Deploy Agent to Cloud Run #2
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will deploy source code on Cloud Run when a commit is pushed to | |
| # the "main" branch. | |
| # | |
| # To configure this workflow: | |
| # | |
| # 1. Enable the following Google Cloud APIs: | |
| # | |
| # - Artifact Registry (artifactregistry.googleapis.com) | |
| # - Cloud Build (cloudbuild.googleapis.com) | |
| # - Cloud Run (run.googleapis.com) | |
| # - IAM Credentials API (iamcredentials.googleapis.com) | |
| # | |
| # You can learn more about enabling APIs at | |
| # https://support.google.com/googleapi/answer/6158841. | |
| # | |
| # 2. Create and configure a Workload Identity Provider for GitHub: | |
| # https://github.com/google-github-actions/auth#preferred-direct-workload-identity-federation. | |
| # | |
| # Depending on how you authenticate, you will need to grant an IAM principal | |
| # permissions on Google Cloud: | |
| # | |
| # - Artifact Registry Administrator (roles/artifactregistry.admin) | |
| # - Cloud Run Source Developer (roles/run.sourceDeveloper) | |
| # | |
| # You can learn more about setting IAM permissions at | |
| # https://cloud.google.com/iam/docs/manage-access-other-resources. | |
| # | |
| # 3. Change the values in the "env" block to match your values. | |
| name: 'Deploy Agent to Cloud Run' | |
| on: | |
| push: | |
| branches: | |
| - '"main"' | |
| workflow_dispatch: | |
| env: | |
| PROJECT_ID: ${{secrets.GCP_PROJECT_ID}} | |
| REGION: ${{secrets.GCP_REGION}} | |
| SERVICE: ${{secrets.GCP_SEARCHER_CLOUD_RUN_SERVICE}} | |
| GCP_IDENTITY_PROVIDER: ${{secrets.GCP_IDENTITY_PROVIDER}} | |
| AGENT_DOCKERFILE_PATH: ${{secrets.AGENT_DOCKERFILE_PATH}} | |
| jobs: | |
| deploy: | |
| runs-on: 'ubuntu-latest' | |
| permissions: | |
| contents: 'read' | |
| id-token: 'write' | |
| steps: | |
| - name: 'Checkout' | |
| uses: 'actions/checkout@v4' # actions/checkout@v4 | |
| # Configure Workload Identity Federation and generate an access token. | |
| # | |
| # See https://github.com/google-github-actions/auth for more options, | |
| # including authenticating via a JSON credentials file. | |
| - id: 'auth' | |
| name: 'Authenticate to Google Cloud' | |
| uses: 'google-github-actions/auth@f112390a2df9932162083945e46d439060d66ec2' # google-github-actions/auth@v2 | |
| with: | |
| workload_identity_provider: '${env.GCP_IDENTITY_PROVIDER}' | |
| - name: 'Deploy to Cloud Run' | |
| uses: 'google-github-actions/deploy-cloudrun@33553064113a37d688aa6937bacbdc481580be17' # google-github-actions/deploy-cloudrun@v2 | |
| with: | |
| service: '${{ env.SERVICE }}' | |
| region: '${{ env.REGION }}' | |
| # NOTE: If using a different source folder, update the image name below: | |
| source: '${{env.AGENT_DOCKERFILE_PATH}}' | |
| # If required, use the Cloud Run URL output in later steps | |
| - name: 'Show output' | |
| run: |- | |
| echo ${{ steps.deploy.outputs.url }} |