Cloud Run Template Microservice

A template repository for a Cloud Run microservice, written in Java.

Prerequisite

Enable the Cloud Run API via the console or CLI:

gcloud services enable run.googleapis.com

Features

Spring Boot: Web server framework
Jib Maven Plugin: Tooling to build production-ready container images from source code and without a Dockerfile
SIGTERM handler: Catch termination signal for cleanup before Cloud Run stops the container
Service metadata: Access service metadata, project Id and region, at runtime
Local development utilities: Auto-restart with changes and prettify logs
Structured logging w/ Log Correlation: JSON formatted logger, parsable by Cloud Logging, with automatic correlation of container logs to a request log.
Unit and System tests: Basic unit and system tests setup for the microservice

Local Development

Cloud Code

This template works with Cloud Code, an IDE extension to let you rapidly iterate, debug, and run code on Kubernetes and Cloud Run.

Learn how to use Cloud Code for:

Local development - VSCode, IntelliJ
Local debugging - VSCode, IntelliJ
Deploying a Cloud Run service - VSCode, IntelliJ
Creating a new application from a custom template (.template/templates.json allows for use as an app template) - VSCode, IntelliJ

CLI tooling

Local development

Start the server with hot reload:
```
mvn spring-boot:run
```
- Note: uncomment the JSON formatter in logback-spring.xml for Pretty Printed logging during development

Deploying a Cloud Run service

Set Project Id:

export GOOGLE_CLOUD_PROJECT=<GCP_PROJECT_ID>

Enable the Artifact Registry API:

gcloud services enable artifactregistry.googleapis.com

Create an Artifact Registry repo:

export REPOSITORY="samples"
export REGION=us-central1
gcloud artifacts repositories create $REPOSITORY --location $REGION --repository-format "docker"

Use the gcloud credential helper to authorize Docker to push to your Artifact Registry:
```
gcloud auth configure-docker
```

Build the container:

mvn clean compile jib:build -Dimage=$REGION-docker.pkg.dev/$GOOGLE_CLOUD_PROJECT/$REPOSITORY/microservice-template

Deploy to Cloud Run:

gcloud run deploy microservice-template \
  --image $REGION-docker.pkg.dev/$GOOGLE_CLOUD_PROJECT/$REPOSITORY/microservice-template \
  --region $REGION

Run sample tests

Run unit tests
```
mvn test
```

Run system tests

gcloud builds submit \
    --config src/test/resources/advance.cloudbuild.yaml \
    --substitutions 'COMMIT_SHA=manual,REPO_NAME=cloud-run-microservice-template-java'

The Cloud Build configuration file will build and deploy the containerized service to Cloud Run, run tests managed by Maven, then clean up testing resources. This configuration restricts public access to the test service. Therefore, service accounts need to have the permission to issue Id tokens for request authorization:

Enable Cloud Run, Cloud Build, Artifact Registry, and IAM APIs:

gcloud services enable run.googleapis.com cloudbuild.googleapis.com iamcredentials.googleapis.com artifactregistry.googleapis.com

Set environment variables.

export PROJECT_ID="$(gcloud config get-value project)"
export PROJECT_NUMBER="$(gcloud projects describe $(gcloud config get-value project) --format='value(projectNumber)')"

Create an Artifact Registry repo (or use another already created repo):

export REPOSITORY="samples"
export REGION=us-central1
gcloud artifacts repositories create $REPOSITORY --location $REGION --repository-format "docker"

Create service account token-creator with Service Account Token Creator and Cloud Run Invoker roles.

gcloud iam service-accounts create token-creator

gcloud projects add-iam-policy-binding $PROJECT_ID \
    --member="serviceAccount:token-creator@$PROJECT_ID.iam.gserviceaccount.com" \
    --role="roles/iam.serviceAccountTokenCreator"
gcloud projects add-iam-policy-binding $PROJECT_ID \
    --member="serviceAccount:token-creator@$PROJECT_ID.iam.gserviceaccount.com" \
    --role="roles/run.invoker"

Add Service Account Token Creator role to the Cloud Build service account.

gcloud projects add-iam-policy-binding $PROJECT_ID \
    --member="serviceAccount:$PROJECT_NUMBER@cloudbuild.gserviceaccount.com" \
    --role="roles/iam.serviceAccountTokenCreator"

Maintenance & Support

This repo performs basic periodic testing for maintenance. Please use the issue tracker for bug reports, features requests and submitting pull requests.

Contributions

Please see the contributing guidelines

License

This library is licensed under Apache 2.0. Full license text is available in LICENSE.

SivaSakthi07/samplegcp