Hold the production service configuration in a deploy tool

2026-08-20 12:03:48 -07:00
parent 75e37bc02c
commit 4f346ef35e
3 changed files with 87 additions and 23 deletions
@@ -0,0 +1,66 @@
+// Command deploy applies the production cloud run service configuration.
+package main
+
+import (
+	"encoding/json"
+	"log"
+	"os"
+	"os/exec"
+)
+
+const (
+	service  = "heliosian"
+	region   = "us-west1"
+	image    = "us-west1-docker.pkg.dev/heliosian/heliosian/heliosian:latest"
+	identity = "directory@heliosian.iam.gserviceaccount.com"
+	secrets  = "SESSION_KEY=heliosian-session-key:latest," +
+		"GOOGLE_MAPS_SERVER_KEY=heliosian-geocoding-key:latest," +
+		"GOOGLE_MAPS_BROWSER_KEY=heliosian-maps-browser-key:latest"
+)
+
+func clientID() string {
+	if id := os.Getenv("GOOGLE_CLIENT_ID"); id != "" {
+		return id
+	}
+	raw, err := os.ReadFile("creds/oauth-client.json")
+	if err != nil {
+		log.Fatalf("[ERROR] read creds/oauth-client.json (or set GOOGLE_CLIENT_ID): %v", err)
+	}
+	var parsed struct {
+		Web struct {
+			ClientID string `json:"client_id"`
+		} `json:"web"`
+	}
+	if err := json.Unmarshal(raw, &parsed); err != nil || parsed.Web.ClientID == "" {
+		log.Fatal("[ERROR] creds/oauth-client.json is not an oauth web client file")
+	}
+	return parsed.Web.ClientID
+}
+
+func main() {
+	sheet := os.Getenv("DIRECTORY_SHEET")
+	if sheet == "" {
+		log.Fatal("[ERROR] DIRECTORY_SHEET is required")
+	}
+	cmd := exec.Command("gcloud",
+		"run", "deploy", service,
+		"--image", image,
+		"--region", region,
+		"--service-account", identity,
+		"--allow-unauthenticated",
+		"--min-instances", "1",
+		"--max-instances", "1",
+		"--memory", "2Gi",
+		"--concurrency", "250",
+		"--no-cpu-throttling",
+		"--use-http2",
+		"--set-env-vars", "DIRECTORY_SHEET="+sheet+",GOOGLE_CLIENT_ID="+clientID(),
+		"--set-secrets", secrets,
+		"--quiet")
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	log.Printf("deploying %s to %s in %s", image, service, region)
+	if err := cmd.Run(); err != nil {
+		log.Fatalf("[ERROR] deploy: %v", err)
+	}
+}