Comment déployer une API Node.js sur Cloud Run en 2026

gcloud services enable run.googleapis.com artifactregistry.googleapis.com cloudbuild.googleapis.com secretmanager.googleapis.com

gcloud artifacts repositories create my-repo --repository-format=docker --location=europe-west1 --description="Repo Docker pour Cloud Run"

{
  "name": "cloudrun-api",
  "version": "1.0.0",
  "description": "API Node.js pour Cloud Run",
  "main": "app.js",
  "scripts": {
    "start": "node app.js"
  },
  "dependencies": {
    "express": "^4.21.1"
  },
  "engines": {
    "node": ">=20"
  },
  "author": "Learni Dev"
}

'use strict';

const express = require('express');
const app = express();
const PORT = parseInt(process.env.PORT) || 8080;

app.use(express.json());

app.get('/', (req, res) => {
  res.json({ message: 'Hello Cloud Run 2026!', timestamp: new Date().toISOString() });
});

app.get('/health', (req, res) => {
  res.status(200).send('OK');
});

app.get('/secret', (req, res) => {
  const secret = process.env.DB_PASSWORD ? '*** configured ***' : 'Not set';
  res.json({ secretStatus: secret, env: process.env.NODE_ENV || 'production' });
});

// Graceful shutdown pour Cloud Run
let server;
process.on('SIGTERM', () => {
  console.log('SIGTERM reçu, shutdown graceful');
  if (server) {
    server.close(() => {
      console.log('Serveur fermé');
      process.exit(0);
    });
  }
});

server = app.listen(PORT, '0.0.0.0', () => {
  console.log(`Serveur sur port ${PORT}`);
});

FROM node:20-alpine

WORKDIR /app

# Copie package pour cache
COPY package*.json ./

# Install prod deps only
RUN npm ci --only=production --no-package-lock && npm cache clean --force

# Copie source
COPY . .

# Non-root pour sécurité
RUN addgroup -g 1001 -S nodejs
RUN adduser -S nextjs -u 1001
USER node

EXPOSE 8080

CMD ["npm", "start"]

npm install
docker build -t cloudrun-api .
docker run -p 8080:8080 \
  -e PORT=8080 \
  -e DB_PASSWORD=testsecret \
  --rm cloudrun-api &
curl http://localhost:8080/
curl http://localhost:8080/health
curl http://localhost:8080/secret
docker stop $(docker ps -q --filter ancestor=cloudrun-api)

echo -n "mon-mot-de-passe-super-securise-2026" | gcloud secrets create db-password --data-file=-
gcloud secrets versions add db-password --data-file=-

gcloud run deploy cloudrun-demo \
  --source . \
  --platform managed \
  --region europe-west1 \
  --allow-unauthenticated \
  --port 8080 \
  --set-secrets db-password=DB_PASSWORD:latest

gcloud run deploy cloudrun-demo \
  --image europe-west1-docker.pkg.dev/$PROJECT_ID/my-repo/cloudrun-demo \
  --platform managed \
  --region europe-west1 \
  --allow-unauthenticated \
  --port 8080 \
  --concurrency 100 \
  --min-instances 1 \
  --max-instances 10 \
  --cpu 2 \
  --memory 2Gi \
  --set-secrets db-password=DB_PASSWORD:latest

steps:
- name: 'gcr.io/cloud-builders/docker'
  args:
  - 'build'
  - '-t'
  - 'europe-west1-docker.pkg.dev/$PROJECT_ID/my-repo/cloudrun-demo:latest'
  - '.'
- name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
  entrypoint: 'gcloud'
  args:
  - 'run'
  - 'deploy'
  - 'cloudrun-demo'
  - '--image'
  - 'europe-west1-docker.pkg.dev/$PROJECT_ID/my-repo/cloudrun-demo:latest'
  - '--region'
  - 'europe-west1'
  - '--platform'
  - 'managed'
  - '--allow-unauthenticated'
  - '--concurrency'
  - '100'
  - '--min-instances'
  - '1'
  - '--max-instances'
  - '10'
  - '--cpu'
  - '2'
  - '--memory'
  - '2Gi'
  - '--set-secrets'
  - 'db-password=DB_PASSWORD:latest'
images:
- 'europe-west1-docker.pkg.dev/$PROJECT_ID/my-repo/cloudrun-demo:latest'
options:
  logging: CLOUDLOGGING_ONLY