1
2
3
4
5
6

.
├── app
│   ├── __init__.py
│   └── main.py
├── Dockerfile
└── requirements.txt

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

# main.py
from fastapi import FastAPI
from typing import Union

app = FastAPI()


@app.get("/")
def read_root():
    return {"Hello": "World"}


@app.get("/items/{item_id}")
def read_item(item_id: int, q: Union[str, None] = None):
    return {"item_id": item_id, "q": q}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# Dockerfile
FROM python:3.12-slim
WORKDIR /code
COPY ./requirements.txt /code/requirements.txt
RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
COPY ./app /code/app
# 常見的形式是：CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "80"]
# 但因 Cloud Run 預設的 Port 是 8080，且會當作環境變數傳入到 build image 的過程中
# 若採用上方寫法會產生問題，所以需寫成下方的形式，$PORT 會去吃在 build image 時的環境變數 Port 
CMD uvicorn app.main:app --host 0.0.0.0 --port $PORT

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

name: Build and Deploy to Cloud Run

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

env:
  PROJECT_ID: 請放入你的 Google Cloud 專案 ID
  GAR_LOCATION: asia-east1 (依讀者需求調整 Artifact Registry 的存放位置，台灣是 asia-east1)
  SERVICE: 請放入你在步驟 5 建立的 repo 名稱
  REGION: asia-east1 (依讀者需求調整 Cloud Run 的位置，台灣是 asia-east1)

jobs:
  build-and-deploy:
    permissions:
      contents: 'read'
      id-token: 'write'

    runs-on: ubuntu-latest
    steps:

      - name: Checkout
        uses: actions/checkout@v2
        
      # 官方提供的版本較舊：'google-github-actions/auth@v0'
      - name: Google Auth
        id: auth
        uses: 'google-github-actions/auth@v2'
        with:
          token_format: 'access_token'
          workload_identity_provider: '${{ secrets.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
          service_account: '${{ secrets.WIF_SERVICE_ACCOUNT }}' # e.g. - my-service-account@my-project.iam.gserviceaccount.com

      # 官方提供的版本較舊：'docker/login-action@v1'
      - name: Docker Auth
        id: docker-auth
        uses: 'docker/login-action@v3'
        with:
          username: 'oauth2accesstoken'
          password: '${{ steps.auth.outputs.access_token }}'
          registry: '${{ env.GAR_LOCATION }}-docker.pkg.dev'

      # 官方提供的路徑有錯，原為 /${{ env.SERVICE }}:${{ github.sha }}，應為 /${{ env.SERVICE }}/${{ env.SERVICE }}:${{ github.sha }}
      - name: Build and Push Container
        run: |-
          docker build -t "${{ env.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.SERVICE }}/${{ env.SERVICE }}:${{ github.sha }}" ./
          docker push "${{ env.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.SERVICE }}/${{ env.SERVICE }}:${{ github.sha }}"          
      
      # 官方提供的路徑有錯，原為 /${{ env.SERVICE }}:${{ github.sha }}，應為 /${{ env.SERVICE }}/${{ env.SERVICE }}:${{ github.sha }}
      # 官方提供的版本較舊：uses: google-github-actions/deploy-cloudrun@v0
      - name: Deploy to Cloud Run
        id: deploy
        uses: google-github-actions/deploy-cloudrun@v2
        with:
          service: ${{ env.SERVICE }}
          region: ${{ env.REGION }}
          image: ${{ env.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.SERVICE }}/${{ env.SERVICE }}:${{ github.sha }}

      - name: Show Output
        run: echo ${{ steps.deploy.outputs.url }}