cloudbuild.yaml

# GCP Cloud Build pipeline for the Schema Summary Evaluator.
#
# Builds the container, pushes it to Artifact Registry, deploys to Cloud Run.
#
# Trigger:
#   gcloud builds submit \
#     --config cloudbuild.yaml \
#     --substitutions=_REGION=us-central1,_REPO=workshop,_SERVICE=evaluator
#
# Required substitutions:
#   _REGION   GCP region (e.g. us-central1)
#   _REPO     Artifact Registry repository name
#   _SERVICE  Cloud Run service name
#
# Required secrets in Secret Manager, mounted as env vars on Cloud Run:
#   GROVE_API_KEY            (always; Grove gateway key for Anthropic)
#   CREDLY_TOKEN             (only if issuing real badges)
#   CREDLY_ORG_ID            (same)
#   CREDLY_BADGE_TEMPLATE_ID (same)
#
# This file lives in evaluator/. Run gcloud from this directory, or pass
# `--config evaluator/cloudbuild.yaml` from the repo root.

steps:
  # 1. Build the container image.
  - name: gcr.io/cloud-builders/docker
    id: build
    args:
      - build
      - --tag
      - ${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPO}/${_SERVICE}:$SHORT_SHA
      - --tag
      - ${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPO}/${_SERVICE}:latest
      - --file
      - Dockerfile
      - .

  # 2. Push both tags to Artifact Registry.
  - name: gcr.io/cloud-builders/docker
    id: push
    args:
      - push
      - --all-tags
      - ${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPO}/${_SERVICE}

  # 3. Deploy to Cloud Run. Secrets bound from Secret Manager; CREDLY_DRY_RUN
  #    defaults to 1 so the workshop event must explicitly enable real badges.
  - name: gcr.io/google.com/cloudsdktool/cloud-sdk
    id: deploy
    entrypoint: gcloud
    args:
      - run
      - deploy
      - ${_SERVICE}
      - --image=${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPO}/${_SERVICE}:$SHORT_SHA
      - --region=${_REGION}
      - --platform=managed
      - --allow-unauthenticated
      - --port=8080
      - --memory=512Mi
      - --cpu=1
      - --concurrency=80
      - --min-instances=0
      - --max-instances=10
      - --timeout=120
      - --set-env-vars=CREDLY_DRY_RUN=1,ANTHROPIC_MODEL=claude-opus-4-7
      - --set-secrets=GROVE_API_KEY=GROVE_API_KEY:latest

images:
  - ${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPO}/${_SERVICE}:$SHORT_SHA
  - ${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPO}/${_SERVICE}:latest

options:
  logging: CLOUD_LOGGING_ONLY

substitutions:
  _REGION: us-central1
  _REPO: workshop
  _SERVICE: evaluator