apollo-hack100/cloudbuild.yaml at main · ashish173/apollo-hack100 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
# cloudbuild.yaml
steps:
  # Step 1: Install Node.js dependencies
  - name: 'node:20'
    entrypoint: 'npm'
    args: ['install']
    env:
      - 'NPM_CONFIG_UPDATE_NOTIFIER=false'

  # Step 2: Create .env file from secrets
  - name: 'gcr.io/cloud-builders/gcloud'
    entrypoint: 'bash'
    args:
      - -c
      - |
        echo "Creating .env file..."
        cat > .env << EOF
        NEXT_PUBLIC_FIREBASE_API_KEY=${_NEXT_PUBLIC_FIREBASE_API_KEY}
        NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=${_NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN}
        NEXT_PUBLIC_FIREBASE_PROJECT_ID=${_NEXT_PUBLIC_FIREBASE_PROJECT_ID}
        NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=${_NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET}
        NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=${_NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID}
        NEXT_PUBLIC_FIREBASE_APP_ID=${_NEXT_PUBLIC_FIREBASE_APP_ID}
        NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID=${_NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID}
        GOOGLE_GENAI_API_KEY=${_GOOGLE_GENAI_API_KEY}
        ANTHROPIC_API_KEY=${_ANTHROPIC_API_KEY}
        EOF
        echo ".env file created successfully"
        echo "Environment variables:"
        cat .env
    secretEnv: [
      '_NEXT_PUBLIC_FIREBASE_API_KEY',
      '_NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN',
      '_NEXT_PUBLIC_FIREBASE_PROJECT_ID',
      '_NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET',
      '_NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID',
      '_NEXT_PUBLIC_FIREBASE_APP_ID',
      '_NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID',
      '_GOOGLE_GENAI_API_KEY',
      '_ANTHROPIC_API_KEY'
    ]

  # Step 3: Build the Next.js application
  - name: 'node:20'
    entrypoint: 'bash'
    args:
      - -c
      - |
        echo "Loading environment variables..."
        set -a && source .env && set +a
        echo "Building Next.js application..."
        npm run build

  # Step 4: Deploy to Firebase Hosting and Functions
  - name: 'us-docker.pkg.dev/firebase-cli/us/firebase'
    args: ['deploy', '--project=${_FIREBASE_PROJECT_ID}']
    secretEnv: ['_FIREBASE_PROJECT_ID']

options:
  logging: CLOUD_LOGGING_ONLY
  substitution_option: ALLOW_LOOSE

# Define substitutions for secrets, mapping them to Secret Manager secret names
availableSecrets:
  secretManager:
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_API_KEY/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_API_KEY
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_PROJECT_ID/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_PROJECT_ID
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_APP_ID/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_APP_ID
    - versionName: projects/${PROJECT_ID}/secrets/NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID/versions/latest
      env: _NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID
    - versionName: projects/${PROJECT_ID}/secrets/FIREBASE_PROJECT_ID/versions/latest
      env: _FIREBASE_PROJECT_ID
    - versionName: projects/${PROJECT_ID}/secrets/GOOGLE_GENAI_API_KEY/versions/latest
      env: _GOOGLE_GENAI_API_KEY
    - versionName: projects/${PROJECT_ID}/secrets/ANTHROPIC_API_KEY/versions/latest
      env: _ANTHROPIC_API_KEY