Deploy Serverless Containers with Cloud Run and Terraform

terraform {
  required_version = ">= 1.6"
  required_providers {
    google = {
      source  = "hashicorp/google"
      version = "~> 5.0"
    }
  }
}

provider "google" {
  project = var.project_id
  region  = var.region
}

resource "google_artifact_registry_repository" "app_repo" {
  location      = var.region
  repository_id = "app-images"
  description   = "Docker images for Cloud Run services"
  format        = "DOCKER"
}

steps:
- name: 'gcr.io/cloud-builders/docker'
  args: ['build', '-t', '${_REGION}-docker.pkg.dev/$PROJECT_ID/app-images/${_SERVICE}:$COMMIT_SHA', '.']
- name: 'gcr.io/cloud-builders/docker'
  args: ['push', '${_REGION}-docker.pkg.dev/$PROJECT_ID/app-images/${_SERVICE}:$COMMIT_SHA']
images:
- '${_REGION}-docker.pkg.dev/$PROJECT_ID/app-images/${_SERVICE}:$COMMIT_SHA'

resource "google_cloud_run_v2_service" "api" {
  name     = var.service_name
  location = var.region

  template {
    containers {
      image = "${var.region}-docker.pkg.dev/${var.project_id}/app-images/${var.service_name}:${var.image_tag}"
      ports {
        container_port = 8080
      }
      resources {
        limits = {
          cpu    = "1000m"
          memory = "512Mi"
        }
      }
      env {
        name  = "ENV"
        value = "production"
      }
    }
    scaling {
      min_instance_count = 0
      max_instance_count = 100
    }
    vpc_access {
      egress = "ALL_TRAFFIC"
    }
  }

  traffics {
    type         = "TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST"
    percent      = 100
    latest_revision = true
  }
}

resource "google_cloud_run_v2_service_iam_member" "public" {
  service  = google_cloud_run_v2_service.api.name
  location = var.region
  role     = "roles/run.invoker"
  member   = "allUsers"
}