prod-cicd.yaml

name: 프로덕션 워크플로우
on:
  push:
    branches: [ 'main' ]
    paths:
      - 'gateway/**' # Gateway 모듈 변경
      - 'member/**' # Member 모듈 변경
      - 'common/**' # Common 모듈 변경
      - 'family/**' # Family 모듈 변경
      - 'post/**' # Post 모듈 변경
      - 'mission/**' # Mission 모듈 변경
      - '.github/workflows/**' # 워크플로우와 관련된 파일이 변경된 경우
      - 'build.gradle' # Parent Gradle 모듈 설정이 변경된 경우
      - 'settings.gradle' # Parent Gradle 설정이 변경된 경우

env:
  ECR_REPOSITORY_NAME: bibbi-backend-prod
  SPRING_PROFILE: prod
  ECS_SERVICE: bibbi-backend-prod
  ECS_CLUSTER: bibbi-cluster-prod
  ECR_TASK_DEFINITION: bibbi-backend-prod

concurrency:
  group: production

jobs:
  prepare-variables:
    name: 환경변수 준비하기
    runs-on: ubuntu-latest
    outputs:
      ecr-repository-name: ${{ steps.setup-env.outputs.ecr-repository-name }}
      image-tag: ${{ steps.setup-env.outputs.image-tag }}
      spring-profile: ${{ steps.setup-env.outputs.spring-profile }}
      ecs-service: ${{ env.ECS_SERVICE }}
      ecs-cluster: ${{ env.ECS_CLUSTER }}
      ecr-task-definition: ${{ env.ECR_TASK_DEFINITION }}
    steps:
      - name: GitHub 에서 레포 받아오기
        uses: actions/checkout@v3

      - name: 환경변수 출력하기
        id: setup-env
        run: |
          echo "ecr-repository-name=$ECR_REPOSITORY_NAME" >> $GITHUB_OUTPUT
          echo "image-tag=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
          echo "spring-profile=$SPRING_PROFILE" >> $GITHUB_OUTPUT
          echo "ecs-service=$ECS_SERVICE" >> $GITHUB_OUTPUT
          echo "ecs-cluster=$ECS_CLUSTER" >> $GITHUB_OUTPUT
          echo "ecr-task-definition=$ECR_TASK_DEFINITION" >> $GITHUB_OUTPUT

  call-build-workflow:
    if: github.event_name == 'push'
    needs: [ prepare-variables ]
    name: 이미지 빌드
    uses: ./.github/workflows/build-ecr.yaml
    permissions:
      id-token: write
      contents: read
    with:
      ecr-repository-name: ${{ needs.prepare-variables.outputs.ecr-repository-name }}
      image-tag: ${{ needs.prepare-variables.outputs.image-tag }}
      spring-profile: ${{ needs.prepare-variables.outputs.spring-profile }}
    secrets:
      AWS_ASSUME_ROLE_ARN: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
      AWS_ECR_REGISTRY_URL: ${{ secrets.AWS_ECR_REGISTRY_URL }}
      AWS_REGION: ${{ secrets.AWS_REGION }}
      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_PROD_AUTH_TOKEN }}

  call-deploy-workflow:
    if: github.event_name == 'push'
    needs: [ prepare-variables, call-build-workflow ]
    name: AWS ECS 배포
    uses: ./.github/workflows/deploy-ecs.yaml
    permissions:
      id-token: write
      contents: read
    with:
      environment: production
      ecs-service: ${{ needs.prepare-variables.outputs.ecs-service }}
      ecs-cluster: ${{ needs.prepare-variables.outputs.ecs-cluster }}
      ecr-task-definition: ${{ needs.prepare-variables.outputs.ecr-task-definition }}
      image-url: ${{ needs.call-build-workflow.outputs.image-url }}
    secrets:
      AWS_ASSUME_ROLE_ARN: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
      AWS_ECR_REGISTRY_URL: ${{ secrets.AWS_ECR_REGISTRY_URL }}
      AWS_REGION: ${{ secrets.AWS_REGION }}
      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}