deploy.yml

name: Deploy to AWS ECS on Fargate

on:
  push:
    branches:
      [ "develop" ]
  workflow_dispatch:

jobs:
  boot-jar:
    if: ${{ secrets.ENABLE_CD == 'true' }}

    runs-on: ubuntu-latest
    outputs:
      cache-hit: ${{ steps.cache.outputs.cache-hit }}
    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'
          cache: gradle

      - name: BootJar With Gradle Wrapper
        run: ./gradlew bootJar

      - name: Look up cached jar
        uses: actions/cache/restore@v4
        id: cache
        with:
          path: app/external-api/build/libs
          key: ${{ runner.os }}-cached-jar-${{ hashFiles('app/external-api/build/libs/*.jar') }}
          lookup-only: true

      - name: Log cache step
        env:
          CACHE_OUTPUT: ${{ toJSON(steps.cache.outputs) }}
        run: |
          echo $CACHE_OUTPUT

      - name: Cache jar
        if: steps.cache.outputs.cache-hit != 'true'
        uses: actions/cache/save@v4
        with:
          path: app/external-api/build/libs
          key: ${{ runner.os }}-cached-jar-${{ hashFiles('app/external-api/build/libs/*.jar') }}

  deploy:
    # jar 파일이 갱신된경우에만 deploy 진행
    env:
      AWS_REGION: ap-northeast-2
      ECR_REPOSITORY: devs-spring-boot
      ECS_SERVICE: devs-spring-server-service
      ECS_CLUSTER: devs-cluster-be-01
      ECS_TASK_DEFINITION: ./devs-spring-server-task.json
      CONTAINER_NAME: spring-boot

    needs: boot-jar
    if: ${{ secrets.ENABLE_CD == 'true' && needs.boot-jar.outputs.cache-hit != 'true' }}

    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Restore jar
        uses: actions/cache/restore@v4
        with:
          path: app/external-api/build/libs
          key: ${{ runner.os }}-cached-jar-
          restore-keys: ${{ runner.os }}-cached-jar-

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.ECR_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.ECR_SECRET_ACCESS_KEY }}
          aws-region: ${{ env.AWS_REGION }}

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1

      - name: Build and Push Image to Amazon ECR
        uses: docker/build-push-action@v3
        id: build-and-push
        env:
          ECR: ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}
        with:
          context: .
          push: true
          provenance: false
          tags: ${{ env.ECR }}:${{ github.sha }}
          platforms: linux/arm64
          cache-from: type=gha
          cache-to: type=gha,mode=max


      - name: Fill in the new image ID in the Amazon ECS task definition
        id: task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: ${{ env.ECS_TASK_DEFINITION }}
          container-name: ${{ env.CONTAINER_NAME }}
          image: ${{ fromJSON(steps.build-and-push.outputs.metadata)['image.name'] }}


      - name: Deploy Amazon ECS task definition
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        id: ecs-deploy
        with:
          task-definition: ${{ steps.task-def.outputs.task-definition }}
          service: ${{ env.ECS_SERVICE }}
          cluster: ${{ env.ECS_CLUSTER }}
          wait-for-service-stability: true

      - name: Check if deployment was successful
        id: check-deployment
        run: |
          CURRENT_TASK_DEF_ARN=$(aws ecs describe-services --cluster ${{ env.ECS_CLUSTER }} --services ${{ env.ECS_SERVICE }} --query services[0].deployments[0].taskDefinition | jq -r ".")
          NEW_TASK_DEF_ARN=${{ steps.ecs-deploy.outputs.task-definition-arn }}
          echo "Current task arn: $CURRENT_TASK_DEF_ARN"
          echo "New task arn: $NEW_TASK_DEF_ARN"
          if [ "$CURRENT_TASK_DEF_ARN" != "$NEW_TASK_DEF_ARN" ]; then
            echo "Deployment failed."
            exit 1
          fi