docker-gradle-poc.yml

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# This workflow will build a Java project with Gradle and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-gradle

name: docker hero-alignlab-api CI/CD

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ main ]

# 해당 스크립트에서 사용될 환경 변수
env:
  AWS_REGION: ap-northeast-2
  PROJECT_NAME: hero-alignlab-api
  S3_BUCKET_NAME: alignlab
  CODE_DEPLOY_APP_NAME: hero-alignlab-api
  CODE_DEPLOY_DEPLOYMENT_GROUP_NAME: hero-align-lab-deploy

permissions:
  contents: read

jobs:
  build:

    # Github의 워크플로에서 실행될 OS 선택
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v3

      # JDK 17, Corretto 17
      - name: Set up Corretto JDK  17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      # Secret Setup - application.yml
      - name: Inject env-values to application.yml
        uses: microsoft/variable-substitution@v1
        with:
          files: ./src/main/resources/config/application.yml
        env:
          # Aws Credentials 환경 변수 주입
          cloud.aws.credentials.access-key: ${{ secrets.AWS_ACCESS_KEY_ID }}
          cloud.aws.credentials.secret-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          # Jwt Secret Key 환경 변수 주입
          auth.jwt.secret: ${{ secrets.AUTH_JWT_SECRET }}
          # Encrypt 환경 변수 주입
          encrypt.key: ${{ secrets.ENCRYPT_KEY }}
          encrypt.algorithm: ${{ secrets.ENCRYPT_ALGORITHM }}
          # dev resource 환경 변수 주입
          hero-alignlab.dev.resource.key: ${{ secrets.HERO_ALIGNLAB_DEV_RESOURCE_KEY }}
          # OAuth-Kakao 환경 변수 주입
          oauth.kakao.rest-api-key: ${{ secrets.OAUTH_KAKAO_REST_API_KEY }}
          oauth.kakao.client-secret-code: ${{ secrets.OAUTH_KAKAO_CLIENT_SECRET_CODE }}
          oauth.kakao.admin-key: ${{ secrets.OAUTH_KAKAO_ADMIN_KEY }}

      # Secret Setup - application-prod.yml
      - name: Inject env-values to application-prod.yml
        uses: microsoft/variable-substitution@v1
        with:
          files: ./src/main/resources/config/application-prod.yml
        env:
          # Database 환경 변수 주입
          hero.master.datasource.url: ${{ secrets.HERO_MASTER_DATASOURCE_URL }}
          hero.master.datasource.username: ${{ secrets.HERO_MASTER_DATASOURCE_USERNAME }}
          hero.master.datasource.password: ${{ secrets.HERO_MASTER_DATASOURCE_PASSWORD }}

      # gradlew 파일 실행권한 설정
      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew
        shell: bash

      # Gradle build (Test 제외)
      - name: Build with Gradle
        run: ./gradlew clean --stacktrace --info build
        shell: bash

      # Docker 이미지 빌드
      - name: docker image build
        run: docker build -t ${{ secrets.DOCKER_USERNAME }}/hero-alignlab-api

      # DockerHub 로그인
      - name: docker login
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_TOKEN }}

      #  Docker Hub 이미지 푸시
      - name: docker Hub push
        run: docker push ${{ secrets.DOCKER_USERNAME }}/hero-alignlab-api

      # Deploy Service
      - name: Deploy and Start Spring Boot Application
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.HOST_PROD }}
          username: ubuntu
          key: ${{ secrets.PRIVATE_KEY }}
          script: |
            echo "${{ secrets.DOCKER_PASSWORD }}" | sudo docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
            sudo docker ps
            sudo docker pull ${{ secrets.DOCKER_USERNAME }}/hero-alignlab-api
            sudo docker stop server || true
            sudo docker rm server || true # 중복된 이름 문제 해결
            sudo docker run -d -p 8080:8080 --name server ${{ secrets.DOCKER_USERNAME }}/hero-alignlab-api
            sudo docker image prune -f