cloudbuild-simple.yaml

# Copyright 2023 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

steps:
  - name: "gcr.io/cloud-builders/docker"
    args: ["build", "-t", "${_IMAGE_APP}", "./sample-apps/simple-app"]
    id: BUILD_SAMPLE_APP
    waitFor: ["-"]

  - name: "gcr.io/cloud-builders/docker"
    args: ["push", "${_IMAGE_APP}"]
    id: PUSH_SAMPLE_APP
    waitFor:
      - BUILD_SAMPLE_APP

  - name: "ubuntu"
    env:
      - "IMAGE_APP=${_IMAGE_APP}"
    script: |
      sed -i s@%SAMPLE_APP_IMAGE%@${IMAGE_APP}@g run-service-simple.yaml
    id: REPLACE_YAML_VALUE
    waitFor:
      - PUSH_SAMPLE_APP

  - name: "gcr.io/google.com/cloudsdktool/cloud-sdk:slim"
    entrypoint: gcloud
    args:
      [
        "run",
        "services",
        "replace",
        "run-service-simple.yaml",
        "--region",
        "${_REGION}",
      ]
    id: DEPLOY_MULTICONTAINER
    waitFor:
      - PUSH_SAMPLE_APP
      - REPLACE_YAML_VALUE

  - name: "gcr.io/google.com/cloudsdktool/cloud-sdk:slim"
    entrypoint: gcloud
    args:
      [
        "run",
        "services",
        "set-iam-policy",
        "my-cloud-run-service",
        "policy.yaml",
        "--region",
        "${_REGION}",
        "--quiet",
      ]
    id: ALLOW_UNAUTHENTICATED
    waitFor:
      - DEPLOY_MULTICONTAINER

substitutions:
  _REGION: ${LOCATION}
  _GCP_PROJECT: ${PROJECT_ID}
  _REGISTRY: ${_REGION}-docker.pkg.dev/${_GCP_PROJECT}/run-gmp
  _IMAGE_APP: ${_REGISTRY}/sample-app
  _SA_NAME: run-gmp-sa

images:
  - ${_IMAGE_APP}

# comment out the following line if you want to run Cloud Build with the existing
# service account with the following roles.
# * roles/iam.serviceAccountUser
# * roles/storage.objectViewer
# * roles/logging.logWriter
# * roles/artifactregistry.createOnPushWriter
# * roles/run.admin
serviceAccount: "projects/${_GCP_PROJECT}/serviceAccounts/${_SA_NAME}@${_GCP_PROJECT}.iam.gserviceaccount.com"

options:
  dynamic_substitutions: true
  logging: CLOUD_LOGGING_ONLY