backend/.github/workflows/01-dev-build-deploy.yml at f400fb7f5d7f8e727a21e211ba66d5bdc1da1d62 · NIPA-AWS-Developer-2nd/backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
name: Build and Deploy Only to Amazon ECS

on:
  push:
    branches:
      - dev
env:
  AWS_REGION: ap-northeast-2
  AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID}}
  ECR_REPOSITORY: halsaram/backend
  ECS_CLUSTER: halsaram-cluster
  ECS_SERVICE: backend
  ECS_TASK_DEFINITION: .aws/task-definition.dev.json
  CONTAINER_NAME: backend-container
  IMAGE_TAG: latest

permissions:
  contents: read
  id-token: write

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Make envfile
        uses: SpicyPizza/create-envfile@v2.0
        with:
          envkey_NODE_ENV: 'development'
          envkey_FRONTEND_URL: 'https://halsaram.site'
          envkey_DB_HOST: ${{ secrets.DB_HOST}}
          envkey_DB_PORT: ${{ secrets.DB_PORT}}
          envkey_DB_USERNAME: ${{ secrets.DB_USERNAME}}
          envkey_DB_PASSWORD: ${{ secrets.DB_PASSWORD}}
          envkey_DB_NAME: ${{ secrets.DB_NAME}}
          envkey_KAKAO_CLIENT_ID: ${{ secrets.KAKAO_CLIENT_ID }}
          envkey_KAKAO_CLIENT_SECRET: ${{ secrets.KAKAO_CLIENT_SECRET }}
          envkey_REDIRECT_URI: ${{ secrets.REDIRECT_URI}}
          envkey_NAVER_CLIENT_ID: ${{ secrets.NAVER_CLIENT_ID}}
          envkey_NAVER_CLIENT_SECRET: ${{ secrets.NAVER_CLIENT_SECRET}}
          envkey_GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
          envkey_GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
          envkey_GOOGLE_REDIRECT_URI: ${{ secrets.GOOGLE_REDIRECT_URI}}
          envkey_JWT_SECRET: ${{ secrets.JWT_SECRET}}
          envkey_JWT_ACCESS_TOKEN_EXPIRES_IN: ${{ secrets.JWT_ACCESS_TOKEN_EXPIRES_IN}}
          envkey_JWT_REFRESH_TOKEN_EXPIRES_IN: ${{ secrets.JWT_REFRESH_TOKEN_EXPIRES_IN}}
          envkey_AWS_REGION: ${{ secrets.AWS_REGION}}
          envkey_AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID}}
          envkey_AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY}}
          envkey_AWS_S3_BUCKET_NAME: ${{ secrets.AWS_S3_BUCKET_NAME}}
          envkey_AWS_CLOUDFRONT_DOMAIN: ${{ secrets.AWS_CLOUDFRONT_DOMAIN}}
          file_name: .env.development
          fail_on_empty: false
          sort_keys: false
      - id: commit
        uses: pr-mpt/actions-commit-hash@v3
      - name: Build and Push to ECR
        uses: mr-smithers-excellent/docker-build-push@v6
        with:
          image: halsaram/backend
          tags: ${{ steps.commit.outputs.short }}, latest
          registry: ${{ secrets.AWS_ECR_REGISTRY }}
          dockerfile: Dockerfile
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_ACTIONS }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_ACTIONS }}

  deploy:
    name: Deploy
    runs-on: ubuntu-latest
    needs: build

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ env.AWS_ACCOUNT_ID }}:role/GitHubActions-Deploy-Role
          aws-region: ${{ env.AWS_REGION }}

      - name: Fill in the new image ID in the Amazon ECS task definition
        id: task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: ${{ env.ECS_TASK_DEFINITION }}
          container-name: ${{ env.CONTAINER_NAME }}
          image: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}

      - name: Deploy Amazon ECS task definition
        uses: aws-actions/amazon-ecs-deploy-task-definition@v2
        with:
          task-definition: ${{ steps.task-def.outputs.task-definition }}
          service: ${{ env.ECS_SERVICE }}
          cluster: ${{ env.ECS_CLUSTER }}
          wait-for-service-stability: true