Add Cloud Run deploy workflow and doc for required GCP secrets

Author: StockMaster Deployer

.github/workflows/deploy-cloudrun.yml

@@ -0,0 +1,55 @@
+name: Deploy to Google Cloud Run
+
+on:
+  push:
+    branches: [ main ]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Authenticate to GCP
+        uses: google-github-actions/auth@v1
+        with:
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+      - name: Set up gcloud
+        uses: google-github-actions/setup-gcloud@v1
+        with:
+          project_id: ${{ secrets.GCP_PROJECT }}
+
+      - name: Build and push backend image
+        run: |
+          IMAGE=gcr.io/${{ secrets.GCP_PROJECT }}/expense-system-backend
+          docker build -f backend/Dockerfile -t ${IMAGE}:${GITHUB_SHA} .
+          docker push ${IMAGE}:${GITHUB_SHA}
+          docker tag ${IMAGE}:${GITHUB_SHA} ${IMAGE}:latest
+          docker push ${IMAGE}:latest
+
+      - name: Deploy backend to Cloud Run
+        uses: google-github-actions/deploy-cloudrun@v1
+        with:
+          service: expense-backend
+          image: gcr.io/${{ secrets.GCP_PROJECT }}/expense-system-backend:${GITHUB_SHA}
+          region: ${{ secrets.GCP_REGION }}
+          allow-unauthenticated: true
+
+      - name: Build and push frontend image
+        run: |
+          IMAGE=gcr.io/${{ secrets.GCP_PROJECT }}/expense-system-frontend
+          docker build -f frontend/Dockerfile -t ${IMAGE}:${GITHUB_SHA} .
+          docker push ${IMAGE}:${GITHUB_SHA}
+          docker tag ${IMAGE}:${GITHUB_SHA} ${IMAGE}:latest
+          docker push ${IMAGE}:latest
+
+      - name: Deploy frontend to Cloud Run
+        uses: google-github-actions/deploy-cloudrun@v1
+        with:
+          service: expense-frontend
+          image: gcr.io/${{ secrets.GCP_PROJECT }}/expense-system-frontend:${GITHUB_SHA}
+          region: ${{ secrets.GCP_REGION }}
+          allow-unauthenticated: true

README.md

@@ -112,15 +112,30 @@ See also: `TECHSTACK.md` for detailed tech choices and recommended versions.
 
 1. Replace image placeholders in `k8s/*-deployment.yaml` with your image path (GHCR or Docker Hub).
 2. Create a secret for `SECRET_KEY`:
+
 ```bash
 kubectl create secret generic expense-secrets --from-literal=SECRET_KEY='replace-with-secret'
 ```
+
 3. Apply manifests:
+
 ```bash
 kubectl apply -f k8s/
 ```
+
 4. Get the frontend external IP (may take a minute):
+
 ```bash
 kubectl get svc expense-frontend
 ```
 
+## Continuous deployment to Cloud Run (one-click when secrets are set)
+
+I added a GitHub Actions workflow `.github/workflows/deploy-cloudrun.yml` that will build and push container images to Google Container Registry (GCR) and deploy them to Cloud Run when you push to `main`.
+
+Required repository secrets (set these in GitHub Settings -> Secrets):
+- `GCP_SA_KEY`: JSON service account key with roles `roles/run.admin`, `roles/storage.admin`, `roles/iam.serviceAccountUser` (base64 or raw JSON)
+- `GCP_PROJECT`: your GCP project id
+- `GCP_REGION`: Cloud Run region (e.g. `us-central1`)
+
+After adding those secrets, pushing to `main` will automatically deploy both services to Cloud Run. Logs and status are available in the Actions tab.