[RELEASE] 1.0.0 업데이트

.github/workflows/main.yaml

@@ -0,0 +1,77 @@
+name: Team1 CI - Build and Push Docker Image
+
+on:
+  push:
+    branches: ## TODO: dev or main
+      - dev
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        service: [mindscape-auth, mindscape-info, mindscape-service]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: maven
+
+# TEST: mindscape-info
+      - name: Build with Maven
+        run: mvn -B -DskipTests package --file pom.xml
+        working-directory: ./${{ matrix.service }}
+
+## JAR
+      - name: Rename jar file
+        run: mv ./target/*.jar ./target/app.jar
+        working-directory: ./${{ matrix.service }}
+
+      - name: Check jar file
+        run: ls ./target
+        working-directory: ./${{ matrix.service }}
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: app-${{ matrix.service }}
+          path: ./${{ matrix.service }}/target/*.jar
+## AWS SETTINGS
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ap-northeast-2
+
+      - name: Set SHORT_SHA environment variable
+        run: echo "SHORT_SHA=${GITHUB_SHA::7}" >> $GITHUB_ENV
+## DOCKER
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          install: true
+          driver: docker-container
+
+      - name: Login to Amazon ECR
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Build and push Docker image to ECR
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.service }}
+          file: ./${{ matrix.service }}/Dockerfile
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.ap-northeast-2.amazonaws.com/team1-${{ matrix.service }}:${{ env.SHORT_SHA }}
+            ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.ap-northeast-2.amazonaws.com/team1-${{ matrix.service }}:latest
+
+
+
+

.github/workflows/update-secret.yaml

@@ -0,0 +1,45 @@
+# name: Inject RDS/Redis into SealedSecret
+
+# on:
+#   push:
+#     branches:
+#       - dev-terraform
+#   workflow_dispatch:
+
+# jobs:
+#   inject-secrets:
+#     runs-on: ubuntu-latest
+#     steps:
+#       - name: Checkout repo
+#         uses: actions/checkout@v3
+
+#       - name: Configure AWS credentials
+#         uses: aws-actions/configure-aws-credentials@v2
+#         with:
+#           role-to-assume: arn:aws:iam::194722398200:role/Team1-github-role
+#           aws-region: ap-northeast-2
+
+#       - name: Get Terraform outputs
+#         run: |
+#           cd terraform/
+#           DB_HOST=$(terraform output -raw rds_endpoint)
+#           REDIS_HOST=$(terraform output -raw redis_endpoint)
+#           echo "DB_HOST=$DB_HOST" >> $GITHUB_ENV
+#           echo "REDIS_HOST=$REDIS_HOST" >> $GITHUB_ENV
+
+#       - name: Generate Sealed Secret
+#         run: |
+#           DB_URL="jdbc:mysql://${{ env.DB_HOST }}:3306/mindscape?serverTimezone=Asia/Seoul"
+#           sed -e "s|REPLACE_DB_URL|$DB_URL|" \
+#               -e "s|REPLACE_REDIS_HOST|$REDIS_HOST|" \
+#               sealed-secret-add.yaml > sealed-secret.yaml
+
+#           kubeseal \
+#           --controller-name=sealed-secrets-controller \
+#           --controller-namespace=kube-system \
+#           --format=yaml \
+#           < sealed-secret.yaml > sealed-secret-final.yaml
+
+#       - name: Apply Sealed Secret to cluster
+#         run: |
+#           kubectl apply -f sealed-secret-final.yaml

.gitignore

@@ -224,5 +224,49 @@ buildNumber.properties
 .project
 # JDT-specific (Eclipse Java Development Tools)
 .classpath
+
+# End of https://www.toptal.com/developers/gitignore/api/eclipse,intellij,maven,java
+
+
+# Local .terraform directories
+.terraform/
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+crash.*.log
+
+# Exclude all .tfvars files, which are likely to contain sensitive data, such as
+# password, private keys, and other secrets. These should not be part of version 
+# control as they are data points which are potentially sensitive and subject 
+# to change depending on the environment.
+*.tfvars
+*.tfvars.json
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Ignore transient lock info files created by terraform apply
+.terraform.tfstate.lock.info
+
+# Include override files you do wish to add to version control using negated pattern
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+
+terraform.tfvars
+
 *.properties
 # End of https://www.toptal.com/developers/gitignore/api/eclipse,intellij,maven,java