Google Cloud Run에 배포하기

# 프로젝트 ID 설정
gcloud config set project YOUR_PROJECT_ID

# 필요한 API 활성화
gcloud services enable \
  cloudbuild.googleapis.com \
  run.googleapis.com \
  secretmanager.googleapis.com \
  cloudresourcemanager.googleapis.com \
  artifactregistry.googleapis.com

gcloud storage buckets describe gs://casebender-storage

gcloud iam service-accounts create casebender-storage \
  --display-name "CaseBender Storage Service Account"

STORAGE_SA_EMAIL=$(gcloud iam service-accounts list \
  --filter="displayName:CaseBender Storage Service Account" \
  --format="value(email)")

gcloud storage buckets add-iam-policy-binding gs://casebender-storage \
  --member="serviceAccount:${STORAGE_SA_EMAIL}" \
  --role="roles/storage.objectUser"

# PostgreSQL 인스턴스 생성
gcloud sql instances create casebender-db \
  --database-version=POSTGRES_14 \
  --cpu=2 \
  --memory=4GB \
  --region=us-central1 \
  --root-password="YOUR_SECURE_PASSWORD"

# 데이터베이스 생성
gcloud sql databases create casebender \
  --instance=casebender-db

# 사용자 생성
gcloud sql users create casebender \
  --instance=casebender-db \
  --password="YOUR_SECURE_PASSWORD"

# Redis 인스턴스 생성
gcloud redis instances create casebender-redis \
  --size=2 \
  --region=us-central1 \
  --redis-version=redis_6_x

# 환경 변수 생성 및 저장
cat << EOF | gcloud secrets create casebender-env --data-file=-
AUTH_SECRET=your-auth-secret
AUTH_SALT=your-auth-salt
POSTGRES_PRISMA_URL="postgresql://casebender:YOUR_SECURE_PASSWORD@/casebender?host=/cloudsql/YOUR_PROJECT_ID:us-central1:casebender-db"
REDIS_URL="redis://REDIS_IP_ADDRESS:6379"
STORAGE_PROVIDER=gcs
GCS_BUCKET=casebender-storage
EOF

# Artifact Registry 리포지토리 생성
gcloud artifacts repositories create casebender \
  --repository-format=docker \
  --location=us-central1

# Artifact Registry용 Docker 구성
gcloud auth configure-docker us-central1-docker.pkg.dev

# CaseBender 이미지 가져오기
docker pull casebender/casebender:latest
docker pull casebender/workflow-processor:latest
docker pull casebender/misp-processor:latest

# Google Artifact Registry용 이미지 태그 지정
docker tag casebender/casebender:latest us-central1-docker.pkg.dev/$PROJECT_ID/casebender/app:latest
docker tag casebender/workflow-processor:latest us-central1-docker.pkg.dev/$PROJECT_ID/casebender/workflow-processor:latest
docker tag casebender/misp-processor:latest us-central1-docker.pkg.dev/$PROJECT_ID/casebender/misp-processor:latest

# 이미지 푸시
docker push us-central1-docker.pkg.dev/$PROJECT_ID/casebender/app:latest
docker push us-central1-docker.pkg.dev/$PROJECT_ID/casebender/workflow-processor:latest
docker push us-central1-docker.pkg.dev/$PROJECT_ID/casebender/misp-processor:latest

# Cloud Run에 배포
gcloud run deploy casebender \
  --image us-central1-docker.pkg.dev/$PROJECT_ID/casebender/app:latest \
  --platform managed \
  --region us-central1 \
  --allow-unauthenticated \
  --set-env-vars STORAGE_PROVIDER=gcs,GCS_BUCKET=casebender-storage \
  --service-account=$STORAGE_SA_EMAIL \
  --add-cloudsql-instances $PROJECT_ID:us-central1:casebender-db \
  --set-secrets "/app/.env=casebender-env:latest"

# 워크플로우 프로세서 배포
gcloud run deploy workflow-processor \
  --image us-central1-docker.pkg.dev/$PROJECT_ID/casebender/workflow-processor:latest \
  --platform managed \
  --region us-central1 \
  --no-allow-unauthenticated \
  --service-account=$STORAGE_SA_EMAIL \
  --add-cloudsql-instances $PROJECT_ID:us-central1:casebender-db \
  --set-secrets "/app/.env=casebender-env:latest"

# MISP 프로세서 배포
gcloud run deploy misp-processor \
  --image us-central1-docker.pkg.dev/$PROJECT_ID/casebender/misp-processor:latest \
  --platform managed \
  --region us-central1 \
  --no-allow-unauthenticated \
  --service-account=$STORAGE_SA_EMAIL \
  --add-cloudsql-instances $PROJECT_ID:us-central1:casebender-db \
  --set-secrets "/app/.env=casebender-env:latest"

# 도메인 매핑 추가
gcloud run domain-mappings create \
  --service casebender \
  --domain your-domain.com \
  --region us-central1

# 서비스 로그 보기
gcloud logging read "resource.type=cloud_run_revision AND resource.labels.service_name=casebender" --limit 50

# 로그 스트리밍
gcloud logging tail "resource.type=cloud_run_revision AND resource.labels.service_name=casebender"

# 새 버전 빌드 및 배포
gcloud builds submit --config cloudbuild.yaml

# 필요한 경우 롤백
gcloud run services rollback casebender \
  --to-revision=REVISION_ID \
  --region=us-central1