Skip to content

Build and Push API #157

Build and Push API

Build and Push API #157

name: Build and Push API
on:
workflow_dispatch:
push:
branches:
- main
paths:
- 'app/api/**'
- '.github/workflows/build-and-push-api.yaml'
pull_request:
types:
-opened
branches:
- main
paths:
- 'app/api/**'
workflow_run:
workflows: [Production Unit Tests]
types:
- completed
env:
TAG: prod
GAR: ${{ secrets.ARTIFACT_REGISTRY }}
CR_SERVICE: cloudrun-service-api
CR_REGION: northamerica-northeast2
jobs:
build-and-push-api:
name: build-and-push-api
runs-on: ubuntu-20.04
# if: ${{ github.event.workflow_run.conclusion == 'success' }}
permissions:
contents: 'read'
id-token: 'write'
steps:
- id: checkout
name: Checkout
uses: actions/checkout@v2
- id: auth
name: Authenticate with Google Cloud
uses: google-github-actions/auth@v1
with:
token_format: access_token
workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITY_PROVIDER }}
service_account: ${{ secrets.SERVICE_ACCOUNT }}
access_token_lifetime: 300s
- name: Login to Google Artifact Registry
uses: docker/login-action@v2
with:
registry: ${{ secrets.ARTIFACT_REGISTRY }}
username: oauth2accesstoken
password: ${{ steps.auth.outputs.access_token }}
- name: build-tag-push
run: |
export GAR=${{ env.GAR }}
make build-push-api ${{ env.TAG }}
- name: Redeploy Cloudrun Service
run: |
gcloud run services update ${{ env.CR_SERVICE }} --region=${{ env.CR_REGION }} --image=${{ env.GAR }}api:${{ env.TAG }}