Skip to content

Commit

Permalink
Update gradle.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
DongGeon0908 authored Jul 31, 2024
1 parent 3cc8d0a commit 5cb31b3
Showing 1 changed file with 0 additions and 110 deletions.
110 changes: 0 additions & 110 deletions .github/workflows/gradle.yml
Original file line number Diff line number Diff line change
@@ -1,111 +1 @@
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# This workflow will build a Java project with Gradle and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-gradle

name: hero-alignlab-api CI/CD

# release 브랜치에 push 또는 pull request가 되면 스크립트 실행
on:
push:
branches: [ "main" ]
pull_request:
branches: [ main ]

# 해당 스크립트에서 사용될 환경 변수
env:
AWS_REGION: ap-northeast-2
PROJECT_NAME: hero-alignlab-api
S3_BUCKET_NAME: alignlab
CODE_DEPLOY_APP_NAME: hero-alignlab-api
CODE_DEPLOY_DEPLOYMENT_GROUP_NAME: hero-align-lab-deploy

permissions:
contents: read

jobs:
build:

# Github의 워크플로에서 실행될 OS 선택
runs-on: ubuntu-latest

steps:
- name: Checkout
uses: actions/checkout@v3

# JDK 17, Corretto 17
- name: Set up Corretto JDK 17
uses: actions/setup-java@v3
with:
java-version: '17'
distribution: 'temurin'

# Secret Setup - application.yml
- name: Inject env-values to application.yml
uses: microsoft/variable-substitution@v1
with:
files: ./src/main/resources/config/application.yml
env:
# Aws Credentials 환경 변수 주입
cloud.aws.credentials.access-key: ${{ secrets.AWS_ACCESS_KEY_ID }}
cloud.aws.credentials.secret-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
# Jwt Secret Key 환경 변수 주입
auth.jwt.secret: ${{ secrets.AUTH_JWT_SECRET }}
# Encrypt 환경 변수 주입
encrypt.key: ${{ secrets.ENCRYPT_KEY }}
encrypt.algorithm: ${{ secrets.ENCRYPT_ALGORITHM }}
# dev resource 환경 변수 주입
hero-alignlab.dev.resource.key: ${{ secrets.HERO_ALIGNLAB_DEV_RESOURCE_KEY }}
# OAuth-Kakao 환경 변수 주입
oauth.kakao.rest-api-key: ${{ secrets.OAUTH_KAKAO_REST_API_KEY }}
oauth.kakao.client-secret-code: ${{ secrets.OAUTH_KAKAO_CLIENT_SECRET_CODE }}
oauth.kakao.admin-key: ${{ secrets.OAUTH_KAKAO_ADMIN_KEY }}

# Secret Setup - application-prod.yml
- name: Inject env-values to application-prod.yml
uses: microsoft/variable-substitution@v1
with:
files: ./src/main/resources/config/application-prod.yml
env:
# Database 환경 변수 주입
hero.master.datasource.url: ${{ secrets.HERO_MASTER_DATASOURCE_URL }}
hero.master.datasource.username: ${{ secrets.HERO_MASTER_DATASOURCE_USERNAME }}
hero.master.datasource.password: ${{ secrets.HERO_MASTER_DATASOURCE_PASSWORD }}

# gradlew 파일 실행권한 설정
- name: Grant execute permission for gradlew
run: chmod +x ./gradlew
shell: bash

# Gradle build (Test 제외)
- name: Build with Gradle
run: ./gradlew clean --stacktrace --info build
shell: bash

# AWS 인증 (IAM 사용자 Access Key, Secret Key 활용)
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v1
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ env.AWS_REGION }}

# 빌드 결과물을 S3 버킷에 업로드
- name: Upload to AWS S3
run: |
aws deploy push \
--application-name ${{ env.CODE_DEPLOY_APP_NAME }} \
--ignore-hidden-files \
--s3-location s3://$S3_BUCKET_NAME/$GITHUB_SHA.zip \
--source .
# S3 버킷에 있는 파일을 대상으로 CodeDeploy 실행
- name: Deploy to AWS EC2 from S3
run: |
aws deploy create-deployment \
--application-name ${{ env.CODE_DEPLOY_APP_NAME }} \
--deployment-config-name CodeDeployDefault.AllAtOnce \
--deployment-group-name ${{ env.CODE_DEPLOY_DEPLOYMENT_GROUP_NAME }} \
--s3-location bucket=$S3_BUCKET_NAME,key=$GITHUB_SHA.zip,bundleType=zip

0 comments on commit 5cb31b3

Please sign in to comment.