service

#!/bin/bash

DIR="$(dirname "$0")"
. "${DIR}/config"

gcloud beta run deploy $SERVICE_NAME \
	--image "gcr.io/${PROJECT}/${SERVICE_NAME}:${SERVICE_VERSION}" \
    --service-account "${SERVICE_NAME}-sa@${PROJECT}.iam.gserviceaccount.com" \
	--allow-unauthenticated \
    --platform managed \
	--region $SERVICE_REGION \
	--add-cloudsql-instances "${SERVICE_NAME}-inst" \
	--set-env-vars "RELEASE=v${SERVICE_VERSION},DSN=${SERVICE_NAME}-db-user:${DB_USER_SECRET}@unix(/cloudsql/${PROJECT}:${SERVICE_REGION}:${SERVICE_NAME}-inst)/${SERVICE_NAME}-db?parseTime=true,OAUTH_CLIENT_ID=${LI_OAUTH_CLIENT_ID},OAUTH_CLIENT_SECRET=${LI_OAUTH_CLIENT_SECRET}"


gcloud beta run services add-iam-policy-binding $SERVICE_NAME \
	--member "serviceAccount:${SERVICE_NAME}-sa@${PROJECT}.iam.gserviceaccount.com" \
	--region "${SERVICE_REGION}" \
	--role roles/run.invoker