@catladder/pipeline 3.40.0 โ 3.41.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/build/base/index.js +2 -4
- package/dist/build/rails/build.js +1 -1
- package/dist/build/types.d.ts +0 -10
- package/dist/constants.js +1 -1
- package/dist/deploy/base/deploy.js +1 -6
- package/dist/deploy/cloudRun/createJobs/getCloudRunDeployScripts.js +2 -3
- package/dist/deploy/cloudRun/createJobs/getCloudRunStopScripts.js +2 -3
- package/dist/deploy/custom/deployJob.js +2 -3
- package/dist/deploy/kubernetes/deployJob.js +2 -3
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/examples/__snapshots__/automatic-releases.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-execute-script-on-deploy.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-health-check-defaults.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-health-check-only-startup.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-health-check.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-http2.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-memory-limit.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-meteor-with-worker.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-n8n.test.ts.snap +940 -0
- package/examples/__snapshots__/cloud-run-nextjs.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-no-cpu-throttling.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-no-service.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-non-public.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-post-stop-job.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-service-custom-vpc-connector.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-service-custom-vpc.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-service-gen2.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-service-increase-timout.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-service-with-volumes.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-session-affinity.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-storybook.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-with-agents.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-with-gpu.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-with-ngnix.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-with-sql-legacy-jobs.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-with-sql-multiple-dbs.test.ts.snap +0 -336
- package/examples/__snapshots__/cloud-run-with-sql-reuse-db.test.ts.snap +0 -224
- package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap +0 -112
- package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap +0 -112
- package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap +0 -112
- package/examples/__snapshots__/custom-build-job.test.ts.snap +0 -112
- package/examples/__snapshots__/custom-deploy.test.ts.snap +0 -106
- package/examples/__snapshots__/custom-docker-file.test.ts.snap +0 -112
- package/examples/__snapshots__/custom-envs.test.ts.snap +0 -132
- package/examples/__snapshots__/custom-verify-job.test.ts.snap +0 -112
- package/examples/__snapshots__/git-submodule.test.ts.snap +0 -112
- package/examples/__snapshots__/kubernetes-application-customization.test.ts.snap +0 -112
- package/examples/__snapshots__/kubernetes-with-cloud-sql.test.ts.snap +0 -112
- package/examples/__snapshots__/kubernetes-with-jobs.test.ts.snap +0 -224
- package/examples/__snapshots__/kubernetes-with-mongodb.test.ts.snap +0 -112
- package/examples/__snapshots__/local-dot-env.test.ts.snap +0 -112
- package/examples/__snapshots__/meteor-kubernetes.test.ts.snap +0 -112
- package/examples/__snapshots__/modify-generated-files.test.ts.snap +0 -88
- package/examples/__snapshots__/modify-generated-yaml.test.ts.snap +0 -88
- package/examples/__snapshots__/multiline-var.test.ts.snap +0 -336
- package/examples/__snapshots__/native-app.test.ts.snap +0 -216
- package/examples/__snapshots__/node-build-with-custom-image.test.ts.snap +0 -112
- package/examples/__snapshots__/node-build-with-docker-additions.test.ts.snap +0 -112
- package/examples/__snapshots__/override-secrets.test.ts.snap +0 -112
- package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap +0 -112
- package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap +4 -112
- package/examples/__snapshots__/referencing-other-vars.test.ts.snap +0 -336
- package/examples/__snapshots__/wait-for-other-deploy.test.ts.snap +0 -208
- package/examples/__snapshots__/workspace-api-www-turbo-cache.test.ts.snap +0 -224
- package/examples/__snapshots__/workspace-api-www.test.ts.snap +0 -224
- package/examples/{custom-sbom-java.test.ts โ cloud-run-n8n.test.ts} +2 -2
- package/examples/cloud-run-n8n.ts +62 -0
- package/package.json +1 -1
- package/src/build/base/index.ts +0 -4
- package/src/build/rails/build.ts +1 -0
- package/src/build/types.ts +0 -13
- package/src/deploy/base/deploy.ts +0 -5
- package/src/deploy/cloudRun/createJobs/getCloudRunDeployScripts.ts +0 -2
- package/src/deploy/cloudRun/createJobs/getCloudRunStopScripts.ts +0 -2
- package/src/deploy/custom/deployJob.ts +2 -9
- package/src/deploy/kubernetes/deployJob.ts +3 -10
- package/dist/build/sbom.d.ts +0 -5
- package/dist/build/sbom.js +0 -35
- package/dist/deploy/sbom.d.ts +0 -4
- package/dist/deploy/sbom.js +0 -21
- package/examples/custom-sbom-java.ts +0 -38
- package/src/build/sbom.ts +0 -53
- package/src/deploy/sbom.ts +0 -34
|
@@ -376,28 +376,6 @@ before_script:
|
|
|
376
376
|
- 'app1 ๐จ app | dev '
|
|
377
377
|
retry: *a1
|
|
378
378
|
interruptible: true
|
|
379
|
-
'app1 ๐งพ sbom | dev ':
|
|
380
|
-
stage: build
|
|
381
|
-
image:
|
|
382
|
-
name: aquasec/trivy:0.58.2
|
|
383
|
-
entrypoint:
|
|
384
|
-
- ''
|
|
385
|
-
variables: {}
|
|
386
|
-
script:
|
|
387
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
388
|
-
- collapseable_section_end "injectvars"
|
|
389
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app1
|
|
390
|
-
artifacts:
|
|
391
|
-
paths:
|
|
392
|
-
- __sbom.json
|
|
393
|
-
rules:
|
|
394
|
-
- when: never
|
|
395
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
396
|
-
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
|
|
397
|
-
needs: []
|
|
398
|
-
retry: *a1
|
|
399
|
-
interruptible: true
|
|
400
|
-
allow_failure: true
|
|
401
379
|
'app1 ๐ Deploy | dev ':
|
|
402
380
|
stage: deploy dev
|
|
403
381
|
image: path/to/docker/gcloud:the-version
|
|
@@ -502,8 +480,6 @@ before_script:
|
|
|
502
480
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1@$version --quiet --delete-tags; done
|
|
503
481
|
- set -e
|
|
504
482
|
- collapseable_section_end "cleanup"
|
|
505
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
506
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app1" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
507
483
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
508
484
|
environment:
|
|
509
485
|
name: dev/app1
|
|
@@ -527,8 +503,6 @@ before_script:
|
|
|
527
503
|
artifacts: false
|
|
528
504
|
- job: 'app1 ๐งช test | dev '
|
|
529
505
|
artifacts: false
|
|
530
|
-
- job: 'app1 ๐งพ sbom | dev '
|
|
531
|
-
artifacts: true
|
|
532
506
|
- job: 'app1 ๐ก audit | dev '
|
|
533
507
|
artifacts: false
|
|
534
508
|
retry: *a1
|
|
@@ -551,8 +525,6 @@ before_script:
|
|
|
551
525
|
- gcloud run services delete pan-test-app-dev-app1 --project=asdf --region=asia-east1
|
|
552
526
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/app1 --quiet --delete-tags
|
|
553
527
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1@$version --quiet --delete-tags; done
|
|
554
|
-
- echo 'Disabling component in Dependency Track'
|
|
555
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app1" "$CI_ENVIRONMENT_URL" || true
|
|
556
528
|
- set -e
|
|
557
529
|
environment:
|
|
558
530
|
name: dev/app1
|
|
@@ -852,28 +824,6 @@ before_script:
|
|
|
852
824
|
- 'app1 ๐จ app | review '
|
|
853
825
|
retry: *a1
|
|
854
826
|
interruptible: true
|
|
855
|
-
'app1 ๐งพ sbom | review ':
|
|
856
|
-
stage: build
|
|
857
|
-
image:
|
|
858
|
-
name: aquasec/trivy:0.58.2
|
|
859
|
-
entrypoint:
|
|
860
|
-
- ''
|
|
861
|
-
variables: {}
|
|
862
|
-
script:
|
|
863
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
864
|
-
- collapseable_section_end "injectvars"
|
|
865
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app1
|
|
866
|
-
artifacts:
|
|
867
|
-
paths:
|
|
868
|
-
- __sbom.json
|
|
869
|
-
rules:
|
|
870
|
-
- when: never
|
|
871
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
872
|
-
- if: $CI_MERGE_REQUEST_ID
|
|
873
|
-
needs: []
|
|
874
|
-
retry: *a1
|
|
875
|
-
interruptible: true
|
|
876
|
-
allow_failure: true
|
|
877
827
|
'app1 ๐ Deploy | review ':
|
|
878
828
|
stage: deploy review
|
|
879
829
|
image: path/to/docker/gcloud:the-version
|
|
@@ -981,8 +931,6 @@ before_script:
|
|
|
981
931
|
- set -e
|
|
982
932
|
- set -e
|
|
983
933
|
- collapseable_section_end "cleanup"
|
|
984
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
985
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app1" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
986
934
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
987
935
|
environment:
|
|
988
936
|
name: review/$CI_COMMIT_REF_NAME/app1
|
|
@@ -1006,8 +954,6 @@ before_script:
|
|
|
1006
954
|
artifacts: false
|
|
1007
955
|
- job: 'app1 ๐งช test | review '
|
|
1008
956
|
artifacts: false
|
|
1009
|
-
- job: 'app1 ๐งพ sbom | review '
|
|
1010
|
-
artifacts: true
|
|
1011
957
|
- job: 'app1 ๐ก audit | review '
|
|
1012
958
|
artifacts: false
|
|
1013
959
|
retry: *a1
|
|
@@ -1033,8 +979,6 @@ before_script:
|
|
|
1033
979
|
- set +e
|
|
1034
980
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/app1 --quiet --delete-tags
|
|
1035
981
|
- set -e
|
|
1036
|
-
- echo 'Disabling component in Dependency Track'
|
|
1037
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app1" "$CI_ENVIRONMENT_URL" || true
|
|
1038
982
|
- set -e
|
|
1039
983
|
environment:
|
|
1040
984
|
name: review/$CI_COMMIT_REF_NAME/app1
|
|
@@ -1217,28 +1161,6 @@ before_script:
|
|
|
1217
1161
|
- 'app1 ๐จ app | stage '
|
|
1218
1162
|
retry: *a1
|
|
1219
1163
|
interruptible: true
|
|
1220
|
-
'app1 ๐งพ sbom | stage ':
|
|
1221
|
-
stage: build
|
|
1222
|
-
image:
|
|
1223
|
-
name: aquasec/trivy:0.58.2
|
|
1224
|
-
entrypoint:
|
|
1225
|
-
- ''
|
|
1226
|
-
variables: {}
|
|
1227
|
-
script:
|
|
1228
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
1229
|
-
- collapseable_section_end "injectvars"
|
|
1230
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app1
|
|
1231
|
-
artifacts:
|
|
1232
|
-
paths:
|
|
1233
|
-
- __sbom.json
|
|
1234
|
-
rules:
|
|
1235
|
-
- when: never
|
|
1236
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
1237
|
-
- if: $CI_COMMIT_TAG
|
|
1238
|
-
needs: []
|
|
1239
|
-
retry: *a1
|
|
1240
|
-
interruptible: true
|
|
1241
|
-
allow_failure: true
|
|
1242
1164
|
'app1 ๐ Deploy | stage ':
|
|
1243
1165
|
stage: deploy stage
|
|
1244
1166
|
image: path/to/docker/gcloud:the-version
|
|
@@ -1343,8 +1265,6 @@ before_script:
|
|
|
1343
1265
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1@$version --quiet --delete-tags; done
|
|
1344
1266
|
- set -e
|
|
1345
1267
|
- collapseable_section_end "cleanup"
|
|
1346
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
1347
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app1" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
1348
1268
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
1349
1269
|
environment:
|
|
1350
1270
|
name: stage/app1
|
|
@@ -1363,8 +1283,6 @@ before_script:
|
|
|
1363
1283
|
artifacts: false
|
|
1364
1284
|
- job: 'app1 ๐จ docker | stage '
|
|
1365
1285
|
artifacts: false
|
|
1366
|
-
- job: 'app1 ๐งพ sbom | stage '
|
|
1367
|
-
artifacts: true
|
|
1368
1286
|
retry: *a1
|
|
1369
1287
|
interruptible: true
|
|
1370
1288
|
allow_failure: false
|
|
@@ -1385,8 +1303,6 @@ before_script:
|
|
|
1385
1303
|
- gcloud run services delete pan-test-app-stage-app1 --project=asdf --region=asia-east1
|
|
1386
1304
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/app1 --quiet --delete-tags
|
|
1387
1305
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1@$version --quiet --delete-tags; done
|
|
1388
|
-
- echo 'Disabling component in Dependency Track'
|
|
1389
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app1" "$CI_ENVIRONMENT_URL" || true
|
|
1390
1306
|
- set -e
|
|
1391
1307
|
environment:
|
|
1392
1308
|
name: stage/app1
|
|
@@ -1569,28 +1485,6 @@ before_script:
|
|
|
1569
1485
|
- 'app1 ๐จ app | prod '
|
|
1570
1486
|
retry: *a1
|
|
1571
1487
|
interruptible: true
|
|
1572
|
-
'app1 ๐งพ sbom | prod ':
|
|
1573
|
-
stage: build
|
|
1574
|
-
image:
|
|
1575
|
-
name: aquasec/trivy:0.58.2
|
|
1576
|
-
entrypoint:
|
|
1577
|
-
- ''
|
|
1578
|
-
variables: {}
|
|
1579
|
-
script:
|
|
1580
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
1581
|
-
- collapseable_section_end "injectvars"
|
|
1582
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app1
|
|
1583
|
-
artifacts:
|
|
1584
|
-
paths:
|
|
1585
|
-
- __sbom.json
|
|
1586
|
-
rules:
|
|
1587
|
-
- when: never
|
|
1588
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
1589
|
-
- if: $CI_COMMIT_TAG
|
|
1590
|
-
needs: []
|
|
1591
|
-
retry: *a1
|
|
1592
|
-
interruptible: true
|
|
1593
|
-
allow_failure: true
|
|
1594
1488
|
'app1 ๐ Deploy | prod ':
|
|
1595
1489
|
stage: deploy prod
|
|
1596
1490
|
image: path/to/docker/gcloud:the-version
|
|
@@ -1695,8 +1589,6 @@ before_script:
|
|
|
1695
1589
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1@$version --quiet --delete-tags; done
|
|
1696
1590
|
- set -e
|
|
1697
1591
|
- collapseable_section_end "cleanup"
|
|
1698
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
1699
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app1" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
1700
1592
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
1701
1593
|
environment:
|
|
1702
1594
|
name: prod/app1
|
|
@@ -1715,8 +1607,6 @@ before_script:
|
|
|
1715
1607
|
artifacts: false
|
|
1716
1608
|
- job: 'app1 ๐จ docker | prod '
|
|
1717
1609
|
artifacts: false
|
|
1718
|
-
- job: 'app1 ๐งพ sbom | prod '
|
|
1719
|
-
artifacts: true
|
|
1720
1610
|
retry: *a1
|
|
1721
1611
|
interruptible: true
|
|
1722
1612
|
allow_failure: true
|
|
@@ -1737,8 +1627,6 @@ before_script:
|
|
|
1737
1627
|
- gcloud run services delete pan-test-app-prod-app1 --project=asdf --region=asia-east1
|
|
1738
1628
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/app1 --quiet --delete-tags
|
|
1739
1629
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app1@$version --quiet --delete-tags; done
|
|
1740
|
-
- echo 'Disabling component in Dependency Track'
|
|
1741
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app1" "$CI_ENVIRONMENT_URL" || true
|
|
1742
1630
|
- set -e
|
|
1743
1631
|
environment:
|
|
1744
1632
|
name: prod/app1
|
|
@@ -2034,28 +1922,6 @@ before_script:
|
|
|
2034
1922
|
- 'app2 ๐จ app | dev '
|
|
2035
1923
|
retry: *a1
|
|
2036
1924
|
interruptible: true
|
|
2037
|
-
'app2 ๐งพ sbom | dev ':
|
|
2038
|
-
stage: build
|
|
2039
|
-
image:
|
|
2040
|
-
name: aquasec/trivy:0.58.2
|
|
2041
|
-
entrypoint:
|
|
2042
|
-
- ''
|
|
2043
|
-
variables: {}
|
|
2044
|
-
script:
|
|
2045
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
2046
|
-
- collapseable_section_end "injectvars"
|
|
2047
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app2
|
|
2048
|
-
artifacts:
|
|
2049
|
-
paths:
|
|
2050
|
-
- __sbom.json
|
|
2051
|
-
rules:
|
|
2052
|
-
- when: never
|
|
2053
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
2054
|
-
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
|
|
2055
|
-
needs: []
|
|
2056
|
-
retry: *a1
|
|
2057
|
-
interruptible: true
|
|
2058
|
-
allow_failure: true
|
|
2059
1925
|
'app2 ๐ Deploy | dev ':
|
|
2060
1926
|
stage: deploy dev
|
|
2061
1927
|
image: path/to/docker/gcloud:the-version
|
|
@@ -2170,8 +2036,6 @@ before_script:
|
|
|
2170
2036
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2@$version --quiet --delete-tags; done
|
|
2171
2037
|
- set -e
|
|
2172
2038
|
- collapseable_section_end "cleanup"
|
|
2173
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
2174
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app2" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
2175
2039
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
2176
2040
|
environment:
|
|
2177
2041
|
name: dev/app2
|
|
@@ -2195,8 +2059,6 @@ before_script:
|
|
|
2195
2059
|
artifacts: false
|
|
2196
2060
|
- job: 'app2 ๐งช test | dev '
|
|
2197
2061
|
artifacts: false
|
|
2198
|
-
- job: 'app2 ๐งพ sbom | dev '
|
|
2199
|
-
artifacts: true
|
|
2200
2062
|
- job: 'app2 ๐ก audit | dev '
|
|
2201
2063
|
artifacts: false
|
|
2202
2064
|
retry: *a1
|
|
@@ -2219,8 +2081,6 @@ before_script:
|
|
|
2219
2081
|
- gcloud run services delete pan-test-app-dev-app2 --project=asdf --region=asia-east1
|
|
2220
2082
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/app2 --quiet --delete-tags
|
|
2221
2083
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2@$version --quiet --delete-tags; done
|
|
2222
|
-
- echo 'Disabling component in Dependency Track'
|
|
2223
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app2" "$CI_ENVIRONMENT_URL" || true
|
|
2224
2084
|
- set -e
|
|
2225
2085
|
environment:
|
|
2226
2086
|
name: dev/app2
|
|
@@ -2530,28 +2390,6 @@ before_script:
|
|
|
2530
2390
|
- 'app2 ๐จ app | review '
|
|
2531
2391
|
retry: *a1
|
|
2532
2392
|
interruptible: true
|
|
2533
|
-
'app2 ๐งพ sbom | review ':
|
|
2534
|
-
stage: build
|
|
2535
|
-
image:
|
|
2536
|
-
name: aquasec/trivy:0.58.2
|
|
2537
|
-
entrypoint:
|
|
2538
|
-
- ''
|
|
2539
|
-
variables: {}
|
|
2540
|
-
script:
|
|
2541
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
2542
|
-
- collapseable_section_end "injectvars"
|
|
2543
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app2
|
|
2544
|
-
artifacts:
|
|
2545
|
-
paths:
|
|
2546
|
-
- __sbom.json
|
|
2547
|
-
rules:
|
|
2548
|
-
- when: never
|
|
2549
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
2550
|
-
- if: $CI_MERGE_REQUEST_ID
|
|
2551
|
-
needs: []
|
|
2552
|
-
retry: *a1
|
|
2553
|
-
interruptible: true
|
|
2554
|
-
allow_failure: true
|
|
2555
2393
|
'app2 ๐ Deploy | review ':
|
|
2556
2394
|
stage: deploy review
|
|
2557
2395
|
image: path/to/docker/gcloud:the-version
|
|
@@ -2669,8 +2507,6 @@ before_script:
|
|
|
2669
2507
|
- set -e
|
|
2670
2508
|
- set -e
|
|
2671
2509
|
- collapseable_section_end "cleanup"
|
|
2672
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
2673
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app2" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
2674
2510
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
2675
2511
|
environment:
|
|
2676
2512
|
name: review/$CI_COMMIT_REF_NAME/app2
|
|
@@ -2694,8 +2530,6 @@ before_script:
|
|
|
2694
2530
|
artifacts: false
|
|
2695
2531
|
- job: 'app2 ๐งช test | review '
|
|
2696
2532
|
artifacts: false
|
|
2697
|
-
- job: 'app2 ๐งพ sbom | review '
|
|
2698
|
-
artifacts: true
|
|
2699
2533
|
- job: 'app2 ๐ก audit | review '
|
|
2700
2534
|
artifacts: false
|
|
2701
2535
|
retry: *a1
|
|
@@ -2721,8 +2555,6 @@ before_script:
|
|
|
2721
2555
|
- set +e
|
|
2722
2556
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/app2 --quiet --delete-tags
|
|
2723
2557
|
- set -e
|
|
2724
|
-
- echo 'Disabling component in Dependency Track'
|
|
2725
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app2" "$CI_ENVIRONMENT_URL" || true
|
|
2726
2558
|
- set -e
|
|
2727
2559
|
environment:
|
|
2728
2560
|
name: review/$CI_COMMIT_REF_NAME/app2
|
|
@@ -2915,28 +2747,6 @@ before_script:
|
|
|
2915
2747
|
- 'app2 ๐จ app | stage '
|
|
2916
2748
|
retry: *a1
|
|
2917
2749
|
interruptible: true
|
|
2918
|
-
'app2 ๐งพ sbom | stage ':
|
|
2919
|
-
stage: build
|
|
2920
|
-
image:
|
|
2921
|
-
name: aquasec/trivy:0.58.2
|
|
2922
|
-
entrypoint:
|
|
2923
|
-
- ''
|
|
2924
|
-
variables: {}
|
|
2925
|
-
script:
|
|
2926
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
2927
|
-
- collapseable_section_end "injectvars"
|
|
2928
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app2
|
|
2929
|
-
artifacts:
|
|
2930
|
-
paths:
|
|
2931
|
-
- __sbom.json
|
|
2932
|
-
rules:
|
|
2933
|
-
- when: never
|
|
2934
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
2935
|
-
- if: $CI_COMMIT_TAG
|
|
2936
|
-
needs: []
|
|
2937
|
-
retry: *a1
|
|
2938
|
-
interruptible: true
|
|
2939
|
-
allow_failure: true
|
|
2940
2750
|
'app2 ๐ Deploy | stage ':
|
|
2941
2751
|
stage: deploy stage
|
|
2942
2752
|
image: path/to/docker/gcloud:the-version
|
|
@@ -3051,8 +2861,6 @@ before_script:
|
|
|
3051
2861
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2@$version --quiet --delete-tags; done
|
|
3052
2862
|
- set -e
|
|
3053
2863
|
- collapseable_section_end "cleanup"
|
|
3054
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
3055
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app2" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
3056
2864
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
3057
2865
|
environment:
|
|
3058
2866
|
name: stage/app2
|
|
@@ -3071,8 +2879,6 @@ before_script:
|
|
|
3071
2879
|
artifacts: false
|
|
3072
2880
|
- job: 'app2 ๐จ docker | stage '
|
|
3073
2881
|
artifacts: false
|
|
3074
|
-
- job: 'app2 ๐งพ sbom | stage '
|
|
3075
|
-
artifacts: true
|
|
3076
2882
|
retry: *a1
|
|
3077
2883
|
interruptible: true
|
|
3078
2884
|
allow_failure: false
|
|
@@ -3093,8 +2899,6 @@ before_script:
|
|
|
3093
2899
|
- gcloud run services delete pan-test-app-stage-app2 --project=asdf --region=asia-east1
|
|
3094
2900
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/app2 --quiet --delete-tags
|
|
3095
2901
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2@$version --quiet --delete-tags; done
|
|
3096
|
-
- echo 'Disabling component in Dependency Track'
|
|
3097
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app2" "$CI_ENVIRONMENT_URL" || true
|
|
3098
2902
|
- set -e
|
|
3099
2903
|
environment:
|
|
3100
2904
|
name: stage/app2
|
|
@@ -3287,28 +3091,6 @@ before_script:
|
|
|
3287
3091
|
- 'app2 ๐จ app | prod '
|
|
3288
3092
|
retry: *a1
|
|
3289
3093
|
interruptible: true
|
|
3290
|
-
'app2 ๐งพ sbom | prod ':
|
|
3291
|
-
stage: build
|
|
3292
|
-
image:
|
|
3293
|
-
name: aquasec/trivy:0.58.2
|
|
3294
|
-
entrypoint:
|
|
3295
|
-
- ''
|
|
3296
|
-
variables: {}
|
|
3297
|
-
script:
|
|
3298
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
3299
|
-
- collapseable_section_end "injectvars"
|
|
3300
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" app2
|
|
3301
|
-
artifacts:
|
|
3302
|
-
paths:
|
|
3303
|
-
- __sbom.json
|
|
3304
|
-
rules:
|
|
3305
|
-
- when: never
|
|
3306
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
3307
|
-
- if: $CI_COMMIT_TAG
|
|
3308
|
-
needs: []
|
|
3309
|
-
retry: *a1
|
|
3310
|
-
interruptible: true
|
|
3311
|
-
allow_failure: true
|
|
3312
3094
|
'app2 ๐ Deploy | prod ':
|
|
3313
3095
|
stage: deploy prod
|
|
3314
3096
|
image: path/to/docker/gcloud:the-version
|
|
@@ -3423,8 +3205,6 @@ before_script:
|
|
|
3423
3205
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2@$version --quiet --delete-tags; done
|
|
3424
3206
|
- set -e
|
|
3425
3207
|
- collapseable_section_end "cleanup"
|
|
3426
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
3427
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app2" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
3428
3208
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
3429
3209
|
environment:
|
|
3430
3210
|
name: prod/app2
|
|
@@ -3443,8 +3223,6 @@ before_script:
|
|
|
3443
3223
|
artifacts: false
|
|
3444
3224
|
- job: 'app2 ๐จ docker | prod '
|
|
3445
3225
|
artifacts: false
|
|
3446
|
-
- job: 'app2 ๐งพ sbom | prod '
|
|
3447
|
-
artifacts: true
|
|
3448
3226
|
retry: *a1
|
|
3449
3227
|
interruptible: true
|
|
3450
3228
|
allow_failure: true
|
|
@@ -3465,8 +3243,6 @@ before_script:
|
|
|
3465
3243
|
- gcloud run services delete pan-test-app-prod-app2 --project=asdf --region=asia-east1
|
|
3466
3244
|
- gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/app2 --quiet --delete-tags
|
|
3467
3245
|
- gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2 --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/app2@$version --quiet --delete-tags; done
|
|
3468
|
-
- echo 'Disabling component in Dependency Track'
|
|
3469
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app2" "$CI_ENVIRONMENT_URL" || true
|
|
3470
3246
|
- set -e
|
|
3471
3247
|
environment:
|
|
3472
3248
|
name: prod/app2
|
|
@@ -3797,28 +3573,6 @@ before_script:
|
|
|
3797
3573
|
- 'kube ๐จ app | dev '
|
|
3798
3574
|
retry: *a1
|
|
3799
3575
|
interruptible: true
|
|
3800
|
-
'kube ๐งพ sbom | dev ':
|
|
3801
|
-
stage: build
|
|
3802
|
-
image:
|
|
3803
|
-
name: aquasec/trivy:0.58.2
|
|
3804
|
-
entrypoint:
|
|
3805
|
-
- ''
|
|
3806
|
-
variables: {}
|
|
3807
|
-
script:
|
|
3808
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
3809
|
-
- collapseable_section_end "injectvars"
|
|
3810
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" kube
|
|
3811
|
-
artifacts:
|
|
3812
|
-
paths:
|
|
3813
|
-
- __sbom.json
|
|
3814
|
-
rules:
|
|
3815
|
-
- when: never
|
|
3816
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
3817
|
-
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
|
|
3818
|
-
needs: []
|
|
3819
|
-
retry: *a1
|
|
3820
|
-
interruptible: true
|
|
3821
|
-
allow_failure: true
|
|
3822
3576
|
'kube ๐ Deploy | dev ':
|
|
3823
3577
|
stage: deploy dev
|
|
3824
3578
|
image: path/to/docker/kubernetes:the-version
|
|
@@ -3985,8 +3739,6 @@ before_script:
|
|
|
3985
3739
|
- collapseable_section_end "writeallvalues"
|
|
3986
3740
|
- kubernetesCreateSecret
|
|
3987
3741
|
- kubernetesDeploy
|
|
3988
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
3989
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/kube" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
3990
3742
|
- echo deployment successful ๐ป
|
|
3991
3743
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
3992
3744
|
environment:
|
|
@@ -4011,8 +3763,6 @@ before_script:
|
|
|
4011
3763
|
artifacts: false
|
|
4012
3764
|
- job: 'kube ๐งช test | dev '
|
|
4013
3765
|
artifacts: false
|
|
4014
|
-
- job: 'kube ๐งพ sbom | dev '
|
|
4015
|
-
artifacts: true
|
|
4016
3766
|
- job: 'kube ๐ก audit | dev '
|
|
4017
3767
|
artifacts: false
|
|
4018
3768
|
retry: *a1
|
|
@@ -4090,8 +3840,6 @@ before_script:
|
|
|
4090
3840
|
- kubectl config set-context "kube-pan-test-app-dev-kube" --cluster="kube-pan-test-app-dev-kube" --user="kube-pan-test-app-dev-kube" --namespace="pan-test-app-dev"
|
|
4091
3841
|
- kubectl config use-context "kube-pan-test-app-dev-kube"
|
|
4092
3842
|
- kubernetesDelete
|
|
4093
|
-
- echo 'Disabling component in Dependency Track'
|
|
4094
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/kube" "$CI_ENVIRONMENT_URL" || true
|
|
4095
3843
|
environment:
|
|
4096
3844
|
name: dev/kube
|
|
4097
3845
|
action: stop
|
|
@@ -4519,28 +4267,6 @@ before_script:
|
|
|
4519
4267
|
- 'kube ๐จ app | review '
|
|
4520
4268
|
retry: *a1
|
|
4521
4269
|
interruptible: true
|
|
4522
|
-
'kube ๐งพ sbom | review ':
|
|
4523
|
-
stage: build
|
|
4524
|
-
image:
|
|
4525
|
-
name: aquasec/trivy:0.58.2
|
|
4526
|
-
entrypoint:
|
|
4527
|
-
- ''
|
|
4528
|
-
variables: {}
|
|
4529
|
-
script:
|
|
4530
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
4531
|
-
- collapseable_section_end "injectvars"
|
|
4532
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" kube
|
|
4533
|
-
artifacts:
|
|
4534
|
-
paths:
|
|
4535
|
-
- __sbom.json
|
|
4536
|
-
rules:
|
|
4537
|
-
- when: never
|
|
4538
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
4539
|
-
- if: $CI_MERGE_REQUEST_ID
|
|
4540
|
-
needs: []
|
|
4541
|
-
retry: *a1
|
|
4542
|
-
interruptible: true
|
|
4543
|
-
allow_failure: true
|
|
4544
4270
|
'kube ๐ Deploy | review ':
|
|
4545
4271
|
stage: deploy review
|
|
4546
4272
|
image: path/to/docker/kubernetes:the-version
|
|
@@ -4708,8 +4434,6 @@ before_script:
|
|
|
4708
4434
|
- collapseable_section_end "writeallvalues"
|
|
4709
4435
|
- kubernetesCreateSecret
|
|
4710
4436
|
- kubernetesDeploy
|
|
4711
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
4712
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/kube" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
4713
4437
|
- echo deployment successful ๐ป
|
|
4714
4438
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
4715
4439
|
environment:
|
|
@@ -4734,8 +4458,6 @@ before_script:
|
|
|
4734
4458
|
artifacts: false
|
|
4735
4459
|
- job: 'kube ๐งช test | review '
|
|
4736
4460
|
artifacts: false
|
|
4737
|
-
- job: 'kube ๐งพ sbom | review '
|
|
4738
|
-
artifacts: true
|
|
4739
4461
|
- job: 'kube ๐ก audit | review '
|
|
4740
4462
|
artifacts: false
|
|
4741
4463
|
retry: *a1
|
|
@@ -4813,8 +4535,6 @@ before_script:
|
|
|
4813
4535
|
- kubectl config set-context "kube-pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-kube" --cluster="kube-pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-kube" --user="kube-pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-kube" --namespace="pan-test-app-review"
|
|
4814
4536
|
- kubectl config use-context "kube-pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-kube"
|
|
4815
4537
|
- kubernetesDelete
|
|
4816
|
-
- echo 'Disabling component in Dependency Track'
|
|
4817
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/kube" "$CI_ENVIRONMENT_URL" || true
|
|
4818
4538
|
environment:
|
|
4819
4539
|
name: review/$CI_COMMIT_REF_NAME/kube
|
|
4820
4540
|
action: stop
|
|
@@ -5125,28 +4845,6 @@ before_script:
|
|
|
5125
4845
|
- 'kube ๐จ app | stage '
|
|
5126
4846
|
retry: *a1
|
|
5127
4847
|
interruptible: true
|
|
5128
|
-
'kube ๐งพ sbom | stage ':
|
|
5129
|
-
stage: build
|
|
5130
|
-
image:
|
|
5131
|
-
name: aquasec/trivy:0.58.2
|
|
5132
|
-
entrypoint:
|
|
5133
|
-
- ''
|
|
5134
|
-
variables: {}
|
|
5135
|
-
script:
|
|
5136
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
5137
|
-
- collapseable_section_end "injectvars"
|
|
5138
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" kube
|
|
5139
|
-
artifacts:
|
|
5140
|
-
paths:
|
|
5141
|
-
- __sbom.json
|
|
5142
|
-
rules:
|
|
5143
|
-
- when: never
|
|
5144
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
5145
|
-
- if: $CI_COMMIT_TAG
|
|
5146
|
-
needs: []
|
|
5147
|
-
retry: *a1
|
|
5148
|
-
interruptible: true
|
|
5149
|
-
allow_failure: true
|
|
5150
4848
|
'kube ๐ Deploy | stage ':
|
|
5151
4849
|
stage: deploy stage
|
|
5152
4850
|
image: path/to/docker/kubernetes:the-version
|
|
@@ -5313,8 +5011,6 @@ before_script:
|
|
|
5313
5011
|
- collapseable_section_end "writeallvalues"
|
|
5314
5012
|
- kubernetesCreateSecret
|
|
5315
5013
|
- kubernetesDeploy
|
|
5316
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
5317
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/kube" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
5318
5014
|
- echo deployment successful ๐ป
|
|
5319
5015
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
5320
5016
|
environment:
|
|
@@ -5334,8 +5030,6 @@ before_script:
|
|
|
5334
5030
|
artifacts: false
|
|
5335
5031
|
- job: 'kube ๐จ docker | stage '
|
|
5336
5032
|
artifacts: false
|
|
5337
|
-
- job: 'kube ๐งพ sbom | stage '
|
|
5338
|
-
artifacts: true
|
|
5339
5033
|
retry: *a1
|
|
5340
5034
|
interruptible: true
|
|
5341
5035
|
allow_failure: false
|
|
@@ -5411,8 +5105,6 @@ before_script:
|
|
|
5411
5105
|
- kubectl config set-context "kube-pan-test-app-stage-kube" --cluster="kube-pan-test-app-stage-kube" --user="kube-pan-test-app-stage-kube" --namespace="pan-test-app-stage"
|
|
5412
5106
|
- kubectl config use-context "kube-pan-test-app-stage-kube"
|
|
5413
5107
|
- kubernetesDelete
|
|
5414
|
-
- echo 'Disabling component in Dependency Track'
|
|
5415
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/kube" "$CI_ENVIRONMENT_URL" || true
|
|
5416
5108
|
environment:
|
|
5417
5109
|
name: stage/kube
|
|
5418
5110
|
action: stop
|
|
@@ -5723,28 +5415,6 @@ before_script:
|
|
|
5723
5415
|
- 'kube ๐จ app | prod '
|
|
5724
5416
|
retry: *a1
|
|
5725
5417
|
interruptible: true
|
|
5726
|
-
'kube ๐งพ sbom | prod ':
|
|
5727
|
-
stage: build
|
|
5728
|
-
image:
|
|
5729
|
-
name: aquasec/trivy:0.58.2
|
|
5730
|
-
entrypoint:
|
|
5731
|
-
- ''
|
|
5732
|
-
variables: {}
|
|
5733
|
-
script:
|
|
5734
|
-
- collapseable_section_start "injectvars" "Injecting variables"
|
|
5735
|
-
- collapseable_section_end "injectvars"
|
|
5736
|
-
- trivy fs --quiet --format cyclonedx --output "__sbom.json" kube
|
|
5737
|
-
artifacts:
|
|
5738
|
-
paths:
|
|
5739
|
-
- __sbom.json
|
|
5740
|
-
rules:
|
|
5741
|
-
- when: never
|
|
5742
|
-
if: $CI_PIPELINE_SOURCE == "trigger"
|
|
5743
|
-
- if: $CI_COMMIT_TAG
|
|
5744
|
-
needs: []
|
|
5745
|
-
retry: *a1
|
|
5746
|
-
interruptible: true
|
|
5747
|
-
allow_failure: true
|
|
5748
5418
|
'kube ๐ Deploy | prod ':
|
|
5749
5419
|
stage: deploy prod
|
|
5750
5420
|
image: path/to/docker/kubernetes:the-version
|
|
@@ -5911,8 +5581,6 @@ before_script:
|
|
|
5911
5581
|
- collapseable_section_end "writeallvalues"
|
|
5912
5582
|
- kubernetesCreateSecret
|
|
5913
5583
|
- kubernetesDeploy
|
|
5914
|
-
- echo 'Uploading SBOM to Dependency Track'
|
|
5915
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/kube" "$ROOT_URL" "__sbom.json" vex.json || true
|
|
5916
5584
|
- echo deployment successful ๐ป
|
|
5917
5585
|
- echo "CL_GITLAB_ENVIRONMENT_URL=$ROOT_URL" >> gitlab_environment.env
|
|
5918
5586
|
environment:
|
|
@@ -5932,8 +5600,6 @@ before_script:
|
|
|
5932
5600
|
artifacts: false
|
|
5933
5601
|
- job: 'kube ๐จ docker | prod '
|
|
5934
5602
|
artifacts: false
|
|
5935
|
-
- job: 'kube ๐งพ sbom | prod '
|
|
5936
|
-
artifacts: true
|
|
5937
5603
|
retry: *a1
|
|
5938
5604
|
interruptible: true
|
|
5939
5605
|
allow_failure: true
|
|
@@ -6009,8 +5675,6 @@ before_script:
|
|
|
6009
5675
|
- kubectl config set-context "kube-pan-test-app-prod-kube" --cluster="kube-pan-test-app-prod-kube" --user="kube-pan-test-app-prod-kube" --namespace="pan-test-app-prod"
|
|
6010
5676
|
- kubectl config use-context "kube-pan-test-app-prod-kube"
|
|
6011
5677
|
- kubernetesDelete
|
|
6012
|
-
- echo 'Disabling component in Dependency Track'
|
|
6013
|
-
- /dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/kube" "$CI_ENVIRONMENT_URL" || true
|
|
6014
5678
|
environment:
|
|
6015
5679
|
name: prod/kube
|
|
6016
5680
|
action: stop
|