k3s.yaml

name: Spring Boot Multi-module K3s Deployment

on:
  push:
    branches:
      - develop

env:
  REGISTRY: "ghcr.io"
  NAMESPACE: "depromeet"
  IMAGE_NAME: "kasukabe-server"
  MODULE: "layer-api"


jobs:
  setup:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    outputs:
      deploy_target: ${{ steps.set-env.outputs.DEPLOY_TARGET }}
      sha_short: ${{ steps.sha_short.outputs.sha_short }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Setup Env
        id: set-env
        run: |
          if [[ "${GITHUB_REF}" == "refs/heads/main" ]]; then
            echo "DEPLOY_TARGET=production" >> $GITHUB_OUTPUT
          else
            echo "DEPLOY_TARGET=development" >> $GITHUB_OUTPUT
          fi

      - name: Get short SHA
        id: sha_short
        run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT


  build:
    name: build
    needs: [ setup ]
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    env:
      DEPLOY_TARGET: ${{ needs.setup.outputs.deploy_target }}
      APPLICATION_SECRET_PROPERTIES: ${{ secrets.APPLICATION_SECRET_PROPERTIES }}
      GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }}
      SHA_SHORT: ${{ needs.setup.outputs.sha_short }}

    steps:
      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'corretto'

      - name: Checkout sources
        uses: actions/checkout@v4

      - name: Setup Gradle
        uses: gradle/gradle-build-action@bd5760595778326ba7f1441bcf7e88b49de61a25 # v2.6.0

      - name: Create application-secret.properties
        run: |
          echo "${APPLICATION_SECRET_PROPERTIES}" > ./${{ env.MODULE }}/src/main/resources/application-secret.properties

      - name: Build ${{ env.MODULE }} module
        run: ./gradlew :${{ env.MODULE }}:build

      - name: Run tests:${{ env.MODULE }}
        run: ./gradlew :${{ env.MODULE }}:test

      - name: login github container registry
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
        with:
          images: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}/${{ env.MODULE }}

      - name: push
        uses: docker/build-push-action@v4
        with:
          context: ./${{ env.MODULE }}
          platforms: linux/amd64
          push: true
          tags: |
            ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}:${{ env.SHA_SHORT }}
            ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}:latest
  
  
  

  deploy:
    name: Deploy to K3s
    needs: [ build, setup ]
    runs-on: ubuntu-latest
    env:
      DEPLOY_TARGET: ${{ needs.setup.outputs.deploy_target }}
      MODULE: ${{ env.MODULE }}
      REGISTRY: ${{ env.REGISTRY }}
      NAMESPACE: ${{ env.NAMESPACE }}
      IMAGE_NAME: ${{ env.IMAGE_NAME }}
      SELECTOR: ${{ env.MODULE }}-dev

    steps:
      - name: Checkout sources
        uses: actions/checkout@v4

      - name: Install kubectl
        uses: azure/setup-kubectl@v1
        with:
          version: 'v1.21.0'

      - name: Set up kubeconfig
        run: |
          mkdir -p $HOME/.kube
          echo "${{ secrets.KUBE_CONFIG }}" > $HOME/.kube/config
          chmod 600 $HOME/.kube/config

      - name: Create K3s deployment files
        run: |
          MODULE=${{ env.MODULE }}
          REGISTRY=${{ env.REGISTRY }}
          NAMESPACE=${{ env.NAMESPACE }}
          IMAGE_NAME=${{ env.IMAGE_NAME }}
          SHA_SHORT=${{ needs.setup.outputs.sha_short }}
          SELECTOR=${{ env.SELECTOR }}
          DEPLOY_TARGET=${{ env.DEPLOY_TARGET }}

          cat <<EOF > deployment.yaml
          apiVersion: apps/v1
          kind: Deployment
          metadata:
            name: ${MODULE}-deployment
            namespace: default
            labels:
              app: ${SELECTOR}
          spec:
            replicas: 1
            selector:
              matchLabels:
                app: ${SELECTOR}
            template:
              metadata:
                labels:
                  app: ${SELECTOR}
              spec:
                containers:
                - name: ${MODULE}
                  image: ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${SHA_SHORT}
                  ports:
                  - containerPort: 8080
                  env:
                  - name: TZ
                    value: "Asia/Seoul"
                  - name: SPRING_PROFILES_ACTIVE
                    value: "${DEPLOY_TARGET}"
                  volumeMounts:
                  - name: secret-volume
                    mountPath: /config/application-secret.properties
                    subPath: application-secret.properties
                  - name: log-volume
                    mountPath: /log
                  - name: tokens-volume
                    mountPath: /config/tokens
                volumes:
                - name: secret-volume
                  secret:
                    secretName: app-secret-dev
                - name: log-volume
                  hostPath:
                    path: /${DEPLOY_TARGET}/log/${MODULE}
                    type: DirectoryOrCreate
                - name: tokens-volume
                  emptyDir: {}
          ---
          apiVersion: v1
          kind: Service
          metadata:
            name: ${MODULE}-service
            namespace: default
            labels:
              app: ${SELECTOR}
          spec:
            selector:
              app: ${SELECTOR}
            ports:
            - protocol: TCP
              port: 80
              targetPort: 8080
          ---
          apiVersion: networking.k8s.io/v1
          kind: Ingress
          metadata:
            name: ${MODULE}-ingress
            namespace: default
            annotations:
              kubernetes.io/ingress.class: traefik
          spec:
            rules:
            - host: stgapi.layerapp.io
              http:
                paths:
                - path: /
                  pathType: Prefix
                  backend:
                    service:
                      name: ${MODULE}-service
                      port: 
                        number: 80
          EOF

      - name: Deploy to K3s
        run: |
          kubectl apply -f deployment.yaml