Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축
하고 싶은 일
· 로컬은 docker로 postgre + Django 환경
· Deploy 환경은 Cloud Run + Cloud SQL + Cloud Strage + CI/CD
에서 PUSH하면 환경에 반영.
계정 및 프로젝트 설정
# 目当てのアカウントか確認
gcloud auth list
Credentialed Accounts
ACTIVE ACCOUNT
* [email protected]
To set the active account, run:
$ gcloud config set account `ACCOUNT`
# 違うので、変更する
gcloud auth login
# 目当てのアカウントか確認
gcloud auth list
Credentialed Accounts
ACTIVE ACCOUNT
[email protected]
* [email protected]
To set the active account, run:
$ gcloud config set account `ACCOUNT`
# 目当てのPJ確認
gcloud config list project
[core]
project = hogehoge-291105
Your active configuration is: [hogehoge-condif]
# 違うので変更する
gcloud config set project hogehoge-233505
# 目当てのPJ確認
gcloud config list project
[core]
project = hogehoge-233505
Your active configuration is: [hogehoge-condif]
API 사용
gcloud services enable \
run.googleapis.com \
sql-component.googleapis.com \
sqladmin.googleapis.com \
compute.googleapis.com \
cloudbuild.googleapis.com \
secretmanager.googleapis.com
Operation "operations/acf.e5f048a0-3b34-4f0e-9a88-015df1255382" finished successfully.
cloud sql 설정
# ローカル変数を用意
PROJECT_ID=$(gcloud config get-value core/project)
REGION=us-central1
# cloud sqlを作成
gcloud sql instances create hogehoge --project $PROJECT_ID \
--database-version POSTGRES_11 --tier db-f1-micro --region $REGION
結構時間かかる(10分ぐらい)
Creating Cloud SQL instance...done.
Created [https://sqladmin.googleapis.com/sql/v1beta4/projects/999999999/instances/9999999].
NAME DATABASE_VERSION LOCATION TIER PRIMARY_ADDRESS PRIVATE_ADDRESS STATUS
hogehoge POSTGRES_11 us-central1-a db-f1-micro 99.999.999.99 - RUNNABLE
# データベースの作成
gcloud sql databases create tryout --instance hogehoge
Creating Cloud SQL database...done.
Created database [tryout].
instance: hogehoge
name: tryout
project: hogehoge-233505
# ユーザの作成
DJPASS="$(cat /dev/urandom | LC_ALL=C tr -dc 'a-zA-Z0-9' | fold -w 30 | head -n 1)"
gcloud sql users create djuser --instance hogehoge --password $DJPASS
Creating Cloud SQL user...done.
Created user [djuser].
# envファイルの作成
echo DATABASE_URL=\"postgres://djuser:${DJPASS}@//cloudsql/${PROJECT_ID}:${REGION}:hogehoge/tryout\" > .env
echo GS_BUCKET_NAME=\"${GS_BUCKET_NAME}\" >> .env
echo SECRET_KEY=\"$(cat /dev/urandom | LC_ALL=C tr -dc 'a-zA-Z0-9' | fold -w 50 | head -n 1)\" >> .env
echo DEBUG=\"True\" >> .env
# シークレットの作成
gcloud secrets create application_settings --replication-policy automatic
Created secret [application_settings].
# シークレットにenvファイルを保存
gcloud secrets versions add application_settings --data-file .env
Created version [1] of the secret [application_settings].
Strage 만들기
# cloud strageの作成
GS_BUCKET_NAME=${PROJECT_ID}-media
gsutil mb -l ${REGION} gs://${GS_BUCKET_NAME}
Creating gs://hogehoge-233505-media/...
Cloud Run에서 Migrate를 허용하도록 설정
# 変数設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDRUN=${PROJECTNUM}[email protected]
# Cloud Runからシークレットにアクセスできるように、バインドする
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDRUN} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkqh_Jzc=
version: 1
# シークレットの確認
gcloud secrets versions list application_settings
NAME STATE CREATED DESTROYED
1 enabled 2020-10-01T02:17:25 -
# マイグレーション設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDBUILD=${PROJECTNUM}@cloudbuild.gserviceaccount.com
# CloudBuildがシークレット設定にアクセスすることを設定
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDBUILD} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkwj_LAA=
version: 1
# CloudBuildがCloudSQLに接続できるように設定
gcloud projects add-iam-policy-binding ${PROJECT_ID} \
--member serviceAccount:${CLOUDBUILD} --role roles/cloudsql.client
눈가리 gs. py
# DB設定
DATABASES = {"default": env.db()}
GS_BUCKET_NAME = env("GS_BUCKET_NAME")
STATICFILES_DIRS = []
DEFAULT_FILE_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
STATICFILES_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
cloudmigrate.yaml
cloudmigrate.yaml
steps:
- name: "gcr.io/cloud-builders/docker"
args: ["build", "-t", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev", "."]
- name: "gcr.io/cloud-builders/docker"
args: ["push", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "migrate"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "collectstatic", "--no-input"]
- name: "gcr.io/cloud-builders/gcloud"
id: 'cloudrun-deploy'
args: ['beta', 'run', 'deploy',
'hugahuga-tryout-dev',
'--image', "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
'--region', 'asia-northeast1',
'--platform', 'managed',
'--add-cloudsql-instances', 'hugahuga-233505:us-central1:hugahuga',
'--allow-unauthenticated']
이미지를 빌드하고 Migrate하고 배포
gcloud builds submit --config cloudmigrate.yaml \
--substitutions _REGION=asia-northeast1
배포 명령
gcloud run deploy django-cloudrun --platform managed --region asia-northeast1\
--image gcr.io/hogehoge-233505/hogehoge-tryout-dev \
--add-cloudsql-instances hogehoge-233505:us-central1:hogehoge \
--allow-unauthenticated
권한 관련
CI/CD하려면 이 권한만 필요
Cloud Build
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
# 目当てのアカウントか確認
gcloud auth list
Credentialed Accounts
ACTIVE ACCOUNT
* [email protected]
To set the active account, run:
$ gcloud config set account `ACCOUNT`
# 違うので、変更する
gcloud auth login
# 目当てのアカウントか確認
gcloud auth list
Credentialed Accounts
ACTIVE ACCOUNT
[email protected]
* [email protected]
To set the active account, run:
$ gcloud config set account `ACCOUNT`
# 目当てのPJ確認
gcloud config list project
[core]
project = hogehoge-291105
Your active configuration is: [hogehoge-condif]
# 違うので変更する
gcloud config set project hogehoge-233505
# 目当てのPJ確認
gcloud config list project
[core]
project = hogehoge-233505
Your active configuration is: [hogehoge-condif]
API 사용
gcloud services enable \
run.googleapis.com \
sql-component.googleapis.com \
sqladmin.googleapis.com \
compute.googleapis.com \
cloudbuild.googleapis.com \
secretmanager.googleapis.com
Operation "operations/acf.e5f048a0-3b34-4f0e-9a88-015df1255382" finished successfully.
cloud sql 설정
# ローカル変数を用意
PROJECT_ID=$(gcloud config get-value core/project)
REGION=us-central1
# cloud sqlを作成
gcloud sql instances create hogehoge --project $PROJECT_ID \
--database-version POSTGRES_11 --tier db-f1-micro --region $REGION
結構時間かかる(10分ぐらい)
Creating Cloud SQL instance...done.
Created [https://sqladmin.googleapis.com/sql/v1beta4/projects/999999999/instances/9999999].
NAME DATABASE_VERSION LOCATION TIER PRIMARY_ADDRESS PRIVATE_ADDRESS STATUS
hogehoge POSTGRES_11 us-central1-a db-f1-micro 99.999.999.99 - RUNNABLE
# データベースの作成
gcloud sql databases create tryout --instance hogehoge
Creating Cloud SQL database...done.
Created database [tryout].
instance: hogehoge
name: tryout
project: hogehoge-233505
# ユーザの作成
DJPASS="$(cat /dev/urandom | LC_ALL=C tr -dc 'a-zA-Z0-9' | fold -w 30 | head -n 1)"
gcloud sql users create djuser --instance hogehoge --password $DJPASS
Creating Cloud SQL user...done.
Created user [djuser].
# envファイルの作成
echo DATABASE_URL=\"postgres://djuser:${DJPASS}@//cloudsql/${PROJECT_ID}:${REGION}:hogehoge/tryout\" > .env
echo GS_BUCKET_NAME=\"${GS_BUCKET_NAME}\" >> .env
echo SECRET_KEY=\"$(cat /dev/urandom | LC_ALL=C tr -dc 'a-zA-Z0-9' | fold -w 50 | head -n 1)\" >> .env
echo DEBUG=\"True\" >> .env
# シークレットの作成
gcloud secrets create application_settings --replication-policy automatic
Created secret [application_settings].
# シークレットにenvファイルを保存
gcloud secrets versions add application_settings --data-file .env
Created version [1] of the secret [application_settings].
Strage 만들기
# cloud strageの作成
GS_BUCKET_NAME=${PROJECT_ID}-media
gsutil mb -l ${REGION} gs://${GS_BUCKET_NAME}
Creating gs://hogehoge-233505-media/...
Cloud Run에서 Migrate를 허용하도록 설정
# 変数設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDRUN=${PROJECTNUM}[email protected]
# Cloud Runからシークレットにアクセスできるように、バインドする
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDRUN} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkqh_Jzc=
version: 1
# シークレットの確認
gcloud secrets versions list application_settings
NAME STATE CREATED DESTROYED
1 enabled 2020-10-01T02:17:25 -
# マイグレーション設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDBUILD=${PROJECTNUM}@cloudbuild.gserviceaccount.com
# CloudBuildがシークレット設定にアクセスすることを設定
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDBUILD} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkwj_LAA=
version: 1
# CloudBuildがCloudSQLに接続できるように設定
gcloud projects add-iam-policy-binding ${PROJECT_ID} \
--member serviceAccount:${CLOUDBUILD} --role roles/cloudsql.client
눈가리 gs. py
# DB設定
DATABASES = {"default": env.db()}
GS_BUCKET_NAME = env("GS_BUCKET_NAME")
STATICFILES_DIRS = []
DEFAULT_FILE_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
STATICFILES_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
cloudmigrate.yaml
cloudmigrate.yaml
steps:
- name: "gcr.io/cloud-builders/docker"
args: ["build", "-t", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev", "."]
- name: "gcr.io/cloud-builders/docker"
args: ["push", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "migrate"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "collectstatic", "--no-input"]
- name: "gcr.io/cloud-builders/gcloud"
id: 'cloudrun-deploy'
args: ['beta', 'run', 'deploy',
'hugahuga-tryout-dev',
'--image', "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
'--region', 'asia-northeast1',
'--platform', 'managed',
'--add-cloudsql-instances', 'hugahuga-233505:us-central1:hugahuga',
'--allow-unauthenticated']
이미지를 빌드하고 Migrate하고 배포
gcloud builds submit --config cloudmigrate.yaml \
--substitutions _REGION=asia-northeast1
배포 명령
gcloud run deploy django-cloudrun --platform managed --region asia-northeast1\
--image gcr.io/hogehoge-233505/hogehoge-tryout-dev \
--add-cloudsql-instances hogehoge-233505:us-central1:hogehoge \
--allow-unauthenticated
권한 관련
CI/CD하려면 이 권한만 필요
Cloud Build
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
gcloud services enable \
run.googleapis.com \
sql-component.googleapis.com \
sqladmin.googleapis.com \
compute.googleapis.com \
cloudbuild.googleapis.com \
secretmanager.googleapis.com
Operation "operations/acf.e5f048a0-3b34-4f0e-9a88-015df1255382" finished successfully.
# ローカル変数を用意
PROJECT_ID=$(gcloud config get-value core/project)
REGION=us-central1
# cloud sqlを作成
gcloud sql instances create hogehoge --project $PROJECT_ID \
--database-version POSTGRES_11 --tier db-f1-micro --region $REGION
結構時間かかる(10分ぐらい)
Creating Cloud SQL instance...done.
Created [https://sqladmin.googleapis.com/sql/v1beta4/projects/999999999/instances/9999999].
NAME DATABASE_VERSION LOCATION TIER PRIMARY_ADDRESS PRIVATE_ADDRESS STATUS
hogehoge POSTGRES_11 us-central1-a db-f1-micro 99.999.999.99 - RUNNABLE
# データベースの作成
gcloud sql databases create tryout --instance hogehoge
Creating Cloud SQL database...done.
Created database [tryout].
instance: hogehoge
name: tryout
project: hogehoge-233505
# ユーザの作成
DJPASS="$(cat /dev/urandom | LC_ALL=C tr -dc 'a-zA-Z0-9' | fold -w 30 | head -n 1)"
gcloud sql users create djuser --instance hogehoge --password $DJPASS
Creating Cloud SQL user...done.
Created user [djuser].
# envファイルの作成
echo DATABASE_URL=\"postgres://djuser:${DJPASS}@//cloudsql/${PROJECT_ID}:${REGION}:hogehoge/tryout\" > .env
echo GS_BUCKET_NAME=\"${GS_BUCKET_NAME}\" >> .env
echo SECRET_KEY=\"$(cat /dev/urandom | LC_ALL=C tr -dc 'a-zA-Z0-9' | fold -w 50 | head -n 1)\" >> .env
echo DEBUG=\"True\" >> .env
# シークレットの作成
gcloud secrets create application_settings --replication-policy automatic
Created secret [application_settings].
# シークレットにenvファイルを保存
gcloud secrets versions add application_settings --data-file .env
Created version [1] of the secret [application_settings].
Strage 만들기
# cloud strageの作成
GS_BUCKET_NAME=${PROJECT_ID}-media
gsutil mb -l ${REGION} gs://${GS_BUCKET_NAME}
Creating gs://hogehoge-233505-media/...
Cloud Run에서 Migrate를 허용하도록 설정
# 変数設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDRUN=${PROJECTNUM}[email protected]
# Cloud Runからシークレットにアクセスできるように、バインドする
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDRUN} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkqh_Jzc=
version: 1
# シークレットの確認
gcloud secrets versions list application_settings
NAME STATE CREATED DESTROYED
1 enabled 2020-10-01T02:17:25 -
# マイグレーション設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDBUILD=${PROJECTNUM}@cloudbuild.gserviceaccount.com
# CloudBuildがシークレット設定にアクセスすることを設定
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDBUILD} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkwj_LAA=
version: 1
# CloudBuildがCloudSQLに接続できるように設定
gcloud projects add-iam-policy-binding ${PROJECT_ID} \
--member serviceAccount:${CLOUDBUILD} --role roles/cloudsql.client
눈가리 gs. py
# DB設定
DATABASES = {"default": env.db()}
GS_BUCKET_NAME = env("GS_BUCKET_NAME")
STATICFILES_DIRS = []
DEFAULT_FILE_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
STATICFILES_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
cloudmigrate.yaml
cloudmigrate.yaml
steps:
- name: "gcr.io/cloud-builders/docker"
args: ["build", "-t", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev", "."]
- name: "gcr.io/cloud-builders/docker"
args: ["push", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "migrate"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "collectstatic", "--no-input"]
- name: "gcr.io/cloud-builders/gcloud"
id: 'cloudrun-deploy'
args: ['beta', 'run', 'deploy',
'hugahuga-tryout-dev',
'--image', "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
'--region', 'asia-northeast1',
'--platform', 'managed',
'--add-cloudsql-instances', 'hugahuga-233505:us-central1:hugahuga',
'--allow-unauthenticated']
이미지를 빌드하고 Migrate하고 배포
gcloud builds submit --config cloudmigrate.yaml \
--substitutions _REGION=asia-northeast1
배포 명령
gcloud run deploy django-cloudrun --platform managed --region asia-northeast1\
--image gcr.io/hogehoge-233505/hogehoge-tryout-dev \
--add-cloudsql-instances hogehoge-233505:us-central1:hogehoge \
--allow-unauthenticated
권한 관련
CI/CD하려면 이 권한만 필요
Cloud Build
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
# cloud strageの作成
GS_BUCKET_NAME=${PROJECT_ID}-media
gsutil mb -l ${REGION} gs://${GS_BUCKET_NAME}
Creating gs://hogehoge-233505-media/...
# 変数設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDRUN=${PROJECTNUM}[email protected]
# Cloud Runからシークレットにアクセスできるように、バインドする
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDRUN} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkqh_Jzc=
version: 1
# シークレットの確認
gcloud secrets versions list application_settings
NAME STATE CREATED DESTROYED
1 enabled 2020-10-01T02:17:25 -
# マイグレーション設定
export PROJECTNUM=$(gcloud projects describe ${PROJECT_ID} --format 'value(projectNumber)')
export CLOUDBUILD=${PROJECTNUM}@cloudbuild.gserviceaccount.com
# CloudBuildがシークレット設定にアクセスすることを設定
gcloud secrets add-iam-policy-binding application_settings \
--member serviceAccount:${CLOUDBUILD} --role roles/secretmanager.secretAccessor
Updated IAM policy for secret [application_settings].
bindings:
- members:
- serviceAccount:[email protected]
- serviceAccount:[email protected]
role: roles/secretmanager.secretAccessor
etag: BwWwkwj_LAA=
version: 1
# CloudBuildがCloudSQLに接続できるように設定
gcloud projects add-iam-policy-binding ${PROJECT_ID} \
--member serviceAccount:${CLOUDBUILD} --role roles/cloudsql.client
눈가리 gs. py
# DB設定
DATABASES = {"default": env.db()}
GS_BUCKET_NAME = env("GS_BUCKET_NAME")
STATICFILES_DIRS = []
DEFAULT_FILE_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
STATICFILES_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
cloudmigrate.yaml
cloudmigrate.yaml
steps:
- name: "gcr.io/cloud-builders/docker"
args: ["build", "-t", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev", "."]
- name: "gcr.io/cloud-builders/docker"
args: ["push", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "migrate"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "collectstatic", "--no-input"]
- name: "gcr.io/cloud-builders/gcloud"
id: 'cloudrun-deploy'
args: ['beta', 'run', 'deploy',
'hugahuga-tryout-dev',
'--image', "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
'--region', 'asia-northeast1',
'--platform', 'managed',
'--add-cloudsql-instances', 'hugahuga-233505:us-central1:hugahuga',
'--allow-unauthenticated']
이미지를 빌드하고 Migrate하고 배포
gcloud builds submit --config cloudmigrate.yaml \
--substitutions _REGION=asia-northeast1
배포 명령
gcloud run deploy django-cloudrun --platform managed --region asia-northeast1\
--image gcr.io/hogehoge-233505/hogehoge-tryout-dev \
--add-cloudsql-instances hogehoge-233505:us-central1:hogehoge \
--allow-unauthenticated
권한 관련
CI/CD하려면 이 권한만 필요
Cloud Build
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
# DB設定
DATABASES = {"default": env.db()}
GS_BUCKET_NAME = env("GS_BUCKET_NAME")
STATICFILES_DIRS = []
DEFAULT_FILE_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
STATICFILES_STORAGE = "storages.backends.gcloud.GoogleCloudStorage"
cloudmigrate.yaml
steps:
- name: "gcr.io/cloud-builders/docker"
args: ["build", "-t", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev", "."]
- name: "gcr.io/cloud-builders/docker"
args: ["push", "gcr.io/${PROJECT_ID}/hugahuga-tryout-dev"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "migrate"]
- name: "gcr.io/google-appengine/exec-wrapper"
args: ["-i", "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
"-s", "hugahuga-233505:us-central1:hugahuga",
"--", "python", "manage.py", "collectstatic", "--no-input"]
- name: "gcr.io/cloud-builders/gcloud"
id: 'cloudrun-deploy'
args: ['beta', 'run', 'deploy',
'hugahuga-tryout-dev',
'--image', "gcr.io/$PROJECT_ID/hugahuga-tryout-dev",
'--region', 'asia-northeast1',
'--platform', 'managed',
'--add-cloudsql-instances', 'hugahuga-233505:us-central1:hugahuga',
'--allow-unauthenticated']
이미지를 빌드하고 Migrate하고 배포
gcloud builds submit --config cloudmigrate.yaml \
--substitutions _REGION=asia-northeast1
배포 명령
gcloud run deploy django-cloudrun --platform managed --region asia-northeast1\
--image gcr.io/hogehoge-233505/hogehoge-tryout-dev \
--add-cloudsql-instances hogehoge-233505:us-central1:hogehoge \
--allow-unauthenticated
권한 관련
CI/CD하려면 이 권한만 필요
Cloud Build
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
gcloud builds submit --config cloudmigrate.yaml \
--substitutions _REGION=asia-northeast1
gcloud run deploy django-cloudrun --platform managed --region asia-northeast1\
--image gcr.io/hogehoge-233505/hogehoge-tryout-dev \
--add-cloudsql-instances hogehoge-233505:us-central1:hogehoge \
--allow-unauthenticated
권한 관련
CI/CD하려면 이 권한만 필요
Cloud Build
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
여기에 트리거를 만듭니다.
CSR에 PUSH되면 cloudmigrate.yaml을 지정하면 OK!
감상
힘들었습니다. 웹에 거의 정보가 없기 때문에 유일했습니다.
htps : // 코데아 bs. 로 ゔぇぺぺrs. 오, ぇ. 코 m / 코데 ぁ bs / c ぉ d 룬 - d 짱 / / 0
이것을 참고로 했습니다.
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다
https://qiita.com/knitbow/items/23864640a05e04fa3b54
텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
Reference
이 문제에 관하여(Django + Cloud Run + Cloud SQL + Cloud Strage로 환경 구축), 우리는 이곳에서 더 많은 자료를 발견하고 링크를 클릭하여 보았다 https://qiita.com/knitbow/items/23864640a05e04fa3b54텍스트를 자유롭게 공유하거나 복사할 수 있습니다.하지만 이 문서의 URL은 참조 URL로 남겨 두십시오.
우수한 개발자 콘텐츠 발견에 전념
(Collection and Share based on the CC Protocol.)
좋은 웹페이지 즐겨찾기
