GitHub Actions から CloudRun にデプロイする

name: docker_build

on:
  push:
    branches:
      - "main"

env:
  GCP_REGION: ${{ secrets.GCP_REGION_PRD }}
  IMAGE: asia.gcr.io/${{ secrets.GCP_PROJECT_ID_PRD }}/hoge:${{ github.sha }}

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout the repository
        uses: actions/checkout@v2
      - id: "auth"
        uses: "google-github-actions/auth@v0"
        with:
          credentials_json: "${{ secrets.GCP_SERVICE_ACCOUNT_KEY_PRD }}"
      - name: Configure docker to use the gcloud cli
        run: gcloud auth configure-docker --quiet
      - name: Build a docker image
        run: docker build -t ${{ env.IMAGE }} -f docker/client/prd/Dockerfile .
      - name: Push the docker image
        run: docker push ${{ env.IMAGE }}
      - name: Deploy to Cloud Run
        id: deploy
        uses: google-github-actions/deploy-cloudrun@v0
        with:
          service: hoge
          image: ${{ env.IMAGE }}
          region: ${{ env.GCP_REGION }}

new CloudRunService(this, "hoge-cloud-run", {
  name: "hoge",
  location: "asia-northeast1",
  template: {
    spec: {
      containers: [
        {
          image: "us-docker.pkg.dev/cloudrun/container/hello",
          ports: [
            {
              containerPort: 8080,
            },
          ],
        },
      ],
    },
  },
});

const policy = new DataGoogleIamPolicy(this, "publicAccessPolicy", {
  binding: [
    {
      role: "roles/run.invoker",
      members: ["allUsers"],
    },
  ],
});

new CloudRunServiceIamPolicy(this, "no-auth", {
  service: "hoge",
  policyData: policy.policyData,
  location: "asia-northeast1",
});

new CloudbuildTrigger(this, "hoge-cloud-build", {
  triggerTemplate: {
    branchName: "[^(?!.*main)].*", // 正規表現で書ける
    repoName: "sadnessOjisan/hoge",
  },
  filename: "cloudbuild.yaml",
});

new ContainerRegistry(this, "gcr", {
  project: projectId,
  location: "asia",
});