-
Notifications
You must be signed in to change notification settings - Fork 2
160 lines (153 loc) · 5.23 KB
/
deploy-ecs.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
name: AWS ECS 배포
on:
workflow_call:
inputs:
ecs-service:
required: true
type: string
ecs-cluster:
required: true
type: string
ecr-task-definition:
required: true
type: string
image-url:
required: true
type: string
environment:
required: true
type: string
secrets:
AWS_ASSUME_ROLE_ARN:
required: true
AWS_ECR_REGISTRY_URL:
required: true
AWS_REGION:
required: true
SLACK_WEBHOOK_URL:
required: true
jobs:
deploy:
environment: ${{ inputs.environment }}
runs-on: [ ubuntu-latest ]
name: ECS 배포하기
permissions:
id-token: write
contents: read
steps:
- name: AWS 인증정보 준비하기
uses: aws-actions/configure-aws-credentials@v2
with:
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
aws-region: ${{ secrets.AWS_REGION }}
- name: AWS 태스크 정의 파일 내려받기
run: |
aws ecs describe-task-definition \
--task-definition ${{ inputs.ecr-task-definition }} \
--query taskDefinition \
> task-definition.json
- name: AWS 태스크 정의 파일에 이미지 버전 업데이트하기
id: task-def
uses: aws-actions/amazon-ecs-render-task-definition@v1
with:
task-definition: task-definition.json
container-name: api
image: "${{ secrets.AWS_ECR_REGISTRY_URL }}/${{ inputs.image-url }}"
- name: AWS 태스크 정의 배포하고 서비스 업데이트하기
id: ecs-deploy
uses: aws-actions/amazon-ecs-deploy-task-definition@v1
with:
task-definition: ${{ steps.task-def.outputs.task-definition }}
service: ${{ inputs.ecs-service }}
cluster: ${{ inputs.ecs-cluster }}
wait-for-service-stability: true # ECS 배포후 롤링업데이트까지 성공해야 태스크가 완료됩니다.
- name: 설마 롤백한건 아닌지 확인해보기
id: check-rollback
run: |
CURRENT_TASK_DEF_ARN=$(aws ecs describe-services --cluster ${{ inputs.ecs-cluster }} --services ${{ inputs.ecs-service }} --query services[0].deployments[0].taskDefinition | jq -r ".")
NEW_TASK_DEF_ARN=${{ steps.ecs-deploy.outputs.task-definition-arn }}
if [ "$CURRENT_TASK_DEF_ARN" != "$NEW_TASK_DEF_ARN" ]; then
echo "Deployment rolled back."
exit 1
fi
- name: 배포 성공 슬랙 알림 보내기
uses: 8398a7/action-slack@v3
if: ${{ success() }}
with:
status: custom
fields: author, workflowRun, pullRequest
custom_payload: |
{
attachments: [{
color: '#59f764',
title: '백엔드 배포 알림',
text: `삐삐 서버 새 리비전 배포 성공!`,
fields: [
{
title: '배포 환경',
value: `${{ inputs.environment }}`,
short: true,
},
{
title: '배포자',
value: `${process.env.AS_AUTHOR}`,
short: true,
},
{
title: '워크플로 링크',
value: `${process.env.AS_WORKFLOW_RUN}`,
short: true,
},
{
title: 'PR 링크',
value: `${process.env.AS_PULL_REQUEST}`,
short: true,
},
{
title: '새 Task Definition ARN',
value: `${{ steps.ecs-deploy.outputs.task-definition-arn }}`,
short: false,
}
]
}]
}
env:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
- name: 배포 실패 슬랙 알림 보내기
uses: 8398a7/action-slack@v3
if: ${{ failure() }}
with:
status: custom
fields: author, workflowRun, pullRequest
custom_payload: |
{
attachments: [{
color: '#e83e20',
title: '백엔드 배포 알림',
text: `삐삐 서버 새 리비전 배포 실패..ㅠㅠ`,
fields: [
{
title: '배포 환경',
value: `${{ inputs.environment }}`,
short: true,
},
{
title: '배포자',
value: `${process.env.AS_AUTHOR}`,
short: true,
},
{
title: '워크플로 링크',
value: `${process.env.AS_WORKFLOW_RUN}`,
short: true,
},
{
title: 'PR 링크',
value: `${process.env.AS_PULL_REQUEST}`,
short: true,
}
]
}]
}
env:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}