deploy-ecs.yml

name: Deploy to Amazon ECS

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: true

on:
  push:
    branches: [ "staging" ]

env:
  AWS_REGION: ap-northeast-2                      # AWS region 설정
  ECR_REPOSITORY: gyeongdan-fastapi               # Amazon ECR repository 이름
  ECS_SERVICE: GyeongdanFastAPI                   # Amazon ECS 서비스 이름
  ECS_CLUSTER: Gyeongdan                          # Amazon ECS 클러스터 이름
  ECS_TASK_DEFINITION: tf-staging.json  # Amazon ECS task definition 파일 경로
  CONTAINER_NAME: FastAPI                         # 컨테이너 이름
  PROGRESS_SLACK_CHANNEL: C07BRCDNBMF             # Slack 채널 ID

permissions:
  contents: read

jobs:
  deploy:
    name: Deploy
    runs-on: ubuntu-latest

    steps:
      - name: Post Slack Channel that Build Start
        id: slack-build-start
        uses: slackapi/slack-github-action@v1.23.0
        with:
          channel-id: ${{ env.PROGRESS_SLACK_CHANNEL }}
          payload: |
            {
              "text": ":small_airplane: *Gyeongdan FastAPI ${{ github.ref_name }}* 배포가 시작되었습니다.",
              "blocks": [
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": ":mega: *Gyeongdan FastAPI ${{ github.ref_name }}* 배포가 시작되었습니다."
                  }
                },
                {
                  "type": "actions",
                  "elements": [
                    {
                      "type": "button",
                      "text": {
                        "type": "plain_text",
                        "emoji": true,
                        "text": "깃허브액션에서 확인하기."
                      },
                      "value": "click_me_123",
                      "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
                    }
                  ]
                }
              ]
            }
        env:
          SLACK_BOT_TOKEN: ${{ secrets.PROGRESS_SLACK_CHANNEL_TOKEN }}

      - name: Checkout
        uses: actions/checkout@v4

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ env.AWS_REGION }}

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Docker build & Push Docker image to Amazon ECR
        id: build-image
        uses: docker/build-push-action@v5
        env:
          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
          IMAGE_TAG: ${{ github.sha }}
        with:
          context: .
          push: true
          tags: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}
          build-args: |
            DB_HOST=${{ secrets.DB_HOST }}
            DB_USER=${{ secrets.DB_USER }}
            DB_PASSWORD=${{ secrets.DB_PASSWORD }}
            DB_NAME=${{ secrets.DB_NAME }}
            DB_PORT=${{ secrets.DB_PORT }}
            OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }}
            GOOGLE_CSE_ID=${{ secrets.GOOGLE_CSE_ID }}
            GOOGLE_API_KEY=${{ secrets.GOOGLE_API_KEY }}
            USER_AGENT=${{ secrets.USER_AGENT }}
          cache-from: type=gha
          cache-to: type=gha,mode=min,ignore-error=true

      - name: Fill in the new image ID in the Amazon ECS task definition
        id: task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        env:
          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
          IMAGE_TAG: ${{ github.sha }}
        with:
          task-definition: ${{ env.ECS_TASK_DEFINITION }}
          container-name: ${{ env.CONTAINER_NAME }}
          image: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}

      - name: Deploy Amazon ECS task definition
        id: ecs-deploy
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        with:
          task-definition: ${{ steps.task-def.outputs.task-definition }}
          service: ${{ env.ECS_SERVICE }}
          cluster: ${{ env.ECS_CLUSTER }}
          wait-for-service-stability: true
          wait-for-minutes: 10

      - name: Verify New Task Definition is Deployed
        run: |
          CURRENT_TASK_DEF_ARN=""
          RETRIES=3
          SLEEP_INTERVAL=10

          for ((i=0; i<RETRIES; i++)); do
            CURRENT_TASK_DEF_ARN=$(aws ecs describe-services --cluster ${{ env.ECS_CLUSTER }} --service ${{ env.ECS_SERVICE }} --query services[0].deployments[0].taskDefinition | jq -r ".")
            NEW_TASK_DEF_ARN=${{ steps.ecs-deploy.outputs.task-definition-arn }}
            echo "Attempt $(($i + 1)): Current task arn: $CURRENT_TASK_DEF_ARN"

            if [ "$CURRENT_TASK_DEF_ARN" == "$NEW_TASK_DEF_ARN" ]; then
              echo "Deployment successful."
              exit 0
            fi

            echo "ARNs do not match. Retrying in $SLEEP_INTERVAL seconds..."
            sleep $SLEEP_INTERVAL
          done

          echo "Deployment failed after $RETRIES attempts."
          exit 1

      - name: Post Slack Channel that Build Success
        if: success()
        id: slack-build-success
        uses: slackapi/slack-github-action@v1.23.0
        with:
          channel-id: ${{ env.PROGRESS_SLACK_CHANNEL }}
          payload: |
            {
              "text": ":white_check_mark: *Gyeongdan FastAPI ${{ github.ref_name }}* 배포가 성공했습니다.",
              "blocks": [
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": ":pedro: *Gyeongdan FastAPI ${{ github.ref_name }}* 배포가 성공했습니다."
                  }
                },
                {
                  "type": "actions",
                  "elements": [
                    {
                      "type": "button",
                      "text": {
                        "type": "plain_text",
                        "emoji": true,
                        "text": "깃허브액션에서 확인하기."
                      },
                      "style": "primary",
                      "value": "click_me_123",
                      "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
                    }
                  ]
                }
              ]
            }
        env:
          SLACK_BOT_TOKEN: ${{ secrets.PROGRESS_SLACK_CHANNEL_TOKEN }}

      - name: Post Slack Channel that Build Fail
        if: failure()
        id: slack-build-fail
        uses: slackapi/slack-github-action@v1.23.0
        with:
          channel-id: ${{ env.PROGRESS_SLACK_CHANNEL }}
          payload: |
            {
              "text": ":x: *Gyeongdan FastAPI ${{ github.ref_name }}* 배포가 실패했습니다.",
              "blocks": [
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": ":typingcat: *Gyeongdan FastAPI ${{ github.ref_name }}* 배포가 실패했습니다."
                  }
                },
                {
                  "type": "actions",
                  "elements": [
                    {
                      "type": "button",
                      "text": {
                        "type": "plain_text",
                        "emoji": true,
                        "text": "깃허브액션에서 확인하기."
                      },
                      "style": "danger",
                      "value": "click_me_123",
                      "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
                    }
                  ]
                }
              ]
            }
        env:
          SLACK_BOT_TOKEN: ${{ secrets.PROGRESS_SLACK_CHANNEL_TOKEN }}