Google Cloud Run: Serverless Containers

# Install Google Cloud CLI
curl https://sdk.cloud.google.com | bash
exec -l $SHELL
gcloud init

# Login dan set project
gcloud auth login
gcloud config set project my-project-id

# Enable Cloud Run API
gcloud services enable run.googleapis.com
gcloud services enable artifactregistry.googleapis.com

# Set default region
gcloud config set run/region asia-southeast1

# Verifikasi
gcloud --version
gcloud run --help

# Deploy langsung dari source directory
gcloud run deploy my-service \
  --source . \
  --region asia-southeast1 \
  --allow-unauthenticated \
  --port 8080 \
  --memory 512Mi \
  --cpu 1 \
  --min-instances 0 \
  --max-instances 10

# Buildpacks akan otomatis:
# 1. Detect bahasa (Node.js, Python, Go, Java, dll)
# 2. Install dependencies
# 3. Build container image
# 4. Push ke Artifact Registry
# 5. Deploy ke Cloud Run
# 6. Berikan URL publik

# Deploy dari image yang sudah ada di Artifact Registry
gcloud run deploy my-service \
  --image asia-southeast1-docker.pkg.dev/my-project/my-repo/my-app:latest \
  --region asia-southeast1 \
  --allow-unauthenticated

# Deploy dari Docker Hub
gcloud run deploy my-service \
  --image nginx:latest \
  --region asia-southeast1 \
  --port 80

# Deploy dengan environment variables
gcloud run deploy my-service \
  --image my-registry/my-app:v2.0 \
  --region asia-southeast1 \
  --set-env-vars "DATABASE_URL=postgres://..." \
  --set-env-vars "NODE_ENV=production" \
  --set-env-vars "API_KEY=my-secret-key"

# Deploy dengan secrets dari Secret Manager
gcloud run deploy my-service \
  --image my-registry/my-app:latest \
  --set-secrets "DATABASE_URL=db-url-secret:latest" \
  --set-secrets "API_KEY=api-key-secret:latest"

# List semua services
gcloud run services list --region asia-southeast1

# Deskripsi service
gcloud run services describe my-service --region asia-southeast1

# Lihat URL service
gcloud run services describe my-service \
  --region asia-southeast1 \
  --format 'value(status.url)'

# Update service
gcloud run services update my-service \
  --region asia-southeast1 \
  --memory 1Gi \
  --cpu 2 \
  --max-instances 20

# Delete service
gcloud run services delete my-service --region asia-southeast1

# Lihat logs
gcloud run services logs read my-service --region asia-southeast1 --limit 50

# Export service ke YAML
gcloud run services describe my-service \
  --region asia-southeast1 \
  --format yaml > service-config.yaml

# Node.js Express App untuk Cloud Run
FROM node:20-slim

WORKDIR /app

# Copy package files
COPY package*.json ./

# Install dependencies
RUN npm ci --only=production

# Copy source code
COPY . .

# Cloud Run menggunakan PORT environment variable
ENV PORT=8080

# Expose port
EXPOSE 8080

# Gunakan non-root user
RUN addgroup --system appgroup && adduser --system --ingroup appgroup appuser
USER appuser

# Start app
CMD ["node", "server.js"]

// server.js — Penting: gunakan process.env.PORT
const express = require('express');
const app = express();

const PORT = process.env.PORT || 8080;

app.get('/', (req, res) => {
  res.json({
    message: 'Hello from Cloud Run!',
    timestamp: new Date().toISOString(),
    environment: process.env.NODE_ENV || 'development'
  });
});

app.get('/health', (req, res) => {
  res.status(200).json({ status: 'healthy' });
});

// Penting: listen pada 0.0.0.0 bukan localhost
app.listen(PORT, '0.0.0.0', () => {
  console.log(`Server listening on port ${PORT}`);
});

# Python Flask App untuk Cloud Run
FROM python:3.12-slim

WORKDIR /app

# Install dependencies
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# Copy app
COPY . .

# Set environment
ENV PORT=8080

# Non-root user
RUN adduser --disabled-password --gecos "" appuser
USER appuser

# Start with gunicorn
CMD exec gunicorn --bind :$PORT --workers 2 --threads 8 app:app

# app.py
import os
from flask import Flask, jsonify

app = Flask(__name__)

@app.route('/')
def home():
    return jsonify({
        'message': 'Hello from Cloud Run!',
        'language': 'Python',
        'port': os.environ.get('PORT', 8080)
    })

@app.route('/health')
def health():
    return jsonify({'status': 'healthy'})

if __name__ == '__main__':
    port = int(os.environ.get('PORT', 8080))
    app.run(host='0.0.0.0', port=port)

# Stage 1: Build
FROM node:20-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build

# Stage 2: Production
FROM node:20-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production && npm cache clean --force
COPY --from=builder /app/dist ./dist

ENV NODE_ENV=production
ENV PORT=8080
EXPOSE 8080

USER node
CMD ["node", "dist/server.js"]

# List semua revisions
gcloud run revisions list \
  --service my-service \
  --region asia-southeast1

# Deskripsi revision spesifik
gcloud run revisions describe my-service-00002-abc \
  --region asia-southeast1

# Lihat revisions dengan detail
gcloud run revisions list \
  --service my-service \
  --region asia-southeast1 \
  --format "table(name, metadata.creationTimestamp, spec.containerConcurrency, status.conditions.type)"

# Deploy dengan nama revision custom
gcloud run deploy my-service \
  --image my-app:v2.0 \
  --revision-suffix v2-0 \
  --region asia-southeast1

# Output:
# Revisions:
#   my-service-00001        (v1.0)    Traffic: 0%
#   my-service-v2-0         (v2.0)    Traffic: 100%

# Rollback ke revision sebelumnya
gcloud run services update-traffic my-service \
  --to-revisions my-service-00001=100 \
  --region asia-southeast1

# Hapus revisions lama (yang tidak menerima traffic)
# Cloud Run otomatis menghapus revisions idle setelah beberapa waktu
# Tapi bisa juga dihapus manual untuk menghemat memory

# === TRAFFIC SPLITTING COMMANDS ===

# Default: 100% ke revisi terbaru
gcloud run deploy my-service \
  --image my-app:v2.0 \
  --region asia-southeast1

# Split traffic: 90% v1, 10% v2 (canary)
gcloud run services update-traffic my-service \
  --to-revisions my-service-00001=90,my-service-00002=10 \
  --region asia-southeast1

# Gradual rollout: 80% v1, 20% v2
gcloud run services update-traffic my-service \
  --to-revisions my-service-00001=80,my-service-00002=20 \
  --region asia-southeast1

# Complete rollout: 100% ke v2
gcloud run services update-traffic my-service \
  --to-revisions my-service-00002=100 \
  --region asia-southeast1

# Rollback: 100% ke v1
gcloud run services update-traffic my-service \
  --to-revisions my-service-00001=100 \
  --region asia-southeast1

# Deploy tanpa langsung menerima traffic (--no-traffic)
gcloud run deploy my-service \
  --image my-app:v3.0 \
  --no-traffic \
  --region asia-southeast1
# Revision baru dibuat tapi tidak menerima traffic
# Untuk testing via URL khusus sebelum promote

# Promote revision yang di-test
gcloud run services update-traffic my-service \
  --to-revisions my-service-00003=100 \
  --region asia-southeast1

# Lihat traffic distribution saat ini
gcloud run services describe my-service \
  --region asia-southeast1 \
  --format "table(status.traffic.revisionName, status.traffic.percent, status.traffic.tag)"

# Deploy dengan tag (preview URL)
gcloud run deploy my-service \
  --image my-app:v3.0 \
  --tag staging \
  --no-traffic \
  --region asia-southeast1

# Akses via tagged URL untuk testing
# Format: https://staging----uc.a.run.app
# Tidak mempengaruhi traffic production

# Update tag
gcloud run services update-traffic my-service \
  --update-tags staging=my-service-00003 \
  --region asia-southeast1

# Remove tag
gcloud run services update-traffic my-service \
  --remove-tags staging \
  --region asia-southeast1

# Promote tagged revision ke production
gcloud run services update-traffic my-service \
  --to-revisions my-service-00003=100 \
  --region asia-southeast1

# Deploy dengan full configuration
gcloud run deploy my-service \
  --image my-app:latest \
  --region asia-southeast1 \
  --cpu 2 \
  --memory 1Gi \
  --concurrency 100 \
  --timeout 600 \
  --min-instances 1 \
  --max-instances 50 \
  --port 8080

# Update resource tanpa redeploy
gcloud run services update my-service \
  --region asia-southeast1 \
  --cpu 4 \
  --memory 2Gi \
  --max-instances 100

# CPU allocation modes:
# --cpu-boost    : Startup CPU boost (allocasi CPU lebih saat cold start)
# --cpu-throttled: CPU throttled saat tidak menerima request
# --no-cpu-throttle: CPU selalu allocated (untuk background processing)

# Deploy dengan startup CPU boost
gcloud run deploy my-service \
  --image my-app:latest \
  --cpu-boost \
  --region asia-southeast1

# CPU always allocated (untuk WebSockets atau background tasks)
gcloud run deploy my-service \
  --image my-app:latest \
  --no-cpu-throttle \
  --min-instances 1 \
  --region asia-southeast1

# Map custom domain ke Cloud Run service
gcloud run domain-mappings create \
  --service my-service \
  --domain myapp.example.com \
  --region asia-southeast1

# Output akan menunjukkan DNS records yang perlu ditambahkan:
# NAME   TYPE  DATA
# myapp  A     216.239.32.21
# myapp  AAAA  2001:4860:4802:32::15
# _ghs  CNAME   ghs.googlehosted.com.

# Setelah DNS dikonfigurasi, SSL certificate otomatis dibuat

# List domain mappings
gcloud run domain-mappings list --region asia-southeast1

# Deskripsi mapping
gcloud run domain-mappings describe myapp.example.com \
  --region asia-southeast1

# Delete domain mapping
gcloud run domain-mappings delete myapp.example.com \
  --region asia-southeast1

# Dengan Google-managed SSL certificate (otomatis)
# Cloud Run otomatis provisioning SSL cert untuk custom domain
# Pastikan DNS record benar dan propagated

# Deploy ke beberapa region
gcloud run deploy my-service-asia \
  --image my-app:latest \
  --region asia-southeast1

gcloud run deploy my-service-us \
  --image my-app:latest \
  --region us-central1

gcloud run deploy my-service-eu \
  --image my-app:latest \
  --region europe-west1

# Buat Serverless NEG (Network Endpoint Group) untuk setiap region
gcloud compute network-endpoint-groups create neg-asia \
  --region=asia-southeast1 \
  --serverless-service=my-service-asia

gcloud compute network-endpoint-groups create neg-us \
  --region=us-central1 \
  --serverless-service=my-service-us

# Buat Load Balancer dengan URL Map
# (Lebih detail di Google Cloud Load Balancing docs)

# Buat Cloud Run Job
gcloud run jobs create etl-job \
  --image my-etl-image:latest \
  --region asia-southeast1 \
  --tasks 10 \
  --parallelism 5 \
  --memory 2Gi \
  --cpu 2 \
  --max-retries 3 \
  --set-env-vars "SOURCE=gs://my-bucket/data/*"

# Execute job
gcloud run jobs execute etl-job --region asia-southeast1

# Execute dengan override parameters
gcloud run jobs execute etl-job \
  --region asia-southeast1 \
  --tasks 20 \
  --parallelism 10

# Cek status execution
gcloud run jobs executions describe etl-job-xxxxx \
  --region asia-southeast1

# List executions
gcloud run jobs executions list \
  --job etl-job \
  --region asia-southeast1

# Lihat logs dari execution
gcloud run jobs executions describe etl-job-xxxxx \
  --region asia-southeast1 \
  --format 'value(status.executionCompletionStatus)'

# Update job
gcloud run jobs update etl-job \
  --region asia-southeast1 \
  --memory 4Gi \
  --tasks 20

# Schedule job dengan Cloud Scheduler
gcloud scheduler jobs create http etl-daily \
  --location asia-southeast1 \
  --schedule "0 2 * * *" \
  --uri "https://run.googleapis.com/v2/projects/my-project/locations/asia-southeast1/jobs/etl-job:run" \
  --http-method POST \
  --oauth-service-account-email scheduler@my-project.iam.gserviceaccount.com

# Delete job
gcloud run jobs delete etl-job --region asia-southeast1

# Deploy dengan Cloud SQL connection
gcloud run deploy my-service \
  --image my-app:latest \
  --region asia-southeast1 \
  --add-cloudsql-instances my-project:asia-southeast1:my-db \
  --set-env-vars "INSTANCE_CONNECTION_NAME=my-project:asia-southeast1:my-db"

# Gunakan Cloud SQL Auth Proxy (recommended)
# Environment variables untuk koneksi database:
# DB_HOST=/cloudsql/my-project:asia-southeast1:my-db
# DB_USER=postgres
# DB_PASS=secret-from-secret-manager
# DB_NAME=myapp

# Cloud Run bisa subscribe ke Pub/Sub topics
# Buat service account untuk Pub/Sub push
gcloud iam service-accounts create pubsub-invoker \
  --display-name "Pub/Sub to Cloud Run Invoker"

# Berikan permission
gcloud run services add-iam-policy-binding my-service \
  --region asia-southeast1 \
  --member serviceAccount:pubsub-invoker@my-project.iam.gserviceaccount.com \
  --role roles/run.invoker

# Create Pub/Sub subscription yang push ke Cloud Run
gcloud pubsub subscriptions create my-subscription \
  --topic my-topic \
  --push-endpoint=https://my-service-xxx.a.run.app/pubsub \
  --push-auth-service-account=pubsub-invoker@my-project.iam.gserviceaccount.com

# Buat VPC Connector
gcloud compute networks vpc-access connector create my-connector \
  --region asia-southeast1 \
  --subnet projects/my-project/regions/asia-southeast1/subnetworks/default \
  --min-instances 2 \
  --max-instances 10

# Deploy dengan VPC connector
gcloud run deploy my-service \
  --image my-app:latest \
  --region asia-southeast1 \
  --vpc-connector my-connector \
  --set-env-vars "REDIS_HOST=10.0.0.5"

# Sekarang service bisa mengakses resources di VPC:
# - Cloud SQL private IP
# - Redis/Memcached
# - Internal microservices
# - Private APIs