Automate Builds

Use the setup-gcloud action to authenticate with GCP.

I recommend using the simple service account key JSON setup.

Creating a Service Account

1. Go to the IAM & Admin Service Accounts section of the GCP console.
2. Create a service account and name it "Cloud Run Deployer" with these permissions:
   • Cloud Build Editor
   • Cloud Build Service Account
   • Cloud Run Admin
   • Service Account User
   • Viewer
3. Create a JSON key for that service account and download it to your computer.

Add the Key As a Secret in GitHub Actions

4. Go to your GitHub Repo > Repository Settings > Secrets and variables > Actions > New repository secret (not "environment secret" - use a repository secret)
   • Name: GCP_CREDENTIALS
   • Secret: Paste the entire JSON key from the file you downloaded from GCP
5. Save the secret

Update Your GitHub Action Workflow

6. After the buildprod script runs, add the setup-gcloud steps to setup the gcloud CLI and authenticate with GCP.
7. Finally, add a step to build the Docker image and push it to Google Artifact Registry.

gcloud builds submit --tag REGION-docker.pkg.dev/PROJECT_ID/REPOSITORY/IMAGE:TAG .

8. Commit and push your changes to GitHub. You should see the GitHub Action run and successfully build and push the Docker image to Google Artifact Registry.

Paste the URL of your GitHub repo into the box and run the GitHub checks.