refactor: Question view count 수정 #281
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: MARU EGG CI-CD Workflow | |
| on: | |
| push: | |
| branches: [ "main", "develop" ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| integration: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Setup Java JDK | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: 17 | |
| distribution: 'temurin' | |
| - name: make application.yml | |
| if: contains(github.ref, 'develop') | |
| run: | | |
| cd ./src/main/resources | |
| touch ./application.yml | |
| echo "${{ secrets.YML }}" > ./application.yml | |
| - name: make application-dev.yml | |
| if: contains(github.ref, 'develop') | |
| run: | | |
| cd ./src/main/resources | |
| touch ./application-dev.yml | |
| echo "${{ secrets.YML_DEV }}" > ./application-dev.yml | |
| # Gradle 패키지 캐시 | |
| - name: Cache Gradle packages | |
| uses: actions/cache@v3 | |
| with: | |
| path: ~/.gradle/caches | |
| key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }} | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Build with Gradle | |
| uses: gradle/gradle-build-action@v3 | |
| with: | |
| arguments: clean bootJar | |
| - name: Log in to Docker Hub | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Metadata action | |
| id: meta | |
| uses: docker/metadata-action@v4 | |
| with: | |
| images: ${{ secrets.DOCKER_REPO }} | |
| - name: Build and push Docker image | |
| if: contains(github.ref, 'develop') | |
| id: docker_build | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: . | |
| file: ./docker/Dockerfile | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }}-${{ github.run_number }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| deploy: | |
| runs-on: ubuntu-latest | |
| needs: integration | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Get GitHub Actions IP Address | |
| id: get_ip | |
| run: echo "ip=$(curl -s ifconfig.me)" >> $GITHUB_ENV | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: 'ap-northeast-2' | |
| - name: Add GitHub Actions IP to Security Group | |
| env: | |
| IP: ${{ env.ip }} | |
| run: | | |
| aws ec2 authorize-security-group-ingress \ | |
| --group-id ${{ secrets.EC2_SECURITY_GROUP_ID }} \ | |
| --protocol tcp --port 22 --cidr ${IP}/32 | |
| - name: Set environment variables for Docker Compose | |
| run: | | |
| echo "DOCKER_REPO=${{ secrets.DOCKER_REPO }}" >> $GITHUB_ENV | |
| echo "GITHUB_RUN_NUMBER=${{ github.run_number }}" >> $GITHUB_ENV | |
| - name: Check docker-compose.yml file | |
| run: | | |
| if [ ! -f docker/docker-compose.yml ]; then | |
| echo "Error: docker/docker-compose.yml not found." | |
| exit 1 | |
| fi | |
| - name: Copy docker-compose into instance | |
| uses: appleboy/scp-action@master | |
| with: | |
| host: ${{ secrets.PUBLIC_DNS }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.PEM_KEY }} | |
| source: "docker/docker-compose.yml" | |
| target: "/home/${{ secrets.USERNAME }}/docker/docker-compose.yml" | |
| strip_components: 3 | |
| overwrite: true | |
| debug: true | |
| - name: Deploy to EC2 dev | |
| uses: appleboy/[email protected] | |
| if: contains(github.ref, 'develop') | |
| with: | |
| host: ${{ secrets.PUBLIC_DNS }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.PEM_KEY }} | |
| script: | | |
| cd /home/${{ secrets.USERNAME }} | |
| export DOCKER_REPO=${{ secrets.DOCKER_REPO }} | |
| export GITHUB_RUN_NUMBER=${{ github.run_number }} | |
| echo "DOCKER_REPO=${DOCKER_REPO}" | |
| echo "GITHUB_RUN_NUMBER=${GITHUB_RUN_NUMBER}" | |
| envsubst < <(echo "${{ secrets.DOCKER_COMPOSE_DEV }}") > docker-compose.yml | |
| echo ${{ secrets.DOCKER_PASSWORD }} | sudo docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin | |
| SERVICES_TO_STOP=$(sudo docker ps --format '{{.Names}}' | grep -Ev '(nginx|grafana)') | |
| if [ ! -z "$SERVICES_TO_STOP" ]; then | |
| echo "Stopping services: $SERVICES_TO_STOP" | |
| sudo docker stop $SERVICES_TO_STOP | |
| fi | |
| SERVICES_TO_REMOVE=$(sudo docker ps -a --format '{{.Names}}' | grep -Ev '(nginx|grafana)') | |
| if [ ! -z "$SERVICES_TO_REMOVE" ]; then | |
| echo "Removing services: $SERVICES_TO_REMOVE" | |
| sudo docker rm $SERVICES_TO_REMOVE | |
| fi | |
| sudo docker pull ${{ secrets.DOCKER_REPO }}:develop-${{ github.run_number }} | |
| sudo docker-compose -f docker-compose.yml up -d | |
| sudo docker image prune -f | |
| - name: Remove GitHub Actions IP | |
| run: | | |
| aws ec2 revoke-security-group-ingress \ | |
| --group-id ${{ secrets.EC2_SECURITY_GROUP_ID }} \ | |
| --protocol tcp --port 22 --cidr "${{ env.ip }}/32" |