-
Notifications
You must be signed in to change notification settings - Fork 2
119 lines (103 loc) · 3.74 KB
/
dev-deploy.yml
File metadata and controls
119 lines (103 loc) · 3.74 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
# github repository Actions 페이지에 나타낼 이름
name: dev deploy
# event trigger
on:
push:
branches:
- develop
jobs:
develop-cd:
runs-on: ubuntu-22.04 # 필수, 실행환경 지정
steps:
# (1) 기본 체크아웃
- name: Checkout
uses: actions/checkout@v3
# (2) JDK 17 세팅
- name: Set up JDK 17
uses: actions/setup-java@v3
with:
java-version: '17'
distribution: 'temurin'
## (3-1) application-dev.yml 생성
- name: make application-dev.yml
run: |
cd ./src/main/resources
touch ./application-dev.yml
echo "${{ secrets.APPLICATION_DEV_YML }}" > ./application-dev.yml
shell: bash
## (3-2) application-jwt.yml 생성
- name: make application-jwt.yml
run: |
cd ./src/main/resources
touch ./application-jwt.yml
echo "${{ secrets.APPLICATION_JWT_YML }}" > ./application-jwt.yml
shell: bash
## (3-3) application-oauth.yml 생성
- name: make application-oauth.yml
run: |
cd ./src/main/resources
touch ./application-oauth.yml
echo "${{ secrets.APPLICATION_OAUTH_YML }}" > ./application-oauth.yml
shell: bash
## (3-4) application-fcm.yml 생성
- name: make application-fcm.yml
run: |
cd ./src/main/resources
touch ./application-fcm.yml
echo "${{ secrets.APPLICATION_FCM_YML }}" > ./application-fcm.yml
shell: bash
## (3-5) application-sentry.yml 생성
- name: make application-sentry.yml
run: |
cd ./src/main/resources
touch ./application-sentry.yml
echo "${{ secrets.APPLICATION_SENTRY_YML }}" > ./application-sentry.yml
shell: bash
## (3-6) snackpot-fcm.json 생성
- name: make snackpot-fcm.json
run: echo "${{ secrets.FCM_JSON_SECRET }}" | base64 --decode > ./src/main/resources/snackpot-fcm.json
shell: bash
# (4) ./gradlew 권한 설정
- name: ./gradlew 권한 설정
run: chmod +x ./gradlew
# (5) Gradle build (Test 제외)
- name: Build with Gradle
run: ./gradlew build -x test
# (6) docker build & push to production
- name: Docker build & push to DockerHub
run: |
docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
docker build -t ${{ secrets.DOCKER_REPO }}:latest-dev .
docker push ${{ secrets.DOCKER_REPO }}:latest-dev
# (7) aws 세팅
- name: aws 세팅
uses: aws-actions/configure-aws-credentials@v1
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ap-northeast-2
# (8) 로컬 docker-compose.yml 파일 EC2로 복사
- name: Copy docker-compose.yml to EC2 via SCP
uses: appleboy/scp-action@master
with:
host: ${{ secrets.DEV_HOST }}
username: ${{ secrets.EC2_USERNAME }}
key: ${{ secrets.KEY }}
port: 22
source : "./docker-compose.yml"
target : "./snackApp"
debug: true
# (9) 서버에 접속하여 도커 이미지를 pull 받고 실행하기
- name: executing remote ssh commands using password
uses: appleboy/ssh-action@v0.1.6
with:
host: ${{ secrets.DEV_HOST }}
username: ${{ secrets.EC2_USERNAME }}
key: ${{ secrets.KEY }}
port: 22
script: |
cd snackApp
sudo docker-compose down
sudo docker-compose pull
sudo docker image rm ${{ secrets.DOCKER_REPO }}
sudo docker-compose up -d