capstone-serverless/.github/workflows/deploy-gcf.yaml at main · iamgp21/capstone-serverless · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
name: Deploy Cloud Function

on:
  workflow_dispatch:

  push:
    # branches:
    #   - dev

    paths:
      - src/**
      - .github/workflows/deploy-gcf.yaml

jobs:
  deploy-cloud-function:
    runs-on: 'ubuntu-latest'
    permissions:
      contents: 'read'
      id-token: 'write'

    steps:
    - uses: 'actions/checkout@v4'

    - id: "auth"
      name: "Authenticate to Google Cloud"
      uses: 'google-github-actions/auth@v2'
      with:
        # token_format: 'access_token'
        workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER_NAME }}
        service_account: ${{ secrets.GCP_WORKLOAD_IDENTITY_SA_EMAIL }}

    - id: 'deploy'
      name: 'Deploy Function'
      uses: 'google-github-actions/deploy-cloud-functions@v2.1.0'
      with:
        name: 'github-cf'
        runtime: 'python312'
        entry_point: 'trigger'
        memory_mb: '128'
        region: 'asia-south1'
        project_id: '${{ vars.GCP_PROJECT }}'
        # vpc_connector: 'connector01'
        # vpc_connector_egress_settings: 'ALL_TRAFFIC'
        ingress_settings: 'ALLOW_ALL'
        service_account_email: '${{ vars.RUNTIME_SERVICE_ACCOUNT }}'
        timeout: '60'
        min_instances: '0'
        max_instances: '1'
        secret_environment_variables: 'GITHUB_PAT=${{ secrets.SECRET_PAT }},LOKI_TENANT=${{ secrets.LOKI_TENANT }},LOKI_APITOKEN=${{ secrets.LOKI_APITOKEN }}' ## format should be: projects/project_name/secrets/secret_name/versions/version_number
        build_environment_variables: 'GOOGLE_FUNCTION_SOURCE=main.py'
        event_trigger_type: '${{ vars.EVENT_TRIGGER_TYPE }}'
        event_trigger_resource: '${{ vars.PUBSUB_TOPIC_NAME }}'
        event_trigger_retry: 'false'
        source_dir: './src'
        docker_registry: 'ARTIFACT_REGISTRY'