deploy.yml

name: Test and Deploy to AWS EC2

on:
  push:
    branches: [ release ]
  pull_request:
    branches: [ release ]

jobs:
  # 1. 테스트 작업 (PR, Push 시 항상 실행)
  test:
    runs-on: ubuntu-latest
    services:
      redis:
        image: redis:7-alpine
        ports:
          - 6379:6379
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
    steps:
      - name: Checkout source code
        uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Cache Gradle packages
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Run tests with Gradle
        run: ./gradlew test --no-daemon

  # 2. 배포 작업 (Push & 테스트 성공 시 실행)
  deploy:
    # 'test' 작업이 성공해야만 실행됩니다.
    needs: test
    # 'push' 이벤트이고, 커밋 메시지에 특정 키워드가 있을 때만 실행됩니다.
    if: |
      github.event_name == 'push' && 
      (contains(github.event.head_commit.message, 'release-green') || contains(github.event.head_commit.message, 'release-blue'))
    runs-on: ubuntu-latest
    steps:
      - name: Checkout source code
        uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'temurin'

      # 배포 Job은 이전 Job의 캐시를 공유하지 않으므로 캐시 설정이 필요합니다.
      - name: Cache Gradle packages
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Build with Gradle
        run: ./gradlew bootJar --no-daemon

      - name: Set Port and Container Name based on Commit Message
        id: set_config
        run: |
          if [[ "${{ github.event.head_commit.message }}" == *"release-green"* ]]; then
            echo "port=8080" >> $GITHUB_OUTPUT
            echo "container_name=malmo-green" >> $GITHUB_OUTPUT
            echo "compose_file=docker-compose-green.yml" >> $GITHUB_OUTPUT
            echo "redis_stream_key=${{ secrets.REDIS_STREAM_KEY_GREEN }}" >> $GITHUB_OUTPUT
            echo "redis_consumer_group=${{ secrets.REDIS_CONSUMER_GROUP_GREEN }}" >> $GITHUB_OUTPUT
            echo "Green deployment: port=8080, container=malmo-green"
          elif [[ "${{ github.event.head_commit.message }}" == *"release-blue"* ]]; then
            echo "port=8081" >> $GITHUB_OUTPUT
            echo "container_name=malmo-blue" >> $GITHUB_OUTPUT
            echo "compose_file=docker-compose-blue.yml" >> $GITHUB_OUTPUT
            echo "redis_stream_key=${{ secrets.REDIS_STREAM_KEY_BLUE }}" >> $GITHUB_OUTPUT
            echo "redis_consumer_group=${{ secrets.REDIS_CONSUMER_GROUP_BLUE }}" >> $GITHUB_OUTPUT
            echo "Blue deployment: port=8081, container=malmo-blue"
          fi

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push Docker image
        env:
          IMAGE_NAME: ${{ secrets.DOCKERHUB_USERNAME }}/${{ steps.set_config.outputs.container_name }}
        run: |
          docker build --platform linux/amd64 -t $IMAGE_NAME:${{ github.sha }} -t $IMAGE_NAME:latest .
          docker push $IMAGE_NAME:${{ github.sha }}
          docker push $IMAGE_NAME:latest

      - name: Deploy to EC2
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ secrets.EC2_HOST }}
          username: ${{ secrets.EC2_USERNAME }}
          key: ${{ secrets.EC2_PRIVATE_KEY }}
          script: |
            # Docker Hub 로그인
            echo ${{ secrets.DOCKERHUB_TOKEN }} | docker login --username ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin
            
            # Docker-compose가 없으면 설치
            if ! docker-compose --version &> /dev/null; then
              sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
              sudo chmod +x /usr/local/bin/docker-compose
            fi

            # 기존 컨테이너 중지 및 삭제
            docker stop ${{ steps.set_config.outputs.container_name }} || true
            docker rm ${{ steps.set_config.outputs.container_name }} || true
      
            # docker-compose.yml 파일 생성
            cat << 'EOF' > ${{ steps.set_config.outputs.compose_file }}
            version: '3.8'

            services:
              ${{ steps.set_config.outputs.container_name }}:
                image: ${{ secrets.DOCKERHUB_USERNAME }}/${{ steps.set_config.outputs.container_name }}:latest
                container_name: ${{ steps.set_config.outputs.container_name }}
                ports:
                  - "${{ steps.set_config.outputs.port }}:8080"
                logging:
                  driver: awslogs
                  options:
                    awslogs-group: malmo_logs
                    awslogs-multiline-pattern: "^(INFO|ERROR)"
                    awslogs-region: ap-northeast-2
                environment:
                  - TZ=Asia/Seoul
                  - SPRING_PROFILES_ACTIVE=prod
                  - SPRING_DATASOURCE_URL=${{ secrets.DB_URL }}
                  - SPRING_DATASOURCE_USERNAME=${{ secrets.DB_USERNAME }}
                  - SPRING_DATASOURCE_PASSWORD=${{ secrets.DB_PASSWORD }}
                  - SPRING_DATA_REDIS_HOST=malmo-redis
                  - REDIS_STREAM_KEY=${{ steps.set_config.outputs.redis_stream_key }}
                  - REDIS_CONSUMER_GROUP=${{ steps.set_config.outputs.redis_consumer_group }}
                  - JWT_SECRET=${{ secrets.JWT_SECRET }}
                  - KAKAO_REST_API_KEY=${{ secrets.KAKAO_REST_API_KEY }}
                  - APPLE_REST_API_KEY=${{ secrets.APPLE_REST_API_KEY }}
                  - APPLE_TEAM_ID=${{ secrets.APPLE_TEAM_ID }}
                  - APPLE_KEY_ID=${{ secrets.APPLE_KEY_ID }}
                  - APPLE_PRIVATE_KEY=${{ secrets.APPLE_PRIVATE_KEY }}
                  - APPLE_CLIENT_ID=${{ secrets.APPLE_CLIENT_ID }}
                  - KAKAO_ADMIN_KEY=${{ secrets.KAKAO_ADMIN_KEY }}
                  - OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }}
                  - SWAGGER_SERVER_PRODUCTION_URL=${{ secrets.SWAGGER_SERVER_PRODUCTION_URL }}
                  - SECURITY_CLIENT_URL_PRODUCTION=${{ secrets.SECURITY_CLIENT_URL_PRODUCTION }}
                  - SECURITY_CLIENT_URL_DEVELOPMENT=${{ secrets.SECURITY_CLIENT_URL_DEVELOPMENT }}
                  - SECURITY_SERVER_URL_PRODUCTION=${{ secrets.SECURITY_SERVER_URL_PRODUCTION }}
                  - SECURITY_SERVER_URL_DEVELOPMENT=${{ secrets.SECURITY_SERVER_URL_DEVELOPMENT }}
                  - AES_ENCRYPTION_KEY=${{ secrets.AES_ENCRYPTION_KEY }}
                  - SENTRY_DSN=${{ secrets.SENTRY_DSN }}
                  - AMPLITUDE_API_KEY=${{ secrets.AMPLITUDE_API_KEY }}
                restart: unless-stopped
                networks:
                  - malmo-net

            networks:
              malmo-net:
                external: true
            EOF

            # docker-compose로 애플리케이션 실행
            docker-compose -f ${{ steps.set_config.outputs.compose_file }} pull
            docker-compose -f ${{ steps.set_config.outputs.compose_file }} up -d

            # 불필요한 Docker 이미지 정리
            docker image prune -f