tutorHelper_BE/.github/workflows/main.yml at main · SpringBeam/tutorHelper_BE · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
name: java CI with docker

on:
  workflow_dispatch:

env:
  S3_BUCKET_NAME: susukgwan
  PROJECT_NAME: susukgwan

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew
        shell: bash

      - name: Write multiple values to application.properties file
        uses: GuillaumeFalourd/write-java-properties-file@v1
        with:
          file_path: ./src/main/resources/application.properties
          property: |
            spring.datasource.url
            spring.datasource.username
            spring.datasource.password
            spring.security.oauth2.client.registration.kakao.client-id
            spring.security.oauth2.client.registration.kakao.client-secret
            spring.security.oauth2.client.registration.kakao.redirect-uri
            jwt.secret.key
            cloud.aws.credentials.accessKey
            cloud.aws.credentials.secretKey
            cloud.aws.s3.bucket
            spring.security.oauth2.client.registration.google.client-id
            spring.security.oauth2.client.registration.google.client-secret
            spring.security.oauth2.client.registration.google.redirect-uri

          value: |
            ${{ secrets.RDS_URL }}
            ${{ secrets.RDS_USERNAME }}
            ${{ secrets.RDS_PASSWORD }}
            ${{ secrets.KAKAO_ID }}
            ${{ secrets.KAKAO_SECRET }}
            ${{ secrets.KAKAO_REDIRECT_URI }}
            ${{ secrets.JWT_SECRET }}
            ${{ secrets.S3_ACCESSKEY }}
            ${{ secrets.S3_SECRETKEY }}
            ${{ secrets.S3_BUCKET  }}
            ${{ secrets.GOOGLE_ID }}
            ${{ secrets.GOOGLE_SECRET }}
            ${{ secrets.GOOGLE_REDIRECT_URI }}


      - name: Copy Secret File
        env:
          FCM_SECRET: ${{ secrets.FCM_SECRET }}
          FCM_SECRET_DIR: src/main/resources/fcm
          FCM_SECRET_FILE_NAME: susukgwan-firebase-adminsdk-17x8y-30c483a728.json
        run: mkdir src/main/resources/fcm && echo $FCM_SECRET | base64 --decode > $FCM_SECRET_DIR/$FCM_SECRET_FILE_NAME

      - name: Build with Gradle
        run: ./gradlew build -x test
        shell: bash

      - name: Make zip file
        run: zip -r ./$GITHUB_SHA.zip .
        shell: bash

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Upload to S3
        run: aws s3 cp --region ap-northeast-2 ./$GITHUB_SHA.zip s3://$S3_BUCKET_NAME/$PROJECT_NAME/$GITHUB_SHA.zip

      - name: CodeDeploy
        run: aws deploy create-deployment --application-name susukgwan-deploy --deployment-config-name CodeDeployDefault.AllAtOnce --deployment-group-name susukgwan-deploy-group --s3-location bucket=$S3_BUCKET_NAME,bundleType=zip,key=$PROJECT_NAME/$GITHUB_SHA.zip