Pipeline setup prod

.github/workflows/gcp_deploy.yml

@@ -13,7 +13,7 @@ jobs:
       - name: G-Cloud Authenticate
         env:
           SERVICE_CREDENTIALS: ${{ secrets.GCP_SERVICE_CREDENTIALS_DEV }}
-          SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT_DEV}}
+          SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT_DEV }}
           PROJECT_ID: ${{ secrets.GCP_PROJECT_ID_DEV }}
         run: |-
           echo "$SERVICE_CREDENTIALS" > ./credentials.json
@@ -36,5 +36,3 @@ jobs:
       - name: Clean Env
         if: always()
         run: docker system prune --volumes -af
-
-

.github/workflows/gcp_deploy_prod.yml

@@ -0,0 +1,38 @@
+name: gcp_deploy_backend_prod
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    name: deploy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: G-Cloud Authenticate
+        env:
+          SERVICE_CREDENTIALS: ${{ secrets.GCP_SERVICE_CREDENTIALS_PROD }}
+          SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT_PROD }}
+          PROJECT_ID: ${{ secrets.GCP_PROJECT_ID_PROD }}
+        run: |-
+          echo "$SERVICE_CREDENTIALS" > ./credentials.json
+          gcloud auth activate-service-account "$SERVICE_ACCOUNT" --key-file=./credentials.json --project="$PROJECT_ID"
+          gcloud auth configure-docker us-central1-docker.pkg.dev --quiet
+      - name: Docker Build
+        env:
+          IMAGE_NAME: ${{ secrets.GCP_IMAGE_NAME_PROD }}
+        run: docker build -t "$IMAGE_NAME" .
+      - name: Push to Container Registry
+        env:
+          IMAGE_NAME: ${{ secrets.GCP_IMAGE_NAME_PROD }}
+        run: sudo -u $USER docker push "$IMAGE_NAME"
+      - name: Deploy to Cloud Run
+        env:
+          IMAGE_NAME: ${{ secrets.GCP_IMAGE_NAME_PROD }}
+          PROJECT_ID: ${{ secrets.GCP_PROJECT_ID_PROD }}
+        run: gcloud run deploy uwpath-backend-prod --image="$IMAGE_NAME" --project="$PROJECT_ID" --region=us-central1
+
+      - name: Clean Env
+        if: always()
+        run: docker system prune --volumes -af

uwpath_backend/prod_settings.py

@@ -40,7 +40,7 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = False
 
-ALLOWED_HOSTS = ['api.uwpath.com']
+ALLOWED_HOSTS = ['api.uwpath.com', 'uwpath-backend-prod-qtsbtvgvna-uc.a.run.app']
 
 
 # Application definition
@@ -173,4 +173,5 @@
 
 CORS_ORIGIN_WHITELIST = [
     'https://uwpath.com',
+    'https://uwpath-frontend-prod-qtsbtvgvna-uc.a.run.app'
 ]