deploy.yml

name: Deploy to Google Cloud

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Put Service Account key into a file
        run:
          echo ${{ secrets.GCP_SA_KEY }} | base64 --decode > /tmp/gcp_sa_key.json

      - name: Authenticate with Google Cloud
        uses: google-github-actions/auth@v2
        with:
          credentials_json: /tmp/gcp_sa_key.json

      - name: Set up Google Cloud SDK
        uses: google-github-actions/setup-gcloud@v2
        with:
          project_id: c241-ps478

      - name: Download models
        run: |
          gsutil cp -r gs://waterwise/models/ models/

      - name: Build Docker image
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ./Dockerfile
          push: false
          tags: asia-east1-docker.pkg.dev/c241-ps478/waterwise-ml:latest

      - name: Push to Google Artifact Registry
        run: |
          gcloud auth configure-docker asia-east1-docker.pkg.dev
          docker push asia-east1-docker.pkg.dev/c241-ps478/waterwise-ml:latest

      - name: Deploy to Google Run
        run: |
          gcloud run deploy water-wise-ml \
            --image asia-east1-docker.pkg.dev/c241-ps478/waterwise-ml:latest \
            --platform managed \
            --region asia-east1 \
            --allow-unauthenticated