deploy.yaml

name: AWS ECS 배포
on:
  workflow_call:
    inputs:
      ecs-service:
        required: true
        type: string
      ecs-cluster:
        required: true
        type: string
      ecr-task-definition:
        required: true
        type: string
      image-url:
        required: true
        type: string
      environment:
        required: true
        type: string
    secrets:
      AWS_ASSUME_ROLE_ARN:
        required: true
      AWS_ECR_REGISTRY_URL:
        required: true
      AWS_REGION:
        required: true
jobs:
  deploy:
    environment: ${{ inputs.environment }}
    runs-on: [ ubuntu-latest ]
    name: ECS 배포하기

    permissions:
      id-token: write
      contents: read

    steps:
      - name: AWS 인증정보 준비하기
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: AWS 태스크 정의 파일 내려받기
        run: |
          aws ecs describe-task-definition \
          --task-definition ${{ inputs.ecr-task-definition }} \
          --query taskDefinition \
          > task-definition.json

      - name: AWS 태스크 정의 파일에 이미지 버전 업데이트하기
        id: task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: task-definition.json
          container-name: api
          image: "${{ secrets.AWS_ECR_REGISTRY_URL }}/${{ inputs.image-url }}"

      - name: AWS 태스크 정의 배포하고 서비스 업데이트하기
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        with:
          task-definition: ${{ steps.task-def.outputs.task-definition }}
          service: ${{ inputs.ecs-service }}
          cluster: ${{ inputs.ecs-cluster }}
          wait-for-service-stability: true # ECS 배포후 롤링업데이트까지 성공해야 태스크가 완료됩니다.