@catladder/pipeline 4.6.3 → 4.7.0

package/dist/constants.js

@@ -4,5 +4,5 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "v4-6-3-7b1103aa" || "latest";
+exports.PIPELINE_IMAGE_TAG = "v4-7-0-9922ea65" || "latest";
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || "git.panter.ch:5001/catladder/catladder";

package/dist/deploy/cloudRun/index.js

@@ -137,5 +137,17 @@ exports.GCLOUD_RUN_DEPLOY_TYPE = {
       DEPLOY_CLOUD_RUN_PROJECT_ID: deployConfigRaw ? deployConfigRaw.projectId : undefined,
       DEPLOY_CLOUD_RUN_REGION: deployConfigRaw ? deployConfigRaw.region : undefined
     });
+  },
+  verifyJobSetupScript: function (context) {
+    var _a;
+    var deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    var service = deployConfig === null || deployConfig === void 0 ? void 0 : deployConfig.service;
+    var serviceConfig = typeof service === "object" ? service : undefined;
+    if ((serviceConfig === null || serviceConfig === void 0 ? void 0 : serviceConfig.allowUnauthenticated) !== false) {
+      return [];
+    }
+    // the service requires IAM auth: provide application default credentials
+    // so the verify command can fetch identity tokens for the deployed service
+    return (0, gitlab_1.collapseableSection)("verifygcloudauth", "Setup google application credentials")(["echo \"$".concat(exports.GCLOUD_DEPLOY_CREDENTIALS_KEY, "\" > \"$CI_PROJECT_DIR/.gcloud-sa.json\""), "export GOOGLE_APPLICATION_CREDENTIALS=\"$CI_PROJECT_DIR/.gcloud-sa.json\""]);
   }
 };

package/dist/deploy/index.d.ts

@@ -14,6 +14,11 @@ export type DeployTypeDefinition<D extends DeployConfig> = {
   defaults: (envContext: EnvironmentContext<BuildConfig, D>) => PartialDeep<D>;
   additionalSecretKeys: (envContext: EnvironmentContext<BuildConfig, D>) => SecretEnvVar[];
   getAdditionalEnvVars: (envContext: EnvironmentContext<BuildConfig, D>) => Record<string, string | BashExpression | undefined | null>;
+  /**
+   * script lines the deploy type contributes to the start of the verify job,
+   * e.g. to authenticate against a non-public service
+   */
+  verifyJobSetupScript?: (context: ComponentContext) => string[];
 };
 export type DeployTypes = { [T in DeployConfigType]: DeployTypeDefinition<DeployConfigGeneric<T>> };
 export declare const DEPLOY_TYPES: DeployTypes;

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export * from "./config";
 export * from "./context";
 export * from "./build";
 export * from "./deploy";
+export * from "./verify";
 export * from "./utils/writeFiles";
 export * from "./utils/measureTime";
 export * from "./variables/VariableValue";

package/dist/index.js

@@ -30,6 +30,7 @@ __exportStar(require("./config"), exports);
 __exportStar(require("./context"), exports);
 __exportStar(require("./build"), exports);
 __exportStar(require("./deploy"), exports);
+__exportStar(require("./verify"), exports);
 __exportStar(require("./utils/writeFiles"), exports);
 __exportStar(require("./utils/measureTime"), exports);
 __exportStar(require("./variables/VariableValue"), exports);

package/dist/pipeline/createJobsForComponent.js

@@ -170,6 +170,7 @@ Object.defineProperty(exports, "__esModule", {
 exports.createJobsForComponentContext = void 0;
 var build_1 = require("../build");
 var deploy_1 = require("../deploy");
+var createVerifyJobs_1 = require("../verify/createVerifyJobs");
 var injectDefaultVarsInCustomJobs = function (context, jobs) {
   return jobs.map(function (_a) {
     var _b;
@@ -189,15 +190,15 @@ var getCustomJobs = function (context) {
 };
 var createJobsForComponentContext = function (context) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var _a, buildJobs, deployJobs, customJobs;
+    var _a, buildJobs, deployJobs, verifyJobs, customJobs;
     return __generator(this, function (_b) {
       switch (_b.label) {
         case 0:
-          return [4 /*yield*/, Promise.all([context.build.type !== "disabled" ? build_1.BUILD_TYPES[context.build.buildType].jobs(context) : [], context.componentConfig.deploy !== false ? deploy_1.DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context) : []])];
+          return [4 /*yield*/, Promise.all([context.build.type !== "disabled" ? build_1.BUILD_TYPES[context.build.buildType].jobs(context) : [], context.componentConfig.deploy !== false ? deploy_1.DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context) : [], (0, createVerifyJobs_1.createVerifyJobs)(context)])];
         case 1:
-          _a = __read.apply(void 0, [_b.sent(), 2]), buildJobs = _a[0], deployJobs = _a[1];
+          _a = __read.apply(void 0, [_b.sent(), 3]), buildJobs = _a[0], deployJobs = _a[1], verifyJobs = _a[2];
           customJobs = getCustomJobs(context);
-          return [2 /*return*/, __spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(customJobs), false)];
+          return [2 /*return*/, __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(verifyJobs), false), __read(customJobs), false)];
       }
     });
   });