PoC - Dockerize node app and deploy

[taitruong]

Create a docker file and deploy on Google App Engine

Goal:

• deploy docker image
  Steps:
• based on result from PoC - deploy simple node app on Google App Engine #1 create a docker image
  • create docker image from https://github.com/software-developer-org/hello-express
  • setup Container Registry to enable the option to push your image into Google Cloud
  • use Cloud Run to deploy and start your image in Google Cloud

Add interesting findings to #3

[RouvenGonzalez]

Dockerize and Deploy a Node App in Google Cloud

Stepps before the Start:

• Install docker and cloud sdk if you want to use your local console
• You can also use the CloudShell in the Cloud Console it already has docker installed

Setup and Deploy your App:

grant users these roles for the project

• go to IAM
  • press "ADD"
  • select one or more users in "New members"
  • add these two roles: "Cloud Run Admin" and "Storage Admin"

enable the Container Registry for your project

• as described [here(https://cloud.google.com/container-registry/docs/quickstart)
  • Before building your image, make sure you set two environment variables in your dockerfile:
    • ENV PORT the port your app is using
    • ENV HOST 0.0.0.0
      these two are processed in Cloud Run during deployment
      here is the dockerfile used for our test image

create a "compute service account"

• check if service account exists
  • go here, select project and check whether it exists
• create a service account
  • to Compute Engine page to enable it
• select project (e.g sanbox-xxx)
• a text "Compute Engine is getting ready. This may take a minute or more. Compute Engine documentation" appears on top
  This will create a compute service account
• grant user role "Service Account User"
  • go to Service Account
  • select PROJECTID-compute@developer.gserviceaccount.com
  • go to Permissions
  • grant access: select user, select role "Service Account User", save

Setup Cloud Buld API and Cloud RUN

• Enable API in Cloud Build API: press "Enable"
• Enable Cloud Run Admin in Service Account Settings page:
  • select project
  • for "Cloud Run Admin" select "enable"
  • press "Grant access to all service accounts"
  • then click "XXX" to enable Cloud Run API to xxx
    -Grant the IAM Service Account User role to the Cloud Build service account on the Cloud Run runtime service account as described here
• https://console.cloud.google.com/projectselector2/iam-admin/serviceaccounts?supportedpurview=project
  • select project
  • select XXXX-compute@developer.gserviceaccount.com
  • go to permissions tab
  • press "+grant access"
  • enter in new members fields "build" and find PROJECT_ID@cloudbuild.gserviceaccount.com (in this case 378672433331@cloudbuild.gserviceaccount.com and NOT service-PROJECT_ID@gcp-sa-cloudbuild.iam.gserviceaccount.com)
  • In the Select a role dropdown, select the Service Accounts > Service Account User role.
    You can finde another good description here
  • save