Add deployment infrastructure for GCP

Author: tupui

Dockerfile

@@ -0,0 +1,45 @@
+## Step 1/3: Base image
+FROM python:3.11-slim-bookworm as base
+RUN \
+    --mount=type=cache,target=/var/cache/apt \
+    apt-get update && apt-get upgrade -y && apt install curl -y
+
+## Step 2/3: Build/Install app dependencies
+FROM base as builder
+# Allow statements and log messages to immediately appear in the Knative logs
+ENV PYTHONUNBUFFERED True
+
+COPY pyproject.toml README.md /
+
+RUN --mount=type=cache,target=/var/cache/apt apt install -y gcc git
+RUN --mount=type=cache,mode=0777,target=/root/.cache/pip \
+    pip install --upgrade pip setuptools wheel && \
+    pip install -e .  && \
+    mkdir -p /app/src
+
+COPY tests/data /app/tests/data
+COPY src/simdec /app/src/simdec
+COPY app.py /app/app.py
+
+# Step 3/3: Image
+FROM  base as panel
+# Allow statements and log messages to immediately appear in the Knative logs
+ENV PYTHONUNBUFFERED True
+ENV PYTHONPATH=/app/src
+ENV PYTHONIOENCODING=utf-8
+ENV ENV=production
+ENV PORT=8080
+
+ARG PANEL_TOKEN
+
+COPY --from=builder /usr/local/lib/python3.11/site-packages/ /usr/local/lib/python3.11/site-packages/
+COPY --from=builder /usr/local/bin/panel /usr/local/bin/panel
+COPY --from=builder /app/src /app/src
+COPY --from=builder /app/tests/data /app/tests/data
+COPY --from=builder /app/app.py /app/app.py
+
+WORKDIR /app
+RUN useradd app && usermod -a -G app app
+USER app
+# Run the web service on container startup.
+CMD panel serve app.py --address 0.0.0.0 --port 8080 --allow-websocket-origin="*" --basic-auth PANEL_TOKEN --num-procs 2 --cookie-secret my_super_safe_cookie_secret

Makefile

@@ -1,7 +1,25 @@
-.PHONY: help prepare doc test serve
+.PHONY: help prepare doc test serve build publish-production
 .DEFAULT_GOAL := help
 SHELL:=/bin/bash
 
+ifndef version
+   override version = development
+endif
+
+ifndef region
+   override region = europe-north1
+endif
+
+ifndef project
+   override project = delta-entity-401706
+endif
+
+ifndef PANEL_TOKEN
+   # only for local dev, another token is used for deployment
+   override PANEL_TOKEN = e41ea4c145bf13a60c8779c24356
+endif
+
+
 # Add help text after each target name starting with '\#\#'
 help:   ## show this help
 	@echo -e "Help for this makefile\n"
@@ -11,6 +29,8 @@ help:   ## show this help
 prepare:  ## Install dependencies and pre-commit hook
 	pip install -e ".[dev]"
 	pre-commit install
+	gcloud init
+	gcloud auth configure-docker
 
 doc:  ## Build Sphinx documentation
 	sphinx-build -b html docs docs/html
@@ -23,3 +43,36 @@ serve-dev:  ## Serve Panel dashboard - Dev mode
 
 serve:  ## Serve Panel dashboard - Prod mode
 	panel serve app.py
+
+build:
+	docker build -f ./Dockerfile \
+		--platform linux/amd64 \
+		--build-arg PANEL_TOKEN=$(PANEL_TOKEN) \
+		--tag simdec-panel:$(version) \
+	    --pull \
+	    ./.
+
+run: build
+	docker run --rm -it \
+	--memory=1g \
+	--cpuset-cpus=0 \
+	-e ENV=development \
+	-p "8080:8080" \
+	simdec-panel:$(version)
+
+publish-production: build
+	docker tag simdec-panel:$(version) $(region)-docker.pkg.dev/$(project)/simdec-panel/simdec-panel:$(version)
+	docker push $(region)-docker.pkg.dev/$(project)/simdec-panel/simdec-panel:$(version)
+
+production: publish-production
+	@echo "Deploying '$(version)'."
+	gcloud run deploy simdec-panel \
+	                  --concurrency=10 \
+	                  --max-instances=1 \
+	                  --region=$(region) \
+	                  --port=8080 \
+	                  --set-env-vars ENV=production \
+	                  --allow-unauthenticated \
+	                  --timeout=10 \
+	                  --image=$(region)-docker.pkg.dev/$(project)/simdec-panel/simdec-panel:$(version) \
+	                  --memory 1Gi