feat: add cloudrun deploy job

.github/workflows/deploy-cloudrun.yaml

@@ -0,0 +1,94 @@
+name: 'Reusable gcp cloudrun deploy workflow'
+
+on:
+  workflow_call:
+    inputs:
+      job-name:
+        description: 'Name of the Cloud Run job to deploy'
+        required: false
+        type: string
+      service-name:
+        description: 'Name of the Cloud Run service to deploy'
+        required: false
+        type: string
+      registry:
+        description: 'Container registry URL (e.g., gcr.io, europe-west3-docker.pkg.dev)'
+        required: true
+        type: string
+      artifact-repository:
+        description: 'Repository name in the artifact registry'
+        required: true
+        type: string
+      artifact-tag:
+        description: 'Tag of the container image to deploy'
+        required: true
+        type: string
+      region:
+        description: 'GCP region where the Cloud Run resource will be deployed'
+        required: true
+        type: string
+      flags:
+        description: 'Additional flags to pass to the gcloud deploy command'
+        type: string
+      container:
+        description: 'Container name for multi-container deployments'
+        type: string
+      workload-identity-provider:
+        description: 'Workload Identity Provider for authentication'
+        required: true
+        type: string
+      workload-identity-service-account-mail:
+        description: 'Service account email for Workload Identity'
+        required: true
+        type: string
+jobs:
+  deploy_cloudrun:
+    name: Deployment job
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Validate inputs
+        run: |
+          if [[ -z "${{ inputs.job-name }}" && -z "${{ inputs.service-name }}" ]]; then
+            echo "Error: at least one of 'job-name' or 'service-name' must be provided"
+            exit 1
+          fi
+      - uses: 'google-github-actions/auth@v3'
+        with:
+          service_account: ${{ inputs.workload-identity-service-account-mail }}
+          workload_identity_provider: ${{ inputs.workload-identity-provider }}
+      - name: 'Set up gcloud CLI'
+        uses: 'google-github-actions/setup-gcloud@v3'
+        with:
+          version: '>= 363.0.0'
+          install_components: 'beta'
+      - name: 'Prepare deployment flags'
+        id: flags
+        run: |
+          if [ -n "${{ inputs.container }}" ]; then
+            echo "container_flag=--container ${{ inputs.container }}" >> "$GITHUB_OUTPUT"
+          else
+            echo "container_flag=" >> "$GITHUB_OUTPUT"
+          fi
+      # we cannot use google-github-actions/deploy-cloudrun here due to:
+      # https://github.com/google-github-actions/deploy-cloudrun/issues/558
+      - name: 'deploy cloudrun'
+        run: |
+          IMAGE="${{ inputs.registry }}/${{ inputs.artifact-repository }}:${{ inputs.artifact-tag }}"
+          CONTAINER_FLAG="${{ steps.flags.outputs.container_flag }}"
+          EXTRA_FLAGS="${{ inputs.flags }}"
+          gcloud config set run/region "${{ inputs.region }}"
+          if [ -n "${{ inputs.job-name }}" ]; then
+            gcloud beta run jobs deploy "${{ inputs.job-name }}" \
+              ${CONTAINER_FLAG} \
+              --image "$IMAGE" \
+              ${EXTRA_FLAGS}
+          else
+            gcloud run deploy "${{ inputs.service-name }}" \
+              ${CONTAINER_FLAG} \
+              --image "$IMAGE" \
+              ${EXTRA_FLAGS}
+          fi

README.md

@@ -173,6 +173,16 @@ Template:
 
 When a GH commit URL is included in commit message, link the commit from said comment.
 
+### Cloudrun Deployment
+
+Template:
+<https://github.com/verkstedt/.github/tree/main/workflow-templates/deploy-cloudrun.yaml>
+
+Deploy images to google cloudrun services or jobs.
+
+See [deploy-cloudrun.yaml](./.github/workflows/deploy-cloudrun.yaml) for details.
+
+
 ## Deploying new versions of actions and workflows
 
 You might have noticed that main branch in this repository is called