Bump google-github-actions/auth from 0.8.1 to 2.0.1 #145
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # | |
| # Requires secrets: | |
| # GCP_HOST_GCR The base host of the Google Cloud Registry | |
| # GCP_REGISTRY_PROJECT_ID The GCP Project ID of the Google Cloud Registry | |
| # GCP_SA_KEY_GCR_PUSHER The GCP Service Account key used to push on the Google Cloud Registry | |
| # GCP_GCR_REPOSITORY The repository name of the app on the Google Cloud Registry | |
| # GCP_SA_KEY_CLOUDRUN_DEPLOYER The GCP Service Account key used to deploy services on Cloud Run | |
| # GCP_PROJECT_ID The GCP Project ID to deploy the app | |
| # GCP_CLOUDRUN_SERVICE The name of the Cloud Run service to deploy | |
| # GCP_ZONE The region of the Cloud Run service | |
| # | |
| on: | |
| push: | |
| branches: [ master ] | |
| pull_request: | |
| release: | |
| types: [ published ] | |
| env: | |
| IMAGE: ${{ secrets.GCP_HOST_GCR }}/${{ secrets.GCP_REGISTRY_PROJECT_ID }}/${{ secrets.GCP_GCR_REPOSITORY }} | |
| TAG: ${{ github.ref_name }}-${{ github.sha }} | |
| jobs: | |
| test: | |
| name: Test app | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Setup Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.9' | |
| architecture: 'x64' | |
| - name: Get Cache | |
| uses: actions/[email protected] | |
| with: | |
| path: ~/.cache/pip | |
| key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }} | |
| restore-keys: | | |
| ${{ runner.os }}-pip- | |
| ${{ runner.os }}- | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install wheel | |
| pip install -r requirements.txt | |
| - name: Pylint | |
| run: | | |
| pip install pylint | |
| python -m pylint --fail-under=10 `find -regextype egrep -regex '(.*.py)$'` | | |
| tee pylint.txt | |
| - name: Flake8 | |
| run: | | |
| pip install flake8 | |
| flake8 --exit-zero --ignore=E501,W505 . | |
| docker-build-push-gcr: | |
| name: Docker build & push on Google Cloud Registry | |
| runs-on: ubuntu-latest | |
| needs: [ test ] | |
| if: github.event.ref == 'refs/heads/master' || github.event_name == 'release' | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: google-github-actions/[email protected] | |
| with: | |
| credentials_json: ${{ secrets.GCP_SA_KEY_GCR_PUSHER }} | |
| - uses: google-github-actions/setup-gcloud@v0 | |
| with: | |
| project_id: ${{ secrets.GCP_REGISTRY_PROJECT_ID }} | |
| export_default_credentials: true | |
| - name: Configure Docker to use the gcloud command-line tool | |
| run: |- | |
| gcloud --quiet auth configure-docker | |
| - name: Build the Docker image | |
| run: |- | |
| docker build . --compress --tag $IMAGE:$TAG | |
| - name: Push the Docker image to Google Container Registry | |
| run: |- | |
| docker push $IMAGE:$TAG | |
| gcloud container images add-tag $IMAGE:$TAG $IMAGE:latest --quiet | |
| - name: Cleanup old images on Google Container Registry | |
| run: |- | |
| limitDate=$(date "+%Y-%m-%d %H:%M:%S" -d "60 days ago") | |
| digests=$(gcloud container images list-tags $IMAGE \ | |
| --filter="timestamp.datetime < '$limitDate'" \ | |
| --format="get(digest)") | |
| for digest in $digests; do | |
| ( | |
| gcloud container images delete --quiet --force-delete-tags $IMAGE@$digest | |
| ) | |
| done | |
| deploy-staging: | |
| name: Deploy to Staging 🍾 | |
| runs-on: ubuntu-latest | |
| needs: [ docker-build-push-gcr ] | |
| if: github.event.ref == 'refs/heads/master' | |
| environment: staging | |
| steps: | |
| - uses: google-github-actions/[email protected] | |
| with: | |
| credentials_json: ${{ secrets.GCP_SA_KEY_CLOUDRUN_DEPLOYER }} | |
| - uses: google-github-actions/deploy-cloudrun@main | |
| with: | |
| project_id: ${{ secrets.GCP_PROJECT_ID }} | |
| service: ${{ secrets.GCP_CLOUDRUN_SERVICE }} | |
| image: ${{ env.IMAGE }}:${{ env.TAG }} | |
| region: ${{ secrets.GCP_ZONE }} | |
| deploy-prod: | |
| name: Deploy to Prod 🚀 | |
| runs-on: ubuntu-latest | |
| needs: [ docker-build-push-gcr ] | |
| if: github.event_name == 'release' | |
| environment: production | |
| steps: | |
| - uses: google-github-actions/[email protected] | |
| with: | |
| credentials_json: ${{ secrets.GCP_SA_KEY_CLOUDRUN_DEPLOYER }} | |
| - uses: google-github-actions/deploy-cloudrun@main | |
| with: | |
| project_id: ${{ secrets.GCP_PROJECT_ID }} | |
| service: ${{ secrets.GCP_CLOUDRUN_SERVICE }} | |
| image: ${{ env.IMAGE }}:${{ env.TAG }} | |
| region: ${{ secrets.GCP_ZONE }} |