Merge pull request #47 from GPGT-Algorithm-Study/develop #29
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will build a Java project with Gradle | |
| # For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-gradle | |
| name: Spring Boot & Gradle CI/CD | |
| on: | |
| push: | |
| branches: | |
| - deploy | |
| jobs: | |
| build: | |
| # 실행 환경 지정 | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Set up JDK 11 | |
| uses: actions/setup-java@v1 | |
| with: | |
| java-version: 11 | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| # 스프링부트 코드 Build | |
| - name: Build with Gradle | |
| run: ./gradlew clean build -x test | |
| # 도커 로그인하고 도커 이미지 빌드 후 푸시한다. | |
| - name: web docker build and push | |
| run: | | |
| docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }} | |
| docker build --platform linux/amd64 -t ${{ secrets.DOCKER_USERNAME }}/randps-back . | |
| docker push ${{ secrets.DOCKER_USERNAME }}/randps-back | |
| # Github Actions IP 가져온다. | |
| - name: Get Github Actions IP | |
| id: ip | |
| uses: haythem/[email protected] | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ap-northeast-2 | |
| # Github Actions IP를 AWS 보안그룹에 추가한다. | |
| - name: Add Github Actions IP to Security group | |
| run: | | |
| aws ec2 authorize-security-group-ingress --group-id ${{ secrets.AWS_SG_ID }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32 | |
| # ssh로 EC2 접속해서 도커 컨테이너를 모두 멈춘 후, 도커 파일을 새로 받아 다시 docker-compose로 이미지를 실행시킨다. | |
| - name: executing remote ssh commands using password | |
| uses: appleboy/ssh-action@master | |
| with: | |
| host: ${{ secrets.HOST_IP }} | |
| username: ubuntu | |
| key: ${{ secrets.PRIVATE_KEY }} | |
| script: | | |
| sudo docker rm -f $(sudo docker ps -qa) | |
| sudo docker pull ${{ secrets.DOCKER_USERNAME }}/randps-back | |
| sudo docker-compose up -d | |
| sudo docker image prune -f | |
| # AWS 보안그룹에서 Github Actions IP를 삭제한다. | |
| - name: Remove Github Actions IP From Security Group | |
| run: | | |
| aws ec2 revoke-security-group-ingress --group-id ${{ secrets.AWS_SG_ID }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32 |