deploy-to-master.yml

name: Deploy to Production

on:
  push:
    branches:
      - master

jobs:
  deploy:
    runs-on: ubuntu-latest

    permissions:
      id-token: write
      contents: read

    env:
      ECR_URL: ${{ secrets.AWS_PRODUCTION_ECR_URL }}
      HOSTS: ${{ secrets.AWS_PRODUCTUON_HOSTS }}
      AWS_DEFAULT_REGION: ${{ secrets.AWS_REGION }}
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_PRODUCTION_ACCESS_KEY }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_PRODUCTION_SECRET_ACCESS_KEY }}
      AWS_PROFILE: production
      ACCOUNT: 'ubuntu'
      DOCKER_TAG: 'latest'
      SERVICE_NAME: 'blccu'
      BLUE_PORT: '3000'
      GREEN_PORT: '3001'
      NGINX_CONFIG: '/etc/nginx/nginx.conf'

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Set up Node.js
        uses: actions/setup-node@v2
        with:
          node-version: '21.7.2'

      - name: Install dependencies
        run: npm install

      - name: Build project
        run: npm run build

      - name: Create PEM file
        run: echo "${{ secrets.BLCCU_PRODUCTION_RSA_PEM }}" > deploy_key.pem

      - name: Set PEM file permissions
        run: chmod 400 deploy_key.pem

      - name: Install AWS CLI
        uses: unfor19/install-aws-cli-action@v1
        with:
          version: 2

      - name: Configure AWS CLI
        run: |
          aws configure set aws_access_key_id $AWS_ACCESS_KEY_ID
          aws configure set aws_secret_access_key $AWS_SECRET_ACCESS_KEY
          aws configure set region $AWS_DEFAULT_REGION

      - name: Test AWS Credentials
        run: aws sts get-caller-identity

      - name: Log in to ECR
        run: |
          aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin $ECR_URL

      - name: Build and push Docker image
        run: |
          docker buildx build --platform linux/amd64 -t $SERVICE_NAME . --load
          docker tag $SERVICE_NAME:$DOCKER_TAG $ECR_URL/$SERVICE_NAME:$DOCKER_TAG
          docker push $ECR_URL/$SERVICE_NAME:$DOCKER_TAG

      - name: Deploy to servers
        run: |
          IFS=',' read -r -a HOST_ARRAY <<< "$HOSTS"
          for HOST in "${HOST_ARRAY[@]}"; do
            SERVER=$ACCOUNT@$HOST

            CURRENT_PORT=$(ssh -i deploy_key.pem -o StrictHostKeyChecking=no $SERVER "grep 'server localhost:' $NGINX_CONFIG | awk '{print \$2}' | cut -d ':' -f 2 | sed 's/;//'")

            if [ "$CURRENT_PORT" = "$BLUE_PORT" ]; then
              NEW_PORT=$GREEN_PORT
            elif [ "$CURRENT_PORT" = "$GREEN_PORT" ]; then
              NEW_PORT=$BLUE_PORT
            else
              echo "서버의 blue green 포트 확인 실패 on $HOST"
              exit 1
            fi

            NEW_SERVICE_NAME=$SERVICE_NAME-$NEW_PORT
            OLD_SERVICE_NAME=$SERVICE_NAME-$CURRENT_PORT

            ssh -i deploy_key.pem $SERVER "aws ecr get-login-password --region ap-northeast-2 | docker login --username AWS --password-stdin $ECR_URL"
            ssh -i deploy_key.pem $SERVER "docker pull $ECR_URL/$SERVICE_NAME:$DOCKER_TAG"
            ssh -i deploy_key.pem $SERVER "docker run --env-file /home/$ACCOUNT/upload/.env.prod -d -p $NEW_PORT:3000 --name $NEW_SERVICE_NAME -e TZ=Asia/Seoul $ECR_URL/$SERVICE_NAME"

            for i in {1..20}; do
              echo "Attempting health check on $HOST (attempt $i)"
              HEALTH_CHECK=$(ssh -i deploy_key.pem $SERVER "curl -s -o /dev/null -w '%{http_code}' http://localhost:$NEW_PORT/health")
              echo "http://localhost:$NEW_PORT/health"
              echo "HTTP Status Code: $HEALTH_CHECK"
              if [ "$HEALTH_CHECK" -eq 200 ]; then
                echo -e "\n 헬스체크 성공 on $HOST \n"
                break
              fi
              echo -e "\n 헬스체크 시도 $i/20 실패. 5초 후 재시도 on $HOST... \n"
              sleep 5
            done

            if [ "$HEALTH_CHECK" -ne 200 ]; then
              ssh -i deploy_key.pem $SERVER "docker stop $NEW_SERVICE_NAME && docker rm $NEW_SERVICE_NAME"
              exit 1
            fi

            ssh -i deploy_key.pem $SERVER "sudo sed -i 's/server localhost:$CURRENT_PORT;/server localhost:$NEW_PORT;/g' $NGINX_CONFIG"
            ssh -i deploy_key.pem $SERVER "sudo systemctl restart nginx"

            ssh -i deploy_key.pem $SERVER "sudo docker stop $OLD_SERVICE_NAME"
            ssh -i deploy_key.pem $SERVER "sudo docker rm $OLD_SERVICE_NAME"
            ssh -i deploy_key.pem $SERVER "docker images --format \"{{.ID}} {{.Repository}}:{{.Tag}}\" | grep -v ':latest' | awk '{print \$1}' | xargs -r docker rmi"
            ssh -i deploy_key.pem $SERVER "y | sudo docker system prune -a"

            echo "배포 완료 on $HOST. $NEW_SERVICE_NAME"
          done

      - name: Cleanup PEM file
        run: rm deploy_key.pem
        if: always()