Backend/.github/workflows/github-actions.yml at main · WhoWantIt/Backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
# github repository actions 페이지에 나타날 이름
name: CI/CD using github actions & docker

# event trigger
# main이나 develop 브랜치에 push가 되었을 때 실행#
on:
  push:
    branches: [ "dev" ]

permissions:
  contents: read

jobs:
  CI-CD:
    runs-on: ubuntu-latest
    steps:

      # JDK setting - github actions에서 사용할 JDK 설정 (프로젝트나 AWS의 java 버전과 달라도 무방)#
      - uses: actions/checkout@v3
      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      # gradle caching - 빌드 시간 향상#
      - name: Gradle Caching
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-

      - name: Set yml file
        uses: microsoft/variable-substitution@v1
        with:
          files: 'src/main/resources/application.yml'
        env:
          #          spring.datasource.url: ${{ secrets.MYSQL_URL }}
          spring.datasource.username: ${{ secrets.MYSQL_USER }}
          spring.datasource.password: ${{ secrets.MYSQL_PW }}
          cloud.aws.credentials.access-key: ${{ secrets.AWS_ACCESS_KEY_ID }}
          cloud.aws.credentials.secret-key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}


      # shell: bash
      - name: Grant execute permission for Gradle wrapper
        run: chmod +x ./gradlew

      # gradle build
      - name: Build with Gradle
        run: ./gradlew build -x test

      # docker build & push to develop##
      - name: Docker build & push to dev
        if: contains(github.ref, 'dev')
        run: |
          docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
          docker build -f Dockerfile -t ${{ secrets.DOCKER_USERNAME }}/whowantit:latest .
          docker push ${{ secrets.DOCKER_USERNAME }}/whowantit:latest


      # deploy to develop
      - name: Deploy to dev
        uses: appleboy/ssh-action@master
        id: deploy-dev
        if: contains(github.ref, 'dev')
        with:
          host: ${{ secrets.HOST_DEV }} ## EC2 퍼블릭 IPv4 DNS
          username: ubuntu #ubuntu
          port: 22
          key: ${{ secrets.PRIVATE_KEY }}
          script: |
            #           Stop and remove existing container
                    sudo docker stop whowantit || true
                    sudo docker rm whowantit || true
                    sudo docker image rm ${{ secrets.DOCKER_USERNAME }}/whowantit || true

            # Pull the latest image
                    sudo docker pull ${{ secrets.DOCKER_USERNAME }}/whowantit || exit 1
            # Run the new container
                    sudo docker run -d --name whowantit \
                    -p 8080:8080 \
                    -e DB_URL=database-1.clqwo2gs83ac.ap-northeast-2.rds.amazonaws.com \
                    -e DB_USERNAME=${{ secrets.MYSQL_USER }} \
                    -e DB_PASSWORD=${{ secrets.MYSQL_PW }} \
                    -e AWS_ACCESS_KEY_ID="${{ secrets.AWS_ACCESS_KEY_ID }}" \
                    -e AWS_SECRET_ACCESS_KEY="${{ secrets.AWS_SECRET_ACCESS_KEY }}" \
                    -e JWT_SECRET_KEY=${{ secrets.JWT_SECRET_KEY }} \
                    ${{ secrets.DOCKER_USERNAME }}/whowantit
            # Clean up unused images
                    sudo docker image prune -f
            # Check logs
                    sudo docker logs whowantit