chore: docker inspect 추가 후 롤백 테스트 #139
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: backend-cd-dev | |
| on: | |
| push: | |
| branches: | |
| - feature/652 | |
| # - develop | |
| # paths: | |
| # - backend/** | |
| env: | |
| DOCKERHUB_REPOSITORY: ody-official | |
| jobs: | |
| build-and-push: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: backend | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: feature/652 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@v3 | |
| - name: Clean Build With Gradle Wrapper | |
| run: ./gradlew clean build | |
| - name: Publish Test Results | |
| uses: EnricoMi/publish-unit-test-result-action@v2 | |
| if: always() | |
| with: | |
| files: ${{ github.workspace }}/backend/build/test-results/**/*.xml | |
| - name: JUnit Report Action | |
| uses: mikepenz/action-junit-report@v4 | |
| if: always() | |
| with: | |
| report_paths: ${{ github.workspace }}/backend/build/test-results/**/*.xml | |
| - name: Setup Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| - name: Docker Image Build And Push | |
| run: | | |
| docker pull ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:latest || true | |
| docker tag ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:latest ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:previous || true | |
| docker push ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:previous || true | |
| docker inspect ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:previous | |
| docker ps | |
| docker build --platform linux/arm64 -t ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:${{ github.sha }}-dev -f Dockerfile . --push | |
| pull-and-deploy: | |
| needs: build-and-push | |
| runs-on: dev | |
| steps: | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| - name: Clean Up Legacy Image | |
| run: | | |
| docker compose down || true | |
| docker rmi $(docker images -q) -f || true | |
| - name: Docker Compose up | |
| run: | | |
| export DOCKERHUB_USERNAME=${{ secrets.DOCKERHUB_USERNAME }} | |
| export DOCKERHUB_REPOSITORY=$DOCKERHUB_REPOSITORY | |
| export DEV_MYSQL_PASSWORD=${{ secrets.DEV_MYSQL_PASSWORD }} | |
| export JASYPT_ENCRYPTOR_PASSWORD=${{ secrets.JASYPT_PASSWORD }} | |
| export TAG=${{ github.sha }}-dev | |
| docker compose up -d | |
| - name: Health Check with Retry | |
| uses: nick-invision/retry@v2 | |
| with: | |
| timeout_minutes: 1 | |
| max_attempts: 5 | |
| retry_wait_seconds: 6 | |
| command: | | |
| response=$(curl -s https://dev.oody.site/actuator/health) | |
| status=$(echo $response | jq -r '.status') | |
| if [ "$status" = "UP" ]; then | |
| echo "Status is UP. Continuing..." | |
| exit 0 | |
| else | |
| echo "Status is NOT UP." | |
| exit 1 | |
| fi | |
| continue-on-error: true | |
| - name: Rollback if Health Check fails | |
| if: failure() | |
| run: | | |
| docker stop $DOCKER_CONTAINER_NAME || true | |
| docker rm $DOCKER_CONTAINER_NAME || true | |
| docker pull ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:previous | |
| export DOCKERHUB_USERNAME=${{ secrets.DOCKERHUB_USERNAME }} | |
| export DOCKERHUB_REPOSITORY=$DOCKERHUB_REPOSITORY | |
| export DEV_MYSQL_PASSWORD=${{ secrets.DEV_MYSQL_PASSWORD }} | |
| export JASYPT_ENCRYPTOR_PASSWORD=${{ secrets.JASYPT_PASSWORD }} | |
| export TAG=previous | |
| docker compose up -d | |
| - name: Tag successful deployment as latest | |
| if: success() | |
| run: | | |
| docker tag ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:${{ github.sha }}-dev ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:latest | |
| docker push ${{ secrets.DOCKERHUB_USERNAME }}/$DOCKERHUB_REPOSITORY:latest | |
| - name: Check Docker Process | |
| run: docker ps |