🔧 Enable sentry release

.github/workflows/deploy-prod.yml

@@ -5,21 +5,17 @@ on:
     branches:
       - 'deploy/main'
 
-env:
-  PROJECT_ID: ${{ secrets.GKE_PROJECT }}
-  GKE_CLUSTER: ${{ secrets.GKE_CLUSTER }}
-  GKE_ZONE: ${{ secrets.GKE_ZONE }}
-  DEPLOYMENT_NAME: ${{ secrets.DEPLOYMENT_NAME }}
-  IMAGE: ${{ secrets.GCR_IMAGE }}
-  GA_TRACKING_ID: ${{ secrets.GA_TRACKING_ID }}
-  SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
-
 jobs:
   setup-build-publish-deploy:
     name: Setup, Build, Publish, and Deploy
     runs-on: ubuntu-latest
     environment: production
-
+    env:
+      PROJECT_ID: ${{ secrets.GKE_PROJECT }}
+      GKE_CLUSTER: ${{ secrets.GKE_CLUSTER }}
+      GKE_ZONE: ${{ secrets.GKE_ZONE }}
+      DEPLOYMENT_NAME: ${{ secrets.DEPLOYMENT_NAME }}
+      IMAGE: ${{ secrets.GCR_IMAGE }}
     steps:
     - name: Checkout
       uses: actions/checkout@master
@@ -56,8 +52,12 @@ jobs:
         build-args: |
           "GITHUB_SHA=${{ github.sha }}"
           "GITHUB_REF=${{ github.ref }}"
-          "GA_TRACKING_ID=${{ env.GA_TRACKING_ID }}"
-          "SENTRY_DSN=${{ env.SENTRY_DSN }}"
+          "GA_TRACKING_ID=${{ secrets.GA_TRACKING_ID }}"
+          "RELEASE=${{ github.sha }}"
+          "SENTRY_DSN=${{ vars.SENTRY_DSN }}"
+          "SENTRY_ORG=${{ vars.SENTRY_ORG }}"
+          "SENTRY_PROJECT=${{ vars.SENTRY_PROJECT }}"
+          "SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }}"
 
     # Deploy the Docker image to the GKE cluster
     - name: Deploy

.github/workflows/deploy-rinkeby.yml

@@ -5,20 +5,18 @@ on:
     branches:
       - 'deploy/rinkeby'
 
-env:
-  PROJECT_ID: ${{ secrets.GKE_PROJECT }}
-  GKE_CLUSTER: ${{ secrets.GKE_CLUSTER }}
-  GKE_ZONE: ${{ secrets.GKE_ZONE }}
-  DEPLOYMENT_NAME: ${{ secrets.DEPLOYMENT_NAME }}
-  IMAGE: ${{ secrets.GCR_IMAGE }}
-  SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
-  IS_TESTNET: 'TRUE'
-
 jobs:
   setup-build-publish-deploy:
     name: Setup, Build, Publish, and Deploy
     runs-on: ubuntu-latest
     environment: rinkeby
+    env:
+      PROJECT_ID: ${{ secrets.GKE_PROJECT }}
+      GKE_CLUSTER: ${{ secrets.GKE_CLUSTER }}
+      GKE_ZONE: ${{ secrets.GKE_ZONE }}
+      DEPLOYMENT_NAME: ${{ secrets.DEPLOYMENT_NAME }}
+      IMAGE: ${{ secrets.GCR_IMAGE }}
+      IS_TESTNET: 'TRUE'
 
     steps:
     - name: Checkout
@@ -57,6 +55,11 @@ jobs:
           "IS_TESTNET=${{ env.IS_TESTNET }}"
           "GITHUB_SHA=${{ github.sha }}"
           "GITHUB_REF=${{ github.ref }}"
+          "RELEASE=${{ github.sha }}"
+          "SENTRY_DSN=${{ vars.SENTRY_DSN }}"
+          "SENTRY_ORG=${{ vars.SENTRY_ORG }}"
+          "SENTRY_PROJECT=${{ vars.SENTRY_PROJECT }}"
+          "SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }}"
 
     # Deploy the Docker image to the GKE cluster
     - name: Deploy

Dockerfile

@@ -9,8 +9,16 @@ ARG IS_TESTNET
 ENV IS_TESTNET ${IS_TESTNET}
 ARG GA_TRACKING_ID
 ENV GA_TRACKING_ID ${GA_TRACKING_ID}
+ARG RELEASE
+ENV RELEASE ${RELEASE}
 ARG SENTRY_DSN
 ENV SENTRY_DSN ${SENTRY_DSN}
+ARG SENTRY_ORG
+ENV SENTRY_ORG ${SENTRY_ORG}
+ARG SENTRY_PROJECT
+ENV SENTRY_PROJECT ${SENTRY_PROJECT}
+ARG SENTRY_AUTH_TOKEN
+ENV SENTRY_AUTH_TOKEN ${SENTRY_AUTH_TOKEN}
 ENV NODE_ENV production
 COPY ./ ./
 RUN yarn build

nuxt.config.js

@@ -10,6 +10,7 @@ const {
   CI,
   GA_TRACKING_ID,
   SENTRY_DSN,
+  RELEASE,
 } = process.env;
 
 export default {
@@ -105,6 +106,14 @@ export default {
           "'unsafe-inline'",
           'fonts.googleapis.com',
         ],
+        'worker-src': [
+          "'self'",
+          'blob:',
+        ],
+        'child-src': [
+          "'self'",
+          'blob:',
+        ],
       },
     },
   },
@@ -159,7 +168,7 @@ export default {
 
   sentry: {
     config: {
-      ignoreErrors: ['WebAssembly.instantiate'],
+      release: RELEASE,
     },
     tracing: {
       tracesSampleRate: IS_TESTNET ? 1.0 : 0.1,
@@ -171,9 +180,16 @@ export default {
         routeLabel: 'name',
       },
     },
+    publishRelease: !!RELEASE,
     clientIntegrations: {
       /* default integrations will still be added due to deep-merge */
       ReportingObserver: false, // reporting is very noisy on CSP violation.
+      Replay: {},
+    },
+    clientConfig: {
+      ignoreErrors: ['WebAssembly.instantiate'],
+      replaysSessionSampleRate: IS_TESTNET ? 1.0 : 0.05,
+      replaysOnErrorSampleRate: IS_TESTNET ? 1.0 : 1.0,
     },
   },
   sitemap: {

package.json

@@ -78,6 +78,7 @@
     "@nuxtjs/storybook": "^4.1.1",
     "@nuxtjs/stylelint-module": "^4.0.0",
     "@nuxtjs/tailwindcss": "^5.3.5",
+    "@sentry/webpack-plugin": "2",
     "@types/lodash.chunk": "^4.2.6",
     "@types/lodash.debounce": "^4.0.6",
     "@types/mime-types": "^2.1.1",