|
| 1 | +# This workflow uses actions that are not certified by GitHub. |
| 2 | +# They are provided by a third-party and are governed by |
| 3 | +# separate terms of service, privacy policy, and support |
| 4 | +# documentation. |
| 5 | +# This workflow will build a package using Gradle and then publish it to GitHub packages when a release is created |
| 6 | +# For more information see: https://github.com/actions/setup-java/blob/main/docs/advanced-usage.md#Publishing-using-gradle |
| 7 | + |
| 8 | +name: Java CI with Gradle |
| 9 | + |
| 10 | +on: |
| 11 | + push: |
| 12 | + branches: [ BE-deploy ] |
| 13 | + pull_request: |
| 14 | + branches: [ BE-deploy ] |
| 15 | + |
| 16 | +jobs: |
| 17 | + build: |
| 18 | + runs-on: ubuntu-latest |
| 19 | + defaults: |
| 20 | + run: |
| 21 | + working-directory: ./BE |
| 22 | + |
| 23 | + steps: |
| 24 | + - uses: actions/checkout@v2 |
| 25 | + |
| 26 | + # JDK11로 gradle 빌드 |
| 27 | + - name: Set up JDK 11 |
| 28 | + uses: actions/setup-java@v2 |
| 29 | + with: |
| 30 | + java-version: '11' |
| 31 | + distribution: 'temurin' |
| 32 | + |
| 33 | + - name: Insert data source information into application.yml |
| 34 | + run: | |
| 35 | + sed -i "s|\${DATASOURCE_URL}|$DATASOURCE_URL|g" ./src/main/resources/application.yml |
| 36 | + sed -i "s|\${DATASOURCE_USERNAME}|$DATASOURCE_USERNAME|g" ./src/main/resources/application.yml |
| 37 | + sed -i "s|\${DATASOURCE_PASSWORD}|$DATASOURCE_PASSWORD|g" ./src/main/resources/application.yml |
| 38 | +
|
| 39 | + sed -i "s|\${OAUTH_CLIENT_SECRET}|$OAUTH_CLIENT_SECRET|g" ./src/main/resources/oauth.yml |
| 40 | + sed -i "s|\${OAUTH_ACCESS_SCOPE}|$OAUTH_ACCESS_SCOPE|g" ./src/main/resources/oauth.yml |
| 41 | + sed -i "s|\${OAUTH_LOGIN_FORM_URL}|$OAUTH_LOGIN_FORM_URL|g" ./src/main/resources/oauth.yml |
| 42 | + sed -i "s|\${JWT_ISSUER}|$JWT_ISSUER|g" ./src/main/resources/oauth.yml |
| 43 | + sed -i "s|\${JWT_SECRET_KEY}|$JWT_SECRET_KEY|g" ./src/main/resources/oauth.yml |
| 44 | +
|
| 45 | + env: |
| 46 | + DATASOURCE_URL: ${{ secrets.DATASOURCE_URL }} |
| 47 | + DATASOURCE_USERNAME: ${{ secrets.DATASOURCE_USERNAME }} |
| 48 | + DATASOURCE_PASSWORD: ${{ secrets.DATASOURCE_PASSWORD }} |
| 49 | + OAUTH_CLIENT_SECRET: ${{ secrets.OAUTH_CLIENT_SECRET }} |
| 50 | + OAUTH_ACCESS_SCOPE: ${{ secrets.OAUTH_ACCESS_SCOPE }} |
| 51 | + OAUTH_LOGIN_FORM_URL: ${{ secrets.OAUTH_LOGIN_FORM_URL }} |
| 52 | + JWT_ISSUER: ${{ secrets.JWT_ISSUER }} |
| 53 | + JWT_SECRET_KEY: ${{ secrets.JWT_SECRET_KEY }} |
| 54 | + |
| 55 | + - name: Grant execute permission for gradlew |
| 56 | + run: chmod +x gradlew |
| 57 | + - name: Build with Gradle |
| 58 | + run: ./gradlew build |
| 59 | + |
| 60 | + # 도커 빌드(도커 이미지 생성) |
| 61 | + - name: Docker build |
| 62 | + run: | |
| 63 | + docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }} |
| 64 | + docker build -t ${{ secrets.DOCKER_USERNAME }}/issue-tracker:1.0 . |
| 65 | + docker push ${{ secrets.DOCKER_USERNAME }}/issue-tracker:1.0 |
| 66 | + docker rmi ${{ secrets.DOCKER_USERNAME }}/issue-tracker:1.0 |
| 67 | +
|
| 68 | + # 도커 이미지 배포 및 실행(EC2 ubuntu20.04로 배포) |
| 69 | + - name: Deploy |
| 70 | + uses: appleboy/ssh-action@master |
| 71 | + with: |
| 72 | + host: ${{ secrets.AWS_HOST_DNS }} #(생성한 인스턴스의 DNS주소) |
| 73 | + username: ubuntu |
| 74 | + key: ${{ secrets.SSH_PRIVATE_KEY }} #(인스턴스를 생성할 때 다운받은 pem키안에 값을 모두 복사해서 붙여넣기) |
| 75 | + envs: GITHUB_SHA |
| 76 | + script: | |
| 77 | + sudo docker ps -a -q --filter "name=issue-tracker" | grep -q . && docker stop issue-tracker && docker rm issue-tracker | true |
| 78 | + sudo docker rmi ${{ secrets.DOCKER_USERNAME }}/issue-tracker:1.0 |
| 79 | + sudo docker pull ${{ secrets.DOCKER_USERNAME }}/issue-tracker:1.0 |
| 80 | + sudo docker run -d -p 80:8080 --name issue-tracker ${{ secrets.DOCKER_USERNAME }}/issue-tracker:1.0 |
| 81 | + sudo docker rmi -f $(docker images -f "dangling=true" -q) || true |
0 commit comments