Merge pull request #173 from openearth/clode-clone-infra

Clode clone infra

.github/workflows/docker-image.yml

@@ -85,10 +85,10 @@ jobs:
         file_name: .env
 
     - name: Build Docker image
-      run: docker build . -f Dockerfile -t containers.deltares.nl/blue_earth_data/dgds-frontend
+      run: docker build . -f Dockerfile -t containers.deltares.nl/${{ secrets.CONTAINER_REPOSITORY }}/dgds-frontend
 
     - name: Push Docker image
-      run: docker push containers.deltares.nl/blue_earth_data/dgds-frontend
+      run: docker push containers.deltares.nl/${{ secrets.CONTAINER_REPOSITORY }}/dgds-frontend
 
   deploy:
     # Add 'id-token' with the intended permissions for workload identity federation

infra/main.tf

@@ -0,0 +1,51 @@
+provider "google" {
+  project = "dgds-i1000482-002"
+  region  = "europe-west4"
+}
+
+resource "google_cloud_run_service" "blue_earth_service" {
+  name     = "blue-earth-service"
+  location = "europe-west4"
+
+  template {
+    spec {
+      containers {
+        image = "europe-west4-docker.pkg.dev/dgds-i1000482-002/dgds-frontend/dgds-frontend:latest"
+
+        ports {
+          container_port = 80
+        }
+      }
+    }
+  }
+}
+
+data "google_iam_policy" "noauth" {
+  binding {
+    role = "roles/run.invoker"
+    members = [
+      "allUsers",
+    ]
+  }
+}
+
+resource "google_cloud_run_service_iam_policy" "noauth" {
+  location    = google_cloud_run_service.blue_earth_service.location
+  project     = google_cloud_run_service.blue_earth_service.project
+  service     = google_cloud_run_service.blue_earth_service.name
+
+  policy_data = data.google_iam_policy.noauth.policy_data
+}
+
+# resource "google_cloud_run_service_iam_binding" "blue_earth_service_binding" {
+#   service = google_cloud_run_service.blue_earth_service.name
+#   location = google_cloud_run_service.blue_earth_service.location
+#   role    = "roles/run.invoker"
+
+#   members = [
+#     "user:<YOUR_EMAIL>",
+#     "group:<YOUR_GROUP>",
+#     "serviceAccount:<YOUR_SERVICE_ACCOUNT>"
+#     # Add more members as needed
+#   ]
+# }