Yet another try

Author: Christoph Henrici

.github/workflows/deploy-cloudrun.yml

@@ -1,7 +1,7 @@
 name: Deploy to Google Cloud Run (from GHCR image)
 
 on:
-  workflow_dispatch: {}
+  workflow_dispatch: {}   # manual trigger via GitHub Actions tab
 
 env:
   GCP_PROJECT_ID: clear-rock-477020-a0
@@ -14,52 +14,59 @@ env:
 jobs:
   deploy:
     runs-on: ubuntu-22.04
-    permissions:
-      contents: read
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      # Auth to GCP with SA JSON in secret
-      - name: Set up gcloud
+      # 1) Authenticate with your JSON secret (GCP_CREDENTIALS)
+      - name: Auth to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.GCP_CREDENTIALS }}
+
+      # 2) Install/initialize gcloud (no key here — auth already done)
+      - name: Setup gcloud
         uses: google-github-actions/setup-gcloud@v2
         with:
-          project_id: ${{ env.GCP_PROJECT_ID }}
-          service_account_key: ${{ secrets.GCP_CREDENTIALS }}
+          project_id: clear-rock-477020-a0
           export_default_credentials: true
 
-      # Configure Docker cred helper for Artifact Registry
-      - name: Enable Artifact Registry docker auth
-        run: gcloud auth configure-docker $GCP_REGION-docker.pkg.dev --quiet
+      # (diagnostic – optional)
+      - run: |
+          gcloud config list account
+          gcloud auth list
+
+      # 3) Configure Docker auth for Artifact Registry
+      - name: Enable AR docker auth
+        run: gcloud auth configure-docker europe-west6-docker.pkg.dev --quiet
 
-      # (Belt & suspenders) Explicit docker login to AR with OAuth token
+      # 4) Explicit docker login (now the token exists)
       - name: Docker login to Artifact Registry
         run: |
-          gcloud auth print-access-token | docker login -u oauth2accesstoken --password-stdin https://$GCP_REGION-docker.pkg.dev
+          gcloud auth print-access-token | docker login -u oauth2accesstoken --password-stdin https://europe-west6-docker.pkg.dev
 
-      # Copy ONLY the amd64 variant from GHCR -> Artifact Registry
+      # 5) Copy ONLY amd64 from GHCR → Artifact Registry
       - name: Setup crane
         uses: imjasonh/setup-crane@v0.4
 
       - name: Copy GHCR → AR (amd64)
         run: |
           SRC=ghcr.io/chhex/spring-boot-react-crud-revisited2:latest
-          DST=$GCP_REGION-docker.pkg.dev/$GCP_PROJECT_ID/$GAR_REPOSITORY/$IMAGE_NAME:latest
+          DST=europe-west6-docker.pkg.dev/clear-rock-477020-a0/app/spring-react-crud:latest
           crane cp --platform=linux/amd64 "$SRC" "$DST"
 
-      # Deploy to Cloud Run
+      # 6) Deploy to Cloud Run
       - name: Deploy to Cloud Run
         uses: google-github-actions/deploy-cloudrun@v2
         with:
-          service: ${{ env.SERVICE_NAME }}
-          region:  ${{ env.GCP_REGION }}
-          image:   ${{ env.GCP_REGION }}-docker.pkg.dev/${{ env.GCP_PROJECT_ID }}/${{ env.GAR_REPOSITORY }}/${{ env.IMAGE_NAME }}:latest
+          service: spring-react-crud
+          region:  europe-west6
+          image:   europe-west6-docker.pkg.dev/clear-rock-477020-a0/app/spring-react-crud:latest
           flags: |
             --port=8080
             --allow-unauthenticated
             --memory=512Mi
             --max-instances=1
-            --set-env-vars=SPRING_PROFILES_ACTIVE=${{ env.SPRING_PROFILES_ACTIVE }}
+            --set-env-vars=SPRING_PROFILES_ACTIVE=demo
 
       - name: Display Cloud Run URL
         run: |