.config
-    ? DEPLOY_TYPES[context.deploy?.config.type].jobs(context)
-    : [];
+  const buildJobs = BUILD_TYPES[context.build.buildType].jobs(context);
+  const deployJobs =
+    context.componentConfig.deploy !== false
+      ? DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context)
+      : [];
 
   const customJobs = getCustomJobs(context);
   return [...buildJobs, ...deployJobs, ...customJobs];

package/src/pipeline/createJobsForWorkspace.ts

@@ -0,0 +1,12 @@
+import { WORKSPACE_BUILD_TYPES } from "../build";
+import type { WorkspaceContext } from "../types/context";
+import type { CatladderJob } from "../types/jobs";
+
+export const createJobsForWorkspace = (
+  context: WorkspaceContext,
+): CatladderJob[] => {
+  const buildJobs =
+    WORKSPACE_BUILD_TYPES[context.build.buildType].jobs(context);
+
+  return buildJobs;
+};

package/src/pipeline/createMainPipeline.ts

@@ -5,11 +5,13 @@ import {
   RULE_NEVER_ON_RELEASE_COMMIT,
 } from "../rules";
 import type {
+  ComponentContext,
   GitlabJobDef,
   GitlabRule,
   Pipeline,
   PipelineTrigger,
   PipelineType,
+  WorkspaceContext,
 } from "../types";
 import { ALL_PIPELINE_TRIGGERS, type Config } from "../types/config";
 import { createAllJobs } from "./createAllJobs";
@@ -35,40 +37,53 @@ export const createMainPipeline = async <T extends PipelineType>(
             getGitlabRulesForTrigger(trigger),
           ),
       ),
-    );
+    ).then((j) => j.flat());
+
+    const allWorkspaceJobs = allJobsPerTrigger
+      .filter((j) => j.context.type === "workspace") // sort by componentName in the same order as they appear in the config
+      // this is purely for better readability in git diffs when you add new components
+      .sort((a, b) => {
+        const workspaceNames = Object.keys(config.builds ?? {});
+        const aIndex = workspaceNames.findIndex(
+          (c) => c === (a.context as WorkspaceContext).name,
+        );
+        const bIndex = workspaceNames.findIndex(
+          (c) => c === (b.context as WorkspaceContext).name,
+        );
+        return aIndex - bIndex;
+      });
 
-    const allJobs = allJobsPerTrigger
-      .flat()
+    const allComponentJobs = allJobsPerTrigger
+      .filter((j) => j.context.type === "component")
       // sort by componentName in the same order as they appear in the config
       // this is purely for better readability in git diffs when you add new components
       .sort((a, b) => {
         const componentNames = Object.keys(config.components);
         const aIndex = componentNames.findIndex(
-          (c) => c === a.context.componentName,
+          (c) => c === (a.context as ComponentContext).name,
         );
         const bIndex = componentNames.findIndex(
-          (c) => c === b.context.componentName,
+          (c) => c === (b.context as ComponentContext).name,
         );
         return aIndex - bIndex;
-      })
-
-      .reduce(
-        (acc, { gitlabJob, name }) => {
-          // merge jobs, if a job is already there, merge the rules
-          // this is currently needed because of envMode: "none", which creates the same job for all triggers, so it can appear multiple times
-          if (acc[name]) {
-            acc[name].rules = [
-              ...(acc[name].rules ?? []),
-              ...(gitlabJob.rules ?? []),
-            ];
-          } else {
-            acc[name] = gitlabJob;
-          }
+      });
+    const allJobs = [...allWorkspaceJobs, ...allComponentJobs].reduce(
+      (acc, { gitlabJob, name }) => {
+        // merge jobs, if a job is already there, merge the rules
+        // this is currently needed because of envMode: "none", which creates the same job for all triggers, so it can appear multiple times
+        if (acc[name]) {
+          acc[name].rules = [
+            ...(acc[name].rules ?? []),
+            ...(gitlabJob.rules ?? []),
+          ];
+        } else {
+          acc[name] = gitlabJob;
+        }
 
-          return acc;
-        },
-        {} as { [key: string]: GitlabJobDef },
-      );
+        return acc;
+      },
+      {} as { [key: string]: GitlabJobDef },
+    );
 
     return createGitlabPipelineWithDefaults({
       stages: [...stages, "release"],