1runtime: python39
2
3handlers:
4# This configures Google App Engine to serve the files in the app's static
5# directory.
6- url: /static
7  static_dir: static/
8
9# This handler routes all requests not caught above to your main app. It is
10# required when static routes are defined, but can be omitted (along with
11# the entire handlers section) when there are no static files defined.
12- url: /.*
13  script: auto
14
15includes:
16  - env_variables.yaml

1includes:
2  - env_variables.yaml

1python -c 'from pathlib import Path;from ruamel.yaml import YAML; print( "".join( [f"{k}={v!r}\n" for k, v in YAML().load(Path("env_variables.yaml"))["env_variables"].items() if not k.__eq__("DATABASE_CONNECTION_ADDRESS")] ) )'

1# .github/workflows/deploy
2
3name: deploy-app-to-gcp
4on:
5 push:
6   branches: [ main]
7   paths:
8     - '**'
9jobs:
10 deploy:
11   name: Deploy
12   runs-on: ubuntu-latest
13
14   steps:
15     - uses: actions/checkout@v1
16     - uses: actions-hub/gcloud@master
17       env:
18         PROJECT_ID: ${{secrets.GCLOUD_PROJECT_PROD_ID}}
19         APPLICATION_CREDENTIALS: ${{secrets.GCLOUD_GITHUB_CREDENTIALS}}
20       with:
21         args: app deploy app.yaml

We need to create two more secrets, now the we have a base for our GitHub actions workflow.

• GCLOUD_PROJECT_PROD_ID
• GCLOUD_GITHUB_CREDENTIALS

The GCLOUD_PROJECT_PROD_ID value should be the name of your project in the GCP console.

The GCLOUD_GITHUB_CREDENTIALS is a json file that is base64 encoded version of a service account key from GCP with the correct permissions to run a deployment.

Read more about the GCP action here: https://github.com/actions-hub/gcloud

Cool, Cool! Now that we have those secrets we can add the following step so that the Django app can be deployed with the environment variables it needs to work

1- name: get env file
2        run: |
3          echo "${{secrets.ENV_FILE}}" | base64 --decode > ./env_variables.yaml

Migration

Now that we can successfully deploy our Django app. We need a way to make sure our migrations get applied to our application. We can added another job to our yaml file and call it migrate .

1migrate:
2    name: Migrate Database
3    runs-on: ubuntu-latest
4    needs: deploy
5    steps:
6      - uses: actions/checkout@v1

1- name: get env file
2        run: |
3          echo "${{secrets.ENV_FILE}}" | base64 --decode > ./env_variables.yaml
4          echo "${{secrets.GCLOUD_GITHUB_CREDENTIALS}}" | base64 --decode > ./secrets.json

1- name: Set up Python 3.9
2        uses: actions/setup-python@v2
3        with:
4          python-version: 3.9
5      - name: Install dependencies
6        run: |
7          python -m pip install --upgrade pip
8          pip install -r requirements.txt

1- name: Get Cloud SQL Proxy
2        run: |
3          wget https://dl.google.com/cloudsql/cloud_sql_proxy.linux.amd64 -O cloud_sql_proxy
4          chmod +x cloud_sql_proxy

1- name: migrate Database
2        env:
3          DATABASE_CONNECTION_ADDRESS: 127.0.0.1
4        run: |
5          pip install ruamel.yaml
6          set -a; eval $(python -c 'from pathlib import Path;from ruamel.yaml import YAML; print( "".join( [f"{k}={v!r}\n" for k, v in YAML().load(Path("env_variables.yaml"))["env_variables"].items() if not k.__eq__("DATABASE_CONNECTION_ADDRESS")] ) )'); set +a
7          ./cloud_sql_proxy -instances=${{secrets.GCLOUD_PROJECT_PROD_ID}}:us-central1:cms-db=tcp:5432 -credential_file secrets.json  &
8          python manage.py migrate
9          exit 0;

1pip install ruamel.yaml
2set -a; eval $(python -c 'from pathlib import Path;from ruamel.yaml import YAML; print( "".join( [f"{k}={v!r}\n" for k, v in YAML().load(Path("env_variables.yaml"))["env_variables"].items() if not k.__eq__("DATABASE_CONNECTION_ADDRESS")] ) )'); set +a

1./cloud_sql_proxy -instances=${{secrets.GCLOUD_PROJECT_PROD_ID}}:us-central1:cms-db=tcp:5432 -credential_file secrets.json  &

1python manage.py migrate
2exit 0;

1name: deploy-app-to-gcp
2on:
3  push:
4    branches: [ main]
5    paths:
6      - '**'
7jobs:
8  deploy:
9    name: Deploy
10    runs-on: ubuntu-latest
11
12    steps:
13      - uses: actions/checkout@v1
14      - name: get env file
15        run: |
16          echo "${{secrets.ENV_FILE}}" | base64 --decode > ./env_variables.yaml
17          echo "${{secrets.SECRET_JSON}}" | base64 --decode > ./secrets.json
18      - uses: actions-hub/gcloud@master
19        env:
20          PROJECT_ID: ${{secrets.GCLOUD_PROJECT_PROD_ID}}
21          APPLICATION_CREDENTIALS: ${{secrets.GCLOUD_GITHUB_CREDENTIALS}}
22        with:
23          args: app deploy app.yaml
24  migrate:
25    name: Migrate Database
26    runs-on: ubuntu-latest
27    needs: deploy
28    steps:
29      - uses: actions/checkout@v1
30      - name: get env file
31        run: |
32          echo "${{secrets.ENV_FILE}}" | base64 --decode > ./env_variables.yaml
33          echo "${{secrets.GCLOUD_GITHUB_CREDENTIALS}}" | base64 --decode > ./secrets.json
34      - name: Set up Python 3.9
35        uses: actions/setup-python@v2
36        with:
37          python-version: 3.9
38      - name: Install dependencies
39        run: |
40          python -m pip install --upgrade pip
41          pip install -r requirements.txt
42      - name: Get Cloud SQL Proxy
43        run: |
44          wget https://dl.google.com/cloudsql/cloud_sql_proxy.linux.amd64 -O cloud_sql_proxy
45          chmod +x cloud_sql_proxy
46      - name: migrate Database
47        env:
48          DATABASE_CONNECTION_ADDRESS: 127.0.0.1
49        run: |
50          pip install ruamel.yaml
51          set -a; eval $(python -c 'from pathlib import Path;from ruamel.yaml import YAML; print( "".join( [f"{k}={v!r}\n" for k, v in YAML().load(Path("env_variables.yaml"))["env_variables"].items() if not k.__eq__("DATABASE_CONNECTION_ADDRESS")] ) )'); set +a
52          ./cloud_sql_proxy -instances=${{secrets.GCLOUD_PROJECT_PROD_ID}}:us-central1:cms-db=tcp:5432 -credential_file secrets.json  &
53          python manage.py migrate
54          exit 0;