update

Author: mrofisr

.github/workflows/deployment.yaml

@@ -62,6 +62,8 @@ jobs:
       - name: Deploy to Cloud Run Backend
         id: deploy-cloud-run-back
         uses: google-github-actions/deploy-cloudrun@v2
+        env:
+          PORT: 4000
         with:
           service: cloud-run-backend-${{ env.IMAGE_VERSION }}
           image: us-central1-docker.pkg.dev/${{ secrets.PROJECT_ID }}/cloud-run/cloud-run-back:${{ env.IMAGE_VERSION }}
@@ -71,6 +73,8 @@ jobs:
       - name: Deploy to Cloud Run Frontend
         id: deploy-cloud-run-front
         uses: google-github-actions/deploy-cloudrun@v2
+        env:
+          PORT: 80
         with:
           service: cloud-run-frontend-${{ env.IMAGE_VERSION }}
           image: us-central1-docker.pkg.dev/${{ secrets.PROJECT_ID }}/cloud-run/cloud-run-front:${{ env.IMAGE_VERSION }}

Dockerfile.back

@@ -5,5 +5,5 @@ RUN npm i
 RUN npm run build_back
 WORKDIR /back/build
 RUN npm i
-EXPOSE 8080
+EXPOSE 4000
 CMD ["node", "index.js"]

Dockerfile.front

@@ -11,5 +11,5 @@ FROM nginx:alpine-slim
 COPY --from=builder /front/build /front/build
 RUN chmod -R 755 /front/build/.
 COPY nginx.conf /etc/nginx/nginx.conf
-EXPOSE 8080
+EXPOSE 80
 CMD ["nginx", "-g", "daemon off;"]

README.md

@@ -27,6 +27,9 @@ gcloud projects add-iam-policy-binding "${PROJECT_ID}" \
 - Create a new Workload Identity Pool
 
 ```bash
+export REPO_OWNER="your-github-username"
+export REPO_NAME="your-repo-name"
+
 gcloud iam workload-identity-pools create "github" \
   --project="${PROJECT_ID}" \
   --location="global" \
@@ -56,3 +59,19 @@ gcloud iam service-accounts add-iam-policy-binding ${SA_EMAIL} \
   --role="roles/iam.workloadIdentityUser" \
   --member="principalSet://iam.googleapis.com/${WORKLOAD_POOL}/attribute.repository/${REPO_OWNER}/${REPO_NAME}"
 ```
+
+- Create a new GitHub Secret
+
+```bash
+WORKLOAD_IDENTITY_PROVIDER value is the output of the following command
+gcloud iam workload-identity-pools providers describe "github-repo-provider" \
+  --project="${PROJECT_ID}" \
+  --location="global" \
+  --workload-identity-pool="github" \
+  --format="value(name)"
+
+PROJECT_ID value is your project id
+
+SERVICE_ACCOUNT value is the email of the service account
+cloud-run-sa@${PROJECT_ID}.iam.gserviceaccount.com
+```

back/index.ts

@@ -11,6 +11,6 @@ app.get('/api/hello', (_req: Request, res: Response) =>
   res.json({ message: 'hello' }),
 )
 
-app.listen(8080, () => {
-  console.info(`🚀 express http server started at http://localhost:${8080}`)
+app.listen(4000, () => {
+  console.info(`🚀 express http server started at http://localhost:${4000}`)
 })

docker-compose.yml

@@ -12,6 +12,6 @@ services:
     build:
       dockerfile: ./Dockerfile.front
     ports:
-      - '80:80'
+      - '8080:80'
     depends_on:
       - backend

nginx.conf

@@ -8,7 +8,7 @@ http {
   }
 
   server {
-    listen 8080;
+    listen 80;
     server_name _;
     index index.html index.htm;