보안이 강화된 JWT 비밀키 발급, 비밀키로 서명로직 변경 #56
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Java CI with Gradle | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| env: | |
| AWS_REGION: ap-northeast-2 | |
| AWS_S3_BUCKET: ${{ secrets.AWS_BUCKET_NAME }} | |
| AWS_CODE_DEPLOY_APPLICATION: mapddang-CD | |
| AWS_CODE_DEPLOY_GROUP: mapddang-CD-group | |
| MYSQL_URL: ${{ secrets.MYSQL_URL }} | |
| MYSQL_USERNAME: ${{ secrets.MYSQL_USERNAME }} | |
| MYSQL_PASSWORD: ${{ secrets.MYSQL_PASSWORD }} | |
| APPLE_CLIENT_ID: ${{ secrets.APPLE_CLIENT_ID }} | |
| APPLE_KEY_ID: ${{ secrets.APPLE_KEY_ID }} | |
| APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} | |
| APPLE_PRIVATE_KEY: ${{ secrets.APPLE_PRIVATE_KEY }} | |
| JWT_SECRET_KEY: ${{ secrets.JWT_SECRET_KEY }} | |
| ACCESS_TOKEN_EXPIRE: ${{ secrets.ACCESS_TOKEN_EXPIRE }} | |
| REFRESH_TOKEN_EXPIRE: ${{ secrets.REFRESH_TOKEN_EXPIRE }} | |
| AWS_S3_ACCESS_KEY: ${{ secrets.AWS_S3_ACCESS_KEY }} | |
| AWS_S3_SECRET_KEY: ${{ secrets.AWS_S3_SECRET_KEY }} | |
| jobs: | |
| build-with-gradle: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| # 체크아웃 | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| #JDK 17 설정 | |
| java-version: '17' | |
| distribution: 'corretto' | |
| #gradlew 파일에 실행 권한 부여 | |
| - name: Grant execute permission to gradlew | |
| run: chmod +x ./gradlew | |
| #프로젝트 빌드 | |
| - name: Build Project | |
| run: ./gradlew clean build -x test | |
| #AWS 자격증명 설정 | |
| - name: Setup AWS credential | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_S3_ACCESS_KEY }} | |
| aws-secret-access-key: ${{ secrets.AWS_S3_SECRET_KEY }} | |
| aws-region: ap-northeast-2 | |
| #ZIP 파일을 S3 버킷에 업로드 | |
| - name: Upload to AWS S3 | |
| run: | | |
| aws deploy push \ | |
| --application-name ${{ env.AWS_CODE_DEPLOY_APPLICATION }} \ | |
| --ignore-hidden-files \ | |
| --s3-location s3://$AWS_S3_BUCKET/cicdtest/$GITHUB_SHA.zip \ | |
| --source . | |
| #업로드된 ZIP 파일을 CodeDeploy로 배포 | |
| - name: AWS Code Deploy | |
| run: | | |
| aws deploy create-deployment \ | |
| --application-name ${{ env.AWS_CODE_DEPLOY_APPLICATION }} \ | |
| --deployment-config-name CodeDeployDefault.AllAtOnce \ | |
| --deployment-group-name ${{ env.AWS_CODE_DEPLOY_GROUP }} \ | |
| --s3-location bucket=$AWS_S3_BUCKET,bundleType=zip,key=cicdtest/$GITHUB_SHA.zip |