Build and push Docker image after full CI workflow

Author: Sparrow0hawk

.github/workflows/ci.yml

@@ -0,0 +1,90 @@
+name: CI
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+env:
+  VITE_MAPTILER_API_KEY: '${{ secrets.MAPTILER_API_KEY }}'
+  IMAGE_PROJECT: dft-rlg-atip-dev
+  IMAGE_LOCATION: europe-west1
+  IMAGE_REPOSITORY_ID: docker
+  IMAGE_NAME: plan
+
+jobs:
+  check:
+    timeout-minutes: 60
+    runs-on: ubuntu-22.04
+    steps:
+    - uses: actions/checkout@v3
+
+    - uses: actions/setup-node@v3
+      with:
+        node-version: 22.x
+        cache: 'npm'
+
+    - name: Install wasm-pack
+      uses: jetli/wasm-pack-action@v0.4.0
+
+    - name: Install dependencies
+      run: npm ci
+
+    - name: Setup GOV.UK
+      run: npm run setup-govuk
+
+    - name: Install Playwright Browsers
+      run: npx playwright install --with-deps
+
+    - name: Run type-checker
+      run: npm run check
+
+    - name: Run Playwright tests
+      run: npm test
+
+    - name: Upload test results
+      run: npx github-actions-ctrf ctrf/ctrf-report.json
+      if: always()
+
+    - name: Upload test results for historical report
+      uses: actions/upload-artifact@v4
+      with:
+        name: ctrf-report
+        path: ctrf/ctrf-report.json
+      if: always()
+
+    - name: Build svelte app
+      run: npm run build
+
+    - id: auth
+      name: Authenticate with Google Cloud
+      uses: google-github-actions/auth@v3
+      with:
+        token_format: access_token
+        credentials_json: '${{ secrets.GCP_CREDENTIALS_PUSH }}'
+
+    - name: Login to Docker repository
+      uses: docker/login-action@v4
+      with:
+        registry: ${{ env.IMAGE_LOCATION }}-docker.pkg.dev
+        username: oauth2accesstoken
+        password: ${{ steps.auth.outputs.access_token }}
+
+    - id: meta
+      name: Extract metadata
+      uses: docker/metadata-action@v6
+      with:
+        images: ${{ env.IMAGE_LOCATION }}-docker.pkg.dev/${{ env.IMAGE_PROJECT }}/${{ env.IMAGE_REPOSITORY_ID }}/${{ env.IMAGE_NAME }}
+        tags: |
+          type=semver,pattern={{version}}
+          type=ref,event=branch,enable={{is_not_default_branch}}
+          type=raw,value=latest,enable={{is_default_branch}}
+
+    - name: Build and push image
+      uses: docker/build-push-action@v7
+      with:
+        context: .
+        tags: ${{ steps.meta.outputs.tags }}
+        labels: ${{ steps.meta.outputs.labels }}
+        push: true

.github/workflows/playwright.yml

@@ -0,0 +1,12 @@
+FROM node:22-slim
+
+ENV PORT=8080
+
+WORKDIR /usr/src/app
+COPY backend .
+
+RUN npm install --production
+
+USER node
+
+CMD [ "sh", "-c", "npm start" ]

Dockerfile

@@ -86,6 +86,50 @@ You can also configure the application locally by setting the following environm
 
 1. Open http://localhost:8080
 
+## Running locally using Docker
+
+To run the server as a container:
+
+1. Build the svelte app
+
+   ```bash
+   npm install && npm run build
+   ```
+
+2. Copy over the built svelte app
+
+   ```bash
+   cp -r dist backend/
+   ```
+
+1. Build the Docker image
+
+   ```bash
+   docker build -t plan .
+   ```
+
+1. Authenticate with Google
+   
+   ```bash
+   gcloud auth application-default login
+   ```
+   
+1. Run the Docker image
+
+   ```bash
+   ADC=~/.config/gcloud/application_default_credentials.json
+
+   docker run --rm -it \
+     -e GCS_BUCKET=dft-rlg-atip-dev \
+     -e USE_IAP=false \
+     -e GOOGLE_APPLICATION_CREDENTIALS=/tmp/keys/google_credentials.json \
+     -v ${ADC}:/tmp/keys/google_credentials.json:ro \
+     -p 8080:8080 \
+      plan
+   ```
+   
+1. Open http://127.0.0.1:8080
+
 
 ### Developing with Vite