Cloud Spannerの無料トライアルがGAしたので、Rails on Cloud Run X Cloud Spannerを構築した話

default: &default
  adapter: spanner
  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
  project: <%= ENV.fetch("PROJECT_ID") { "" } %>
  instance: <%= ENV.fetch("SPANNER_INSTANCE") { "" } %>
  timeout: 5000

development:
  <<: *default
  emulator_host: <%= ENV.fetch("SPANNER_HOST") { "" } %>
  database: spanner_test_dev

production:
  <<: *default
  database: spanner_test

make init

up: migrate
	docker compose up -d web_app

init: create_instance create_db build up

migrate:
	docker compose run --rm web_app bundle exec rails db:migrate

create_instance:
	docker compose up -d spanner
	docker compose run --rm create_instance

create_db:
	docker compose run --rm web_app bundle exec rails db:create

build:
	docker compose build

make create_instance_production

create_instance_production:
	gcloud spanner instances create trial-1 --config=regional-${REGION} --instance-type=free-instance --description="trial-1"

--config=regional-${REGION} --instance-type=free-instance

cd infra && terraform init

data "google_kms_secret" "rails_master_key" {
  crypto_key = google_kms_crypto_key.crypto_key.id
  # Must Replace!: echo -n $RAILS_MASTER_KEY | gcloud kms encrypt --location asia-northeast1 --keyring key-ring --key crypto-key --plaintext-file - --ciphertext-file - | base64
  ciphertext = "CiQAZ4zH06xt5lU6j2Q4QRsojbdH1RCwg9KJLJt3blR+2noYcbYSSQDLeR9jDCTyztjOnaxTLsvcBjP82GLLCIRWfK5RtzAYt/x4IySg6Awot82dFLuOrYi3/zEk6W8rR+iEnrddxhPQDbJAlqAa3uU="
}

resource "google_secret_manager_secret" "rails_master_key" {
  project   = data.google_project.default.project_id
  secret_id = "rails-master-key"

  replication {
    automatic = true
  }
}

resource "google_secret_manager_secret_version" "rails_master_key" {
  secret      = google_secret_manager_secret.rails_master_key.id
  secret_data = data.google_kms_secret.rails_master_key.plaintext
}

terraform plan
terraform apply -auto-approve

echo -n $RAILS_MASTER_KEY | gcloud kms encrypt --location asia-northeast1 --keyring key-ring --key crypto-key --plaintext-file - --ciphertext-file - | base64 

# Must Replace!: echo -n $RAILS_MASTER_KEY | gcloud kms encrypt --location asia-northeast1 --keyring key-ring --key crypto-key --plaintext-file - --ciphertext-file - | base64
  ciphertext = "CiQAZ4zH06xt5lU6j2Q4QRsojbdH1RCwg9KJLJt3blR+2noYcbYSSQDLeR9jDCTyztjOnaxTLsvcBjP82GLLCIRWfK5RtzAYt/x4IySg6Awot82dFLuOrYi3/zEk6W8rR+iEnrddxhPQDbJAlqAa3uU="

terraform plan
terraform apply -auto-approve

make create_migrate_production_job

create_migrate_production_job:
	gcloud beta run jobs create rails-spanner-migrate \
	--image us-docker.pkg.dev/cloudrun/container/job:latest\
	--region ${REGION}

make deploy_production

deploy_production: build_and_push migrate_production deploy_cloud_run

deploy_cloud_run:
	gcloud beta run deploy rails-cloud-spanner \
	--platform managed \
	--region ${REGION} \
	--image gcr.io/${PROJECT_ID}/rails-cloud-spanner \
	--set-env-vars=PROJECT_ID=${PROJECT_ID},SPANNER_INSTANCE=trial-1,RAILS_ENV=production \
	--set-secrets=RAILS_MASTER_KEY=rails-master-key:latest \
	--port 3000 \
	--concurrency=5 \
	--max-instances=10 \
	--cpu-boost \
	--allow-unauthenticated

migrate_production:
	gcloud beta run jobs update rails-spanner-migrate \
	--image gcr.io/${PROJECT_ID}/rails-cloud-spanner \
	--command=bundle,exec,rails,db:migrate \
	--region ${REGION} \
	--set-env-vars=PROJECT_ID=${PROJECT_ID},SPANNER_INSTANCE=trial-1,RAILS_ENV=production \
	--set-secrets=RAILS_MASTER_KEY=rails-master-key:latest 
	gcloud beta run jobs execute rails-spanner-migrate --region ${REGION} --wait

build_and_push:
	gcloud builds submit --config cloudbuild.yaml

steps:
  - id: "build image"
    name: "gcr.io/cloud-builders/docker"
    entrypoint: 'bash'
    args: ["-c", "docker build  -t gcr.io/${PROJECT_ID}/rails-cloud-spanner . "]

  - id: "push image"
    name: "gcr.io/cloud-builders/docker"
    args: ["push", "gcr.io/${PROJECT_ID}/rails-cloud-spanner"]

images:
  - "gcr.io/${PROJECT_ID}/rails-cloud-spanner"

gcloud beta run jobs update rails-spanner-migrate \
	--image gcr.io/${PROJECT_ID}/rails-cloud-spanner \
	--command=bundle,exec,rails,db:migrate \
	--region ${REGION} \
	--set-env-vars=PROJECT_ID=${PROJECT_ID},SPANNER_INSTANCE=trial-1,RAILS_ENV=production \
	--set-secrets=RAILS_MASTER_KEY=rails-master-key:latest 
gcloud beta run jobs execute rails-spanner-migrate --region ${REGION} --wait

--command=bundle,exec,rails,db:migrate

--set-env-vars=PROJECT_ID=${PROJECT_ID},SPANNER_INSTANCE=trial-1,RAILS_ENV=production

--set-secrets=RAILS_MASTER_KEY=rails-master-key:latest 

gcloud beta run jobs execute rails-spanner-migrate --region ${REGION} --wait