service.tf

# The Cloud Run service
resource "google_cloud_run_service" "image-recognition-processor" {
  name                       = local.service_name
  location                   = var.region
  autogenerate_revision_name = true

  template {
    spec {
      service_account_name = google_service_account.images_worker.email
      containers {
        # image = data.external.image_digest.result.image
        image = "gcr.io/${var.project}/${local.service_name}:latest"
        # image = output.latest_tag_output["image"]
        env {
          name  = "BUCKET_NAME"
          value = google_storage_bucket.media.name
        }
        env {
          name  = "FUNCTION_NAME"
          value = google_cloudfunctions_function.function.https_trigger_url
        }
      }
    }
  }
  traffic {
    percent         = 100
    latest_revision = true
  }

  depends_on = [google_project_service.run]
}

# Set service public
data "google_iam_policy" "noauth" {
  binding {
    role = "roles/run.invoker"
    members = [
      "allUsers",
    ]
  }
}

resource "google_cloud_run_service_iam_policy" "noauth" {
  location = google_cloud_run_service.image-recognition-processor.location
  project  = google_cloud_run_service.image-recognition-processor.project
  service  = google_cloud_run_service.image-recognition-processor.name

  policy_data = data.google_iam_policy.noauth.policy_data
  depends_on  = [google_cloud_run_service.image-recognition-processor]
}


# WORKAROUND 
data "external" "image_digest" {
  program = ["bash", "./scripts/get_latest_tag.sh", var.project, local.service_name]
}

output "latest_tag_output" {
  value = data.external.image_digest.result
}

# END WORKAROUND