Next.js を Terraform で Cloud Run へデプロイした際のメモまとめ

# Google Cloud SDK のインストール
brew install google-cloud-sdk

# Terraform のインストール
brew install terraform

# Google Cloud にログイン
gcloud auth login
gcloud auth application-default login

cd terraform/scripts
./setup.sh

source ../.env

source ../.env
cd terraform/environments/dev
cp terraform.tfvars.example terraform.tfvars
vi terraform.tfvars  # 環境変数を設定
terraform init
terraform plan
terraform apply

source ../.env
cd terraform/environments/prod
cp terraform.tfvars.example terraform.tfvars
vi terraform.tfvars  # 環境変数を設定
terraform init
terraform plan
terraform apply

# プロジェクト番号を取得
PROJECT_NUMBER=$(gcloud projects describe $PROJECT_ID --format="value(projectNumber)")

# Cloud Build サービスアカウントに権限を付与
gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:${PROJECT_NUMBER}@cloudbuild.gserviceaccount.com" \
  --role="roles/run.admin"

# Cloud Run サービスアカウントに権限を付与
gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:paput-front-${ENV}-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
  --role="roles/secretmanager.secretAccessor"

# エラーメッセージに表示された API を有効化
gcloud services enable [API_NAME]

- name: 'gcr.io/cloud-builders/docker'
  args:
    - 'build'
    - '--build-arg'
    - 'NODE_ENV=${_NODE_ENV}'
    - '--build-arg'
    - 'NEXT_PUBLIC_BASE_URL=${_NEXT_PUBLIC_BASE_URL}'
    - '--build-arg'
    - 'NEXT_PUBLIC_BASE_API_URL=${_NEXT_PUBLIC_BASE_API_URL}'
    - '--build-arg'
    - 'NEXT_PUBLIC_GOOGLE_CLIENT_ID=${_NEXT_PUBLIC_GOOGLE_CLIENT_ID}'
    - '--build-arg'
    - 'NEXT_PUBLIC_GOOGLE_REDIRECT_URI=${_NEXT_PUBLIC_GOOGLE_REDIRECT_URI}'

- name: 'gcr.io/cloud-builders/docker'
  args:
    - 'push'
    - '--all-tags'
    - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_SERVICE_NAME}-docker/${_SERVICE_NAME}'

- name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
  entrypoint: gcloud
  args:
    - 'run'
    - 'deploy'
    - '${_SERVICE_NAME}'
    - '--image'
    - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_SERVICE_NAME}-docker/${_SERVICE_NAME}:$COMMIT_SHA'
    - '--region'
    - '${_REGION}'
    - '--platform'
    - 'managed'

substitutions:
  _SERVICE_NAME: paput-front
  _REGION: asia-northeast1
  _ENV: dev
  _NODE_ENV: production
  _NEXT_PUBLIC_BASE_URL: https://dev.paput.example.com
  _NEXT_PUBLIC_BASE_API_URL: https://api-dev.paput.example.com
  _NEXT_PUBLIC_GOOGLE_CLIENT_ID: your-google-client-id
  _NEXT_PUBLIC_GOOGLE_REDIRECT_URI: https://dev.paput.example.com/api/auth/callback/google

resource "google_cloud_run_domain_mapping" "default" {
  count    = var.custom_domain != "" ? 1 : 0
  location = var.region
  name     = var.custom_domain

  metadata {
    namespace = var.project_id
  }

  spec {
    route_name = google_cloud_run_v2_service.app.name
  }

  depends_on = [google_cloud_run_v2_service.app]
}