forked from Central-MakeUs/malmo-server
-
Notifications
You must be signed in to change notification settings - Fork 0
173 lines (152 loc) · 6.39 KB
/
deploy-test.yml
File metadata and controls
173 lines (152 loc) · 6.39 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
name: Test and Deploy to Test Environment
on:
push:
branches: [ qa ]
pull_request:
branches: [ qa ]
jobs:
# 1. 테스트 작업 (PR, Push 시 항상 실행)
test:
runs-on: ubuntu-latest
services:
redis:
image: redis:7-alpine
ports:
- 6379:6379
options: >-
--health-cmd "redis-cli ping"
--health-interval 10s
--health-timeout 5s
--health-retries 5
steps:
- name: Checkout source code
uses: actions/checkout@v4
- name: Set up JDK 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'
- name: Cache Gradle packages
uses: actions/cache@v3
with:
path: |
~/.gradle/caches
~/.gradle/wrapper
key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
restore-keys: |
${{ runner.os }}-gradle-
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: Run tests with Gradle
run: ./gradlew test --no-daemon
# 2. 배포 작업 (Push 시 & 테스트 성공 시 실행)
deploy:
# 'test' 작업이 성공해야만 실행됩니다.
needs: test
# 'push' 이벤트일 때만 실행됩니다.
if: github.event_name == 'push'
runs-on: ubuntu-latest
steps:
- name: Checkout source code
uses: actions/checkout@v4
- name: Set up JDK 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'
# 배포 Job은 이전 Job의 캐시를 공유하지 않으므로 캐시 설정이 필요합니다.
- name: Cache Gradle packages
uses: actions/cache@v3
with:
path: |
~/.gradle/caches
~/.gradle/wrapper
key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
restore-keys: |
${{ runner.os }}-gradle-
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: Build with Gradle
run: ./gradlew bootJar --no-daemon
- name: Login to Docker Hub
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Build and push Docker image
env:
IMAGE_NAME: ${{ secrets.DOCKERHUB_USERNAME }}/malmo-test
run: |
docker build --platform linux/amd64 -t $IMAGE_NAME:${{ github.sha }} -t $IMAGE_NAME:latest .
docker push $IMAGE_NAME:${{ github.sha }}
docker push $IMAGE_NAME:latest
- name: Deploy to Test EC2
uses: appleboy/ssh-action@v1.0.3
with:
host: ${{ secrets.TEST_EC2_HOST }}
username: ${{ secrets.EC2_USERNAME }}
key: ${{ secrets.TEST_EC2_PRIVATE_KEY }}
script: |
# Docker Hub 로그인
echo ${{ secrets.DOCKERHUB_TOKEN }} | docker login --username ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin
# Docker-compose가 없으면 설치
if ! docker-compose --version &> /dev/null; then
sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose
fi
# 기존 컨테이너 중지 및 삭제
docker stop malmo-test || true
docker rm malmo-test || true
# docker-compose.yml 파일 생성
cat << 'EOF' > docker-compose-test.yml
version: '3.8'
services:
malmo-test:
image: ${{ secrets.DOCKERHUB_USERNAME }}/malmo-test:latest
container_name: malmo-test
ports:
- "8080:8080"
logging:
driver: awslogs
options:
awslogs-group: malmo-test
awslogs-multiline-pattern: "^(INFO|ERROR)"
awslogs-region: ap-northeast-2
environment:
- TZ=Asia/Seoul
- SPRING_PROFILES_ACTIVE=qa
- SPRING_DATASOURCE_URL=${{ secrets.TEST_DB_URL }}
- SPRING_DATASOURCE_USERNAME=${{ secrets.DB_USERNAME }}
- SPRING_DATASOURCE_PASSWORD=${{ secrets.DB_PASSWORD }}
- SPRING_DATA_REDIS_HOST=malmo-redis
- REDIS_STREAM_KEY=${{ secrets.REDIS_STREAM_KEY_GREEN }}
- REDIS_CONSUMER_GROUP=${{ secrets.REDIS_CONSUMER_GROUP_GREEN }}
- JWT_SECRET=${{ secrets.JWT_SECRET }}
- KAKAO_REST_API_KEY=${{ secrets.KAKAO_REST_API_KEY }}
- APPLE_REST_API_KEY=${{ secrets.APPLE_REST_API_KEY }}
- APPLE_TEAM_ID=${{ secrets.APPLE_TEAM_ID }}
- APPLE_KEY_ID=${{ secrets.APPLE_KEY_ID }}
- APPLE_PRIVATE_KEY=${{ secrets.APPLE_PRIVATE_KEY }}
- APPLE_CLIENT_ID=${{ secrets.APPLE_CLIENT_ID }}
- KAKAO_ADMIN_KEY=${{ secrets.KAKAO_ADMIN_KEY }}
- OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }}
- SWAGGER_SERVER_PRODUCTION_URL=${{ secrets.TEST_SWAGGER_SERVER_PRODUCTION_URL }}
- SECURITY_CLIENT_URL_PRODUCTION=${{ secrets.SECURITY_CLIENT_URL_PRODUCTION }}
- SECURITY_CLIENT_URL_DEVELOPMENT=${{ secrets.SECURITY_CLIENT_URL_DEVELOPMENT }}
- SECURITY_SERVER_URL_PRODUCTION=${{ secrets.SECURITY_SERVER_URL_PRODUCTION }}
- SECURITY_SERVER_URL_DEVELOPMENT=${{ secrets.SECURITY_SERVER_URL_DEVELOPMENT }}
- AES_ENCRYPTION_KEY=${{ secrets.AES_ENCRYPTION_KEY }}
- SENTRY_DSN=${{ secrets.SENTRY_DSN }}
- AMPLITUDE_API_KEY=${{ secrets.AMPLITUDE_API_KEY }}
restart: unless-stopped
networks:
- malmo-net
networks:
malmo-net:
external: true
EOF
# docker-compose로 애플리케이션 실행
docker-compose -f docker-compose-test.yml pull
docker-compose -f docker-compose-test.yml up -d
# 불필요한 Docker 이미지 정리
docker image prune -f