build-and-push-api.yaml

name: Build and Push API

on:
  workflow_dispatch:
  push:
    branches: 
      - main
    paths:
      - 'app/api/**'
      - '.github/workflows/build-and-push-api.yaml'
  pull_request:
    types:
      -opened
    branches: 
      - main
    paths:
      - 'app/api/**'
  workflow_run:
    workflows: [Production Unit Tests]
    types: 
      - completed

env:
  TAG: prod
  GAR: ${{ secrets.ARTIFACT_REGISTRY }}
  CR_SERVICE: cloudrun-service-api
  CR_REGION: northamerica-northeast2

jobs:
  build-and-push-api:
    name: build-and-push-api
    runs-on: ubuntu-20.04
    # if: ${{ github.event.workflow_run.conclusion == 'success' }}
    
    permissions:
      contents: 'read'
      id-token: 'write'

    steps:
      - id: checkout
        name: Checkout
        uses: actions/checkout@v2
      
      - id: auth
        name: Authenticate with Google Cloud
        uses: google-github-actions/auth@v1
        with: 
          token_format: access_token
          workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITY_PROVIDER }}
          service_account: ${{ secrets.SERVICE_ACCOUNT }}
          access_token_lifetime: 300s
        
      - name: Login to Google Artifact Registry
        uses: docker/login-action@v2
        with:
          registry: ${{ secrets.ARTIFACT_REGISTRY }}
          username: oauth2accesstoken
          password: ${{ steps.auth.outputs.access_token }}

      - name: build-tag-push
        run: |
              export GAR=${{ env.GAR }}
              make build-push-api ${{ env.TAG }}
      - name: Redeploy Cloudrun Service
        run: |
          gcloud run services update ${{ env.CR_SERVICE }} --region=${{ env.CR_REGION }} --image=${{ env.GAR }}api:${{ env.TAG }}