Deploy to GCR with Github Actions

Author: fileformat

.dockerignore

@@ -0,0 +1,14 @@
+chart/*
+dist/*
+.editorconfig
+.env
+*.env
+.git/*
+.github/*
+.gitignore
+*.md
+node_modules/*
+nodemon.json
+now.json
+*.sh
+tmp/*

.github/workflows/gcr-deploy.yaml

@@ -0,0 +1,61 @@
+name: build
+
+on:
+  push:
+    branches:
+    - main
+  workflow_dispatch:
+
+# Environment variables available to all jobs and steps in this workflow
+# NOTE: these aren't really secret, but there aren't non-secret settings
+env:
+  RUN_PROJECT: ${{ secrets.RUN_PROJECT }}
+  RUN_REGION: ${{ secrets.RUN_REGION }}
+  RUN_SERVICE: ${{ secrets.RUN_SERVICE }}
+
+jobs:
+  setup-build-deploy:
+    name: Setup, Build, and Deploy
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v1
+
+      # Setup gcloud CLI
+      - uses: GoogleCloudPlatform/github-actions/setup-gcloud@master
+        with:
+          version: '275.0.0'
+          service_account_email: ${{ secrets.GCP_SA_EMAIL }}
+          service_account_key: ${{ secrets.GCP_SA_KEY }}
+
+      # Configure gcloud CLI
+      - name: gcloud Set up
+        run: |
+          gcloud config set project ${RUN_PROJECT}
+
+      # Build and push image to Google Container Registry
+      - name: Build
+        run: |
+          docker build \
+            --build-arg COMMIT=${GITHUB_SHA:0:7} \
+            --build-arg LASTMOD=$(date -u +%Y-%m-%dT%H:%M:%SZ) \
+            --tag gcr.io/${RUN_PROJECT}/${RUN_SERVICE}:$GITHUB_SHA .
+
+      - name: GCloud auth to docker
+        run: |
+          gcloud auth configure-docker
+
+      - name: Push to registry
+        run: |
+          docker push gcr.io/${RUN_PROJECT}/${RUN_SERVICE}:$GITHUB_SHA
+
+      # Deploy image to Cloud Run
+      - name: Deploy
+        run: |
+          gcloud run deploy ${RUN_SERVICE} \
+            --allow-unauthenticated \
+            --image gcr.io/${RUN_PROJECT}/${RUN_SERVICE}:$GITHUB_SHA \
+            --platform managed \
+            --project ${RUN_PROJECT} \
+            --region ${RUN_REGION}

Dockerfile

@@ -0,0 +1,25 @@
+FROM node:14 as base
+RUN groupadd -r appuser && \
+	useradd --create-home --gid appuser --home-dir /app --no-log-init --system appuser
+
+FROM base AS build
+WORKDIR /app
+USER appuser
+COPY --chown=appuser:appuser . .
+RUN yarn install && \
+	yarn run build
+
+FROM base AS run
+ARG COMMIT="(not set)"
+ARG LASTMOD="(not set)"
+ENV COMMIT=$COMMIT
+ENV LASTMOD=$LASTMOD
+WORKDIR /app
+USER appuser
+COPY --chown=appuser:appuser . .
+#COPY --chown=appuser:appuser --from=build /app/dist /app/dist
+RUN yarn install --production
+EXPOSE 4000
+ENV PORT 4000
+CMD ["yarn", "run", "start"]
+

docker-run.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+set -o errexit
+set -o pipefail
+set -o nounset
+
+docker build -t regexplanet-js .
+docker run \
+	-it \
+	--publish 4000:4000 \
+	--expose 4000 \
+	--env PORT='4000' \
+	--env COMMIT=$(git rev-parse --short HEAD)-local \
+	--env LASTMOD=$(date -u +%Y-%m-%dT%H:%M:%SZ) \
+	regexplanet-js
+

package.json

@@ -3,13 +3,12 @@
   "version": "1.0.0",
   "main": "app.js",
   "scripts": {
+    "build": "true",
     "start": "node app.js"
   },
-  "dependencies": {
-    "express": "^4.16.0"
-  },
+  "dependencies": {},
   "engines": {
-    "node": "10"
+    "node": "14"
   },
   "repository": {
     "url": "https://www.github.com/fileformat/regexplanet-js"

yarn.lock

@@ -0,0 +1,4 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+