feat(infra): provision cloud run and artifact registry via terraform

.gitignore

@@ -218,3 +218,17 @@ __marimo__/
 
 # Streamlit
 .streamlit/secrets.toml
+
+# Terraform
+**/.terraform/*
+*.tfstate
+*.tfstate.*
+crash.log
+crash.*.log
+*.tfvars
+*.tfvars.json
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+!.terraform.lock.hcl

terraform/main.tf

@@ -0,0 +1,57 @@
+terraform {
+
+    required_version = ">= 1.5.0"
+  required_providers {
+    google={
+        source = "hashicorp/google"
+        version = "~> 5.0"
+    }
+  }
+}
+
+provider "google" {
+    project = var.project_id
+    region = var.region
+}
+
+resource "google_artifact_registry_repository" "repo" {
+    location      = var.region
+    repository_id = "devops-repo"
+    description   = "Docker repository for DevOps application"
+    format        = "DOCKER"
+}
+
+resource "google_cloud_run_v2_service_iam_member" "public_access" {
+
+  project  = var.project_id
+  location = google_cloud_run_v2_service.app.location
+  name     = google_cloud_run_v2_service.app.name
+  role     = "roles/run.invoker"
+  member   = "allUsers"    
+
+}
+
+
+resource "google_cloud_run_v2_service" "app" {
+  name                = var.service_name
+  location            = var.region
+  ingress             = "INGRESS_TRAFFIC_ALL"
+
+  template {
+    containers {
+      image = var.image
+
+      ports {
+        container_port = 8000
+      }
+
+
+      resources {
+        limits = {
+          cpu    = "1"
+          memory = "512Mi"
+        }
+      }
+    }
+  }
+}

terraform/outputs.tf

@@ -0,0 +1,9 @@
+output "service_url" {
+  description = "Public URL of the deployed Cloud Run service"
+  value       = google_cloud_run_v2_service.app.uri
+}
+
+output "artifact_registry_repo" {
+  description = "Artifact Registry Docker repository URL"
+  value       = "${var.region}-docker.pkg.dev/${var.project_id}/${google_artifact_registry_repository.repo.repository_id}"
+}

terraform/variables.tf

@@ -0,0 +1,23 @@
+variable "project_id" {
+  description = "The Google Cloud project ID"
+  type        = string
+  default     = "project-452e74c0-919a-47bd-903"
+}
+
+variable "region" {
+  description = "GCP region for resources"
+  type        = string
+  default     = "europe-north1" # Stockholm region
+}
+
+variable "service_name" {
+  description = "Name of the Cloud Run service"
+  type        = string
+  default     = "devops-app"
+}
+
+variable "image" {
+  description = "Container image to deploy initially"
+  type        = string
+  default     = "europe-north1-docker.pkg.dev/project-452e74c0-919a-47bd-903/devops-repo/app:v1"
+}