[BE] 완료된 코드 프로덕션 서버로 배포

.github/pull_request_template.md

@@ -0,0 +1,10 @@
+## ⚡️ 관련 이슈
+close #이슈번호
+
+## 📍주요 변경 사항
+### 1. 주요 변경 사항은 이러이러합니다.
+### - 이렇게도 쓸 수 있어요
+
+## 🎸기타
+### 1. 이런걸 더 고려해봐야 할 것 같습니다.
+### - 이런 것도 해야해요.

.github/workflows/backend_cd.yml

@@ -0,0 +1,55 @@
+name: Backend CD
+
+on:
+  push:
+    branches:
+      - dev/be
+
+jobs:
+  build:
+    runs-on: [self-hosted, develop, spring]
+    steps:
+      - name: 브랜치명을 통해 개발 환경 알아내기
+        run: |
+          cd ${{ secrets.SCRIPT_DIRECTORY }}
+          bash find-env-by-branch.sh
+
+      - name: 체크아웃
+        uses: actions/checkout@v4
+
+      - name: gradle 캐싱
+        uses: gradle/actions/setup-gradle@v3
+
+      - name: bootJar로 jar 파일 생성
+        run: |
+          ./gradlew bootJar
+          mv build/libs/*.jar ${{ secrets.WORK_DIRECTORY }}/${{ env.ENVIRONMENT }}
+        working-directory: ./backend
+
+      - name: 클린업
+        if: always()
+        run: rm -rf ../2024-code-zap/*
+
+  deploy:
+    needs: build
+    runs-on: [self-hosted, develop, spring]
+    steps:
+      - name: 브랜치명을 통해 개발 환경 알아내기
+        run: |
+          cd ${{ secrets.SCRIPT_DIRECTORY }}
+          bash find-env-by-branch.sh
+
+      - name: 실행 프로세스 확인
+        run: |
+          cd ${{ secrets.SCRIPT_DIRECTORY }}
+          bash check-old-pids.sh
+
+      - name: 배포 스크립트 실행
+        run: |
+          cd ${{ secrets.SCRIPT_DIRECTORY }}
+          RUNNER_TRACKING_ID="" && bash start.sh ${{ env.ENVIRONMENT }}
+
+      - name: 실행 프로세스 확인으로 배포 검증 
+        run: |
+          cd ${{ secrets.SCRIPT_DIRECTORY }}
+          bash verify-deploy.sh

.github/workflows/backend_cd_prod.yml

@@ -0,0 +1,35 @@
+name: Backend CD
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: [self-hosted, production, spring]
+    steps:
+      - name: 체크아웃
+        uses: actions/checkout@v4
+
+      - name: gradle 캐싱
+        uses: gradle/actions/setup-gradle@v3
+
+      - name: bootJar로 jar 파일 생성
+        run: |
+          ./gradlew bootJar
+          mv build/libs/*.jar ${{ secrets.JAR_DIRECTORY }}
+        working-directory: ./backend
+
+      - name: 클린업
+        if: always()
+        run: rm -rf ../2024-code-zap/*
+
+  deploy:
+    needs: build
+    runs-on: [self-hosted, production, spring]
+    steps:
+      - name: 배포 스크립트 실행
+        run: |
+          cd ${{ secrets.ZAP_DIRECTORY }}
+          docker compose restart

.github/workflows/backend_ci.yml

@@ -0,0 +1,39 @@
+name: Backend CI
+
+on:
+  pull_request:
+    branches:
+      - dev/be
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: 체크아웃
+        uses: actions/checkout@v4
+
+      - name: MySQL 시작
+        uses: mirromutth/[email protected]
+        with:
+          host port: ${{ secrets.MYSQL_HOST_PORT }}
+          container port: ${{ secrets.MYSQL_CONTAINER_PORT }}
+          mysql version: ${{ secrets.MYSQL_VERSION }}
+          mysql database: ${{ secrets.MYSQL_DATABASE }}
+          mysql root password: ${{ secrets.MYSQL_PASSWORD }}
+
+      - name: DB 설정 파일 가져오기
+        working-directory: ./backend/src/main/resources
+        run: echo "${{ secrets.APPLICATION_DB_YAML }}" > application-db.yml
+
+      - name: JDK 17 설정
+        uses: actions/setup-java@v4
+        with:
+          java-version: 17
+          distribution: temurin
+
+      - name: 테스트 코드 실행
+        run: ./gradlew test
+        working-directory: ./backend
+

.github/workflows/ci_cd_fail_notification.yml

@@ -0,0 +1,48 @@
+name: Notify on Workflow Failure
+
+on:
+  workflow_run:
+    workflows: ["Backend CI", "Backend CD", "Frontend CD", "Frontend CI"]
+    types:
+      - completed
+
+jobs:
+  notify:
+    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
+    runs-on: ubuntu-latest
+    steps:
+    - name: 변수 추출
+      run: |
+        SLACK_WEBHOOK_URL=${{ secrets.SLACK_CICD_FAIL_WEBHOOK_URL }}
+        SLACK_IDS=${{ secrets.SLACK_IDS }}
+        echo "SLACK_WEBHOOK_URL=$SLACK_WEBHOOK_URL" >> $GITHUB_ENV
+        echo "SLACK_IDS=$SLACK_IDS" >> $GITHUB_ENV
+
+    - name: CI 또는 CD 실패 시 Slack 알람 보내기
+      run: |
+          WORKFLOW_NAME="${{ github.event.workflow_run.name }}"
+          WORKFLOW_URL="${{ github.event.workflow_run.html_url }}"
+          ASSIGNEE="${{ github.event.workflow_run.actor.login }}"
+          mentions=""
+
+          parse_slack_ids() {
+              echo "$SLACK_IDS" | jq -r 'to_entries | map("\(.key):\(.value)") | .[]'
+          }
+
+          slack_id=$(parse_slack_ids | grep "^$ASSIGNEE:" | cut -d':' -f2)
+
+          if [ -n "$slack_id" ]; then
+              MENTION="<@$slack_id>"
+          else
+              MENTION="$ASSIGNEE"
+          fi
+
+          if [ ! -z "$MENTION" ]; then
+            message="$MENTION 님, 실행된 $WORKFLOW_NAME 워크플로가 실패했습니다. <$WORKFLOW_URL|확인하러 가기>."
+            curl -X POST -H 'Content-type: application/json' \
+              --data "{\"text\":\"$message\"}" \
+              "$SLACK_WEBHOOK_URL"
+            echo "Sent message: $message"
+          else
+            echo "No MENTIONER to notify"
+          fi

.github/workflows/frontend_cd.yml

@@ -0,0 +1,67 @@
+name: Frontend CD
+
+on:
+  push:
+    branches:
+      - main
+      - dev/fe
+
+jobs:
+  build:
+    runs-on: self-hosted
+    env:
+      frontend-directory: ./frontend
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Node.js 설정
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: .env.production 파일 생성
+        run: |
+          echo "REACT_APP_API_URL=${{ secrets.REACT_APP_API_URL }}" > ${{ env.frontend-directory }}/.env.production
+          echo "REACT_APP_BASE_URL=${{ secrets.REACT_APP_BASE_URL }}" >> ${{ env.frontend-directory }}/.env.production
+          echo "SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }}" >> ${{ env.frontend-directory }}/.env.production
+          echo "SENTRY_DSN=${{ secrets.SENTRY_DSN }}" >> ${{ env.frontend-directory }}/.env.production
+          echo "SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }}" >> ${{ env.frontend-directory }}/.env.sentry-build-plugin
+
+      - name: 파일 접근 권한 변경
+        run: |
+          chmod 644 ${{ env.frontend-directory }}/.env.production
+          chmod 644 ${{ env.frontend-directory }}/.env.sentry-build-plugin
+
+      - name: 의존성 설치
+        run: npm install
+        working-directory: ${{ env.frontend-directory }}
+
+      - name: 빌드 실행
+        run: npm run build
+        working-directory: ${{ env.frontend-directory }}
+
+      - name: Artifact 업로드
+        uses: actions/upload-artifact@v4
+        with:
+          name: code-zap-front
+          path: ${{ env.frontend-directory }}/dist/**
+
+  deploy:
+    needs: build
+    runs-on: self-hosted
+    steps:
+      - name: Artifact 폴더 삭제 및 생성
+        run: |
+          rm -rf ${{ secrets.FRONT_DIRECTORY }}
+          mkdir ${{ secrets.FRONT_DIRECTORY }}
+
+      - name: Artifact 다운로드
+        uses: actions/download-artifact@v4
+        with:
+          name: code-zap-front
+          path: ${{ secrets.FRONT_DIRECTORY }}
+
+      - name: 파일 S3로 이동
+        run: |
+          aws s3 cp --recursive ${{ secrets.FRONT_DIRECTORY }} s3://techcourse-project-2024/code-zap
+

.github/workflows/frontend_ci.yml

@@ -0,0 +1,32 @@
+name: Frontend CI
+
+on:
+  pull_request:
+    branches:
+      - main
+      - dev/fe
+
+jobs:
+  build-with-test:
+    runs-on: ubuntu-latest
+    env:
+      frontend-directory: ./frontend
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Node.js 설정
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: 의존성 설치
+        run: npm install
+        working-directory: ${{ env.frontend-directory }}
+
+      - name: 타입 체크 실행
+        run: npm run tsc
+        working-directory: ${{ env.frontend-directory }}
+
+      - name: 테스트 실행
+        run: npm run test
+        working-directory: ${{ env.frontend-directory }}

.github/workflows/pr_notification.yml

@@ -0,0 +1,51 @@
+name: PR Slack Notification
+on:
+  pull_request:
+    types: [opened, reopened]
+jobs:
+  notify_reviewers:
+    runs-on: ubuntu-latest
+    steps:
+    - name: 변수 추출
+      run: |
+        SLACK_WEBHOOK_URL=${{ secrets.SLACK_PR_CREATE_WEBHOOK_URL }}
+        SLACK_IDS=${{ secrets.SLACK_IDS }}
+        echo "SLACK_WEBHOOK_URL=$SLACK_WEBHOOK_URL" >> $GITHUB_ENV
+        echo "SLACK_IDS=$SLACK_IDS" >> $GITHUB_ENV
+
+    - name: PR 생성 시 reviewer들에게 Slack 알람 보내기
+      run: |
+        PR_TITLE="${{ github.event.pull_request.title }}"
+        PR_URL="${{ github.event.pull_request.html_url }}"
+        REVIEWERS='${{ toJson(github.event.pull_request.requested_reviewers.*.login) }}'
+        echo "REVIEWERS: $REVIEWERS"
+
+        parse_slack_ids() {
+            echo "$SLACK_IDS" | jq -r 'to_entries | map("\(.key):\(.value)") | .[]'
+        }
+
+        reviewers=$(echo "$REVIEWERS" | jq -r '.[]')
+        mentions=""
+
+        for reviewer in $reviewers; do
+            slack_id=$(parse_slack_ids | grep "^$reviewer:" | cut -d':' -f2)
+
+            if [ -n "$slack_id" ]; then
+                mentions="$mentions <@$slack_id>"
+            else
+                mentions="$mentions $reviewer"
+            fi
+        done
+
+        echo "Mentions: $mentions"
+
+        if [ ! -z "$mentions" ]; then
+          message="$mentions 님, 새로운 PR이 생성되었습니다: <$PR_URL|$PR_TITLE>"
+          curl -X POST -H 'Content-type: application/json' \
+            --data "{\"text\":\"$message\"}" \
+            "$SLACK_WEBHOOK_URL"
+          echo "Sent message: $message"
+        else
+          echo "No reviewers to notify"
+        fi
+