cloudbuild.yaml

steps:
  # git checkout
  - name: "gcr.io/cloud-builders/git"
    secretEnv: ["SSH_KEY"]
    entrypoint: "bash"
    args:
      - -c
      - |
        git config --global \
        url."ssh://git@github.com".insteadOf "https://github.com"
        echo "$$SSH_KEY" >> /root/.ssh/id_rsa
        chmod 400 /root/.ssh/id_rsa
        echo ${_KNOWN_HOST_GITHUB} >> /root/.ssh/known_hosts
    volumes:
      - name: "ssh"
        path: /root/.ssh
    id: Git Checkout
  # update submodules
  - name: gcr.io/cloud-builders/git
    args: ["submodule", "update", "--init", "--recursive"]
    volumes:
      - name: "ssh"
        path: /root/.ssh
    id: Update Submodules
  # build application
  - name: gradle
    args: ["./gradlew", "clean", "build"]
    id: Build Application
  # build image
  - name: gcr.io/cloud-builders/docker
    args:
      - build
      - "--build-arg"
      - "STAGE=$_STAGE"
      - "--no-cache"
      - "-t"
      - "$_GCR_HOSTNAME/$PROJECT_ID/$REPO_NAME/$_SERVICE_NAME:$COMMIT_SHA"
      - .
      - "-f"
      - Dockerfile
    id: Build
  # push images
  - name: gcr.io/cloud-builders/docker
    args:
      - push
      - "$_GCR_HOSTNAME/$PROJECT_ID/$REPO_NAME/$_SERVICE_NAME:$COMMIT_SHA"
    id: Push
  # deploy service
  - name: "gcr.io/google.com/cloudsdktool/cloud-sdk:slim"
    args:
      - run
      - services
      - update
      - $_SERVICE_NAME
      - "--platform=managed"
      - "--image=$_GCR_HOSTNAME/$PROJECT_ID/$REPO_NAME/$_SERVICE_NAME:$COMMIT_SHA"
      - >-
        --labels=managed-by=gcp-cloud-build-deploy-cloud-run,commit-sha=$COMMIT_SHA,gcb-build-id=$BUILD_ID,gcb-trigger-id=$_TRIGGER_ID,$_LABELS
      - "--region=$_DEPLOY_REGION"
      - "--quiet"
    id: Deploy
    entrypoint: gcloud
images:
  - '$_GCR_HOSTNAME/$PROJECT_ID/$REPO_NAME/$_SERVICE_NAME:$COMMIT_SHA'
availableSecrets:
  secretManager:
    - versionName: projects/$PROJECT_ID/secrets/github_ssh/versions/latest
      env: "SSH_KEY"