Automate Builds

Now that we've built the Docker image locally, let's build it automatically on every push to the main branch.

Assignment

Use the setup-gcloud action to authenticate with GCP.

I recommend using the simple service account key JSON setup.

Creating a Service Account

Go to the IAM & Admin Service Accounts section of the GCP console.
Create a service account and name it "Cloud Run Deployer" with these permissions:
- Cloud Build Editor
- Cloud Build Service Account
- Cloud Run Admin
- Service Account User
- Viewer
Create a JSON key for that service account and download it to your computer.

Add the Key As a Secret in GitHub Actions

Go to your GitHub Repo > Repository Settings > Secrets and variables > Actions > New repository secret (not "environment secret" - use a repository secret)
- Name: GCP_CREDENTIALS
- Secret: Paste the entire JSON key from the file you downloaded from GCP
Save the secret

Update Your GitHub Action Workflow

After the buildprod script runs, add the setup-gcloud steps to setup the gcloud CLI and authenticate with GCP.
Finally, add a step to build the Docker image and push it to Google Artifact Registry.

gcloud builds submit --tag REGION-docker.pkg.dev/PROJECT_ID/REPOSITORY/IMAGE:TAG .

You can copy/paste your actual value for the tag from your Artifact Registry repo page in the GCP console.

Commit and push your changes to GitHub. You should see the GitHub Action run and successfully build and push the Docker image to Google Artifact Registry.

Paste the URL of your GitHub repo into the box and run the GitHub checks.