Merge pull request #5 from anqorithm/feat/terraform-impl

feat: implement Terraform configuration for Cloud Run deployment and …

Author: anqorithm

.gitignore

@@ -3,6 +3,17 @@
 .env.local
 .env.*.local
 
+# Service Account Keys
+*.json
+sa.json
+gcps.json
+
+# Terraform
+terraform/terraform.tfvars
+terraform/.terraform/
+terraform/*.tfstate
+terraform/*.tfstate.backup
+
 # Binaries
 /bin/
 *.exe

Dockerfile

@@ -15,7 +15,7 @@ COPY . .
 RUN go build -o main ./cmd/api
 
 # App port
-EXPOSE 3000
+EXPOSE 8080
 
 # Run application
 CMD ["./main"]

Makefile

@@ -1,2 +1,5 @@
 dev:
-	air
+	air
+
+deploy:
+	./build-and-deploy.sh

build-and-deploy.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+set -e
+
+PROJECT_ID="ai-credit-product"
+SERVICE_NAME="naqa-api"
+REGION="us-central1"
+IMAGE_NAME="gcr.io/$PROJECT_ID/$SERVICE_NAME"
+
+echo "🚀 Building and deploying $SERVICE_NAME..."
+
+docker build -t $IMAGE_NAME:latest .
+docker push $IMAGE_NAME:latest
+
+cd terraform
+terraform init
+terraform apply -auto-approve
+
+echo "✅ Deployment completed!"

cloudbuild.yaml

@@ -0,0 +1,8 @@
+steps:
+  - name: 'gcr.io/cloud-builders/docker'
+    args: ['build', '-t', 'gcr.io/$PROJECT_ID/naqa-api:latest', '.']
+  - name: 'gcr.io/cloud-builders/docker'
+    args: ['push', 'gcr.io/$PROJECT_ID/naqa-api:latest']
+
+images:
+  - 'gcr.io/$PROJECT_ID/naqa-api:latest'

terraform/.terraform.lock.hcl

@@ -0,0 +1,75 @@
+resource "google_cloud_run_service" "naqa_api" {
+  name     = var.service_name
+  location = var.region
+  project  = var.project_id
+
+  depends_on = [google_project_service.cloud_run_api]
+
+  template {
+    spec {
+      containers {
+        image = "gcr.io/${var.project_id}/${var.service_name}:latest"
+
+        ports {
+          container_port = 8080
+        }
+
+        env {
+          name  = "ENVIRONMENT"
+          value = "production"
+        }
+
+        env {
+          name  = "APP_NAME"
+          value = "Naqa API"
+        }
+
+        env {
+          name  = "API_VERSION"
+          value = "1.0.0"
+        }
+
+        env {
+          name  = "MONGO_URI"
+          value = var.mongo_uri
+        }
+
+        env {
+          name  = "MONGO_DATABASE"
+          value = var.mongo_database
+        }
+
+        resources {
+          limits = {
+            memory = "1Gi"
+            cpu    = "1000m"
+          }
+        }
+      }
+
+      container_concurrency = 1000
+    }
+
+    metadata {
+      annotations = {
+        "autoscaling.knative.dev/maxScale" = "100"
+        "autoscaling.knative.dev/minScale" = "0"
+      }
+    }
+  }
+
+  traffic {
+    percent         = 100
+    latest_revision = true
+  }
+}
+
+resource "google_cloud_run_service_iam_binding" "public_access" {
+  location = google_cloud_run_service.naqa_api.location
+  project  = google_cloud_run_service.naqa_api.project
+  service  = google_cloud_run_service.naqa_api.name
+  role     = "roles/run.invoker"
+  members = [
+    "allUsers",
+  ]
+}

terraform/cloud_run.tf

@@ -0,0 +1,14 @@
+terraform {
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "~> 4.0"
+    }
+  }
+}
+
+provider "google" {
+  credentials = file("../sa.json")
+  project     = var.project_id
+  region      = var.region
+}

terraform/main.tf

@@ -0,0 +1,7 @@
+output "service_url" {
+  value = google_cloud_run_service.naqa_api.status[0].url
+}
+
+output "service_name" {
+  value = google_cloud_run_service.naqa_api.name
+}

terraform/outputs.tf

@@ -0,0 +1,14 @@
+resource "google_project_service" "cloud_run_api" {
+  project = var.project_id
+  service = "run.googleapis.com"
+}
+
+resource "google_project_service" "container_registry_api" {
+  project = var.project_id
+  service = "containerregistry.googleapis.com"
+}
+
+resource "google_project_service" "cloud_build_api" {
+  project = var.project_id
+  service = "cloudbuild.googleapis.com"
+}