infra: 1차 배포 (#17) #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Java CI with Gradle | |
| # 동작 조건 설정 : main 브랜치에 push 혹은 pull request가 발생할 경우 동작한다. | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| # Spring Boot 애플리케이션을 빌드하여 도커허브에 푸시하는 과정 | |
| build-docker-image: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| # 1. Java 21 세팅 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| ## create application-database.yaml | |
| - name: create application.properties file | |
| run: | | |
| mkdir ./src/main/resources | |
| touch ./src/main/resources/application.yml | |
| echo "${{ secrets.APPLICATION_YML }}" >> src/main/resources/application.yml | |
| ## create firebase-service-key.json | |
| - name: create firebase_service_key.json file | |
| run: | | |
| mkdir ./src/main/resources/firebase | |
| touch ./src/main/resources/firebase/firebase_service_key.json | |
| echo "${{ secrets.FIREBASE_SERVICE_KEY }}" > src/main/resources/firebase/firebase_service_key.json | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x ./gradlew | |
| shell: bash | |
| # 2. Spring Boot 애플리케이션 빌드 | |
| - name: Build with Gradle | |
| uses: gradle/gradle-build-action@67421db6bd0bf253fb4bd25b31ebb98943c375e1 | |
| with: | |
| arguments: clean bootJar | |
| # 3. Docker 이미지 빌드 | |
| - name: docker image build | |
| run: docker build -t ${{ secrets.DOCKERHUB_USERNAME }}/studentvote . | |
| # 4. DockerHub 로그인 | |
| - name: docker login | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| # 5. Docker Hub 이미지 푸시 | |
| - name: docker Hub push | |
| run: docker push ${{ secrets.DOCKERHUB_USERNAME }}/studentvote | |
| run-docker-image-on-ec2: | |
| needs: build-docker-image | |
| runs-on: self-hosted | |
| steps: | |
| # 1. 최신 이미지를 풀받습니다 | |
| - name: docker pull | |
| run: sudo docker pull ${{ secrets.DOCKERHUB_USERNAME }}/studentvote | |
| # 2. 기존의 컨테이너를 중지시킵니다 | |
| - name: docker stop container | |
| run: sudo docker stop $(sudo docker ps -q) 2>/dev/null || true | |
| # 3. 최신 이미지를 컨테이너화하여 실행시킵니다 | |
| - name: docker run new container | |
| run: sudo docker run --name studentvote --rm -d -p 8080:8080 ${{ secrets.DOCKERHUB_USERNAME }}/studentvote | |
| # 4. 미사용 이미지를 정리합니다 | |
| - name: delete old docker image | |
| run: sudo docker system prune -f |