Merge pull request #19 from Leets-Official/feat/#17-공지사항-기능-구현 #75
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Java CI with Gradle | |
| on: | |
| push: | |
| branches: [ "dev" ] | |
| pull_request: | |
| branches: [ "dev" ] | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout the repository | |
| uses: actions/checkout@v3 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| # 환경별 yml 파일 생성(1) - application.yml | |
| - name: make application.yml | |
| if: | | |
| contains(github.ref, 'dev') || | |
| (github.event_name == 'pull_request') | |
| run: | | |
| mkdir ./src/main/resources # resources 폴더 생성 | |
| cd ./src/main/resources # resources 폴더로 이동 | |
| touch ./application.yml # application.yml 생성 | |
| echo "${{ secrets.YML }}" > ./application.yml # github actions에서 설정한 값을 application.yml 파일에 쓰기 | |
| shell: bash | |
| # 환경별 yml 파일 생성(2) - dev | |
| - name: make application-dev.yml | |
| if: | | |
| contains(github.ref, 'dev') || | |
| (github.event_name == 'pull_request') | |
| run: | | |
| cd ./src/main/resources | |
| touch ./application-dev.yml | |
| echo "${{ secrets.YML_DEV }}" > ./application-dev.yml | |
| shell: bash | |
| # 환경별 yml 파일 생성(3) - oauth | |
| - name: make application-oauth.yml | |
| if: | | |
| contains(github.ref, 'dev') || | |
| (github.event_name == 'pull_request') | |
| run: | | |
| cd ./src/main/resources | |
| touch ./application-oauth.yml | |
| echo "${{ secrets.YML_OAUTH }}" > ./application-oauth.yml | |
| shell: bash | |
| # 환경별 yml 파일 생성(3) - jwt | |
| - name: make application-jwt.yml | |
| if: | | |
| contains(github.ref, 'dev') || | |
| (github.event_name == 'pull_request') | |
| run: | | |
| cd ./src/main/resources | |
| touch ./application-jwt.yml | |
| echo "${{ secrets.YML_JWT }}" > ./application-jwt.yml | |
| shell: bash | |
| # Gradle Build (test는 제외) | |
| - name: Build with Gradle | |
| run: ./gradlew build -x test | |
| # 도커 허브에 로그인 | |
| - name: Docker Hub Login | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKER_USER_NAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Build Docker image | |
| run: docker build -t ${{ secrets.DOCKER_USER_NAME }}/eatmate . | |
| - name: Push Docker image | |
| run: docker push ${{ secrets.DOCKER_USER_NAME }}/eatmate | |
| deploy: | |
| runs-on: ubuntu-latest | |
| needs: build | |
| if: github.event_name == 'push' | |
| steps: | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ap-northeast-2 | |
| - name: Get Public IP | |
| id: ip | |
| uses: haythem/public-ip@v1.3 | |
| - name: Add GitHub Actions IP to Security Group | |
| run: | | |
| aws ec2 authorize-security-group-ingress --group-id ${{ secrets.AWS_SG_ID }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32 | |
| - name: Deploy to EC2 | |
| uses: appleboy/ssh-action@v1.0.3 | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.EC2_USER }} | |
| key: ${{ secrets.SSH_PRIVATE_KEY }} | |
| port: 22 | |
| script: | | |
| EXISTING_CONTAINER_ID=$(sudo docker ps -q -f "publish=8080" -f "status=running") | |
| if [ ! -z "$EXISTING_CONTAINER_ID" ]; then | |
| sudo docker stop $EXISTING_CONTAINER_ID | |
| sudo docker rm $EXISTING_CONTAINER_ID | |
| fi | |
| EXISTING_CONTAINER_ID=$(sudo docker ps -q -f "status=exited") | |
| if [ ! -z "$EXISTING_CONTAINER_ID" ]; then | |
| sudo docker rm $EXISTING_CONTAINER_ID | |
| fi | |
| sudo docker pull ${{ secrets.DOCKER_USER_NAME }}/eatmate | |
| sudo docker run --name spring -d -p 8080:8080 -e TZ=Asia/Seoul ${{ secrets.DOCKER_USER_NAME }}/eatmate | |
| sudo docker image prune -a -f | |
| debug: true # Enable debugging output | |
| - name: Remove GitHub Actions IP From Security Group | |
| run: | | |
| aws ec2 revoke-security-group-ingress --group-id ${{ secrets.AWS_SG_ID }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32 | |