cd-dev.yml

name: CD Dev

on:
  push:
    branches:
      - release
      - main

permissions:
  id-token: write
  contents: read

env:
  AWS_REGION: ap-northeast-2
  ECR_REPOSITORY: cherrish-server

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'
          cache: 'gradle'

      - name: Configure AWS credentials (OIDC)
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/cherrish-github-actions-role
          aws-region: ${{ env.AWS_REGION }}

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Build and push image with Jib
        env:
          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}
        run: |
          ./gradlew jib \
            -Djib.to.image=${ECR_REGISTRY} \
            -Djib.to.tags=latest,${{ github.sha }}

      - name: Deploy to EC2 via SSM
        env:
          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}
          IMAGE_TAG: ${{ github.sha }}
        run: |
          COMMAND_ID=$(aws ssm send-command \
            --instance-ids "${{ secrets.EC2_INSTANCE_ID }}" \
            --document-name "AWS-RunShellScript" \
            --parameters "commands=[
              'cd /home/ec2-user/cherrish',
              'curl -fsSL https://raw.githubusercontent.com/${{ github.repository }}/${{ github.sha }}/scripts/deploy-dev.sh -o deploy-dev.sh',
              'chmod +x deploy-dev.sh',
              'export AWS_REGION=${{ env.AWS_REGION }}',
              'export ECR_REGISTRY=${ECR_REGISTRY}',
              'export IMAGE_TAG=${IMAGE_TAG}',
              'bash deploy-dev.sh'
            ]" \
            --timeout-seconds 300 \
            --query "Command.CommandId" \
            --output text)

          echo "Command ID: ${COMMAND_ID}"

          # Wait for command to complete (poll until done)
          echo "Waiting for deployment to complete..."
          for i in {1..60}; do
            STATUS=$(aws ssm get-command-invocation \
              --command-id "${COMMAND_ID}" \
              --instance-id "${{ secrets.EC2_INSTANCE_ID }}" \
              --query "Status" \
              --output text 2>/dev/null || echo "Pending")

            echo "Status: ${STATUS}"

            if [ "${STATUS}" = "Success" ]; then
              echo "Deployment successful!"
              aws ssm get-command-invocation \
                --command-id "${COMMAND_ID}" \
                --instance-id "${{ secrets.EC2_INSTANCE_ID }}" \
                --query "StandardOutputContent" \
                --output text
              exit 0
            elif [ "${STATUS}" = "Failed" ] || [ "${STATUS}" = "Cancelled" ] || [ "${STATUS}" = "TimedOut" ]; then
              echo "Deployment failed with status: ${STATUS}"
              echo "=== STDOUT ==="
              aws ssm get-command-invocation \
                --command-id "${COMMAND_ID}" \
                --instance-id "${{ secrets.EC2_INSTANCE_ID }}" \
                --query "StandardOutputContent" \
                --output text
              echo "=== STDERR ==="
              aws ssm get-command-invocation \
                --command-id "${COMMAND_ID}" \
                --instance-id "${{ secrets.EC2_INSTANCE_ID }}" \
                --query "StandardErrorContent" \
                --output text
              exit 1
            fi

            sleep 5
          done

          echo "Deployment timed out"
          exit 1

      - name: Send Discord notification on success
        if: success()
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_URL }}
        run: |
          curl -H "Content-Type: application/json" \
            -d "{\"embeds\": [{\"title\": \"🚀 Deploy Success\", \"description\": \"Cherrish Server deployed to dev\", \"color\": 3066993, \"fields\": [{\"name\": \"Branch\", \"value\": \"${{ github.ref_name }}\", \"inline\": true}, {\"name\": \"Commit\", \"value\": \"\`${GITHUB_SHA:0:7}\`\", \"inline\": true}], \"timestamp\": \"$(date -u +%Y-%m-%dT%H:%M:%S.000Z)\"}]}" \
            $DISCORD_WEBHOOK || true

      - name: Send Discord notification on failure
        if: failure()
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_URL }}
        run: |
          curl -H "Content-Type: application/json" \
            -d "{\"embeds\": [{\"title\": \"❌ Deploy Failed\", \"description\": \"Cherrish Server dev deployment failed\", \"color\": 15158332, \"fields\": [{\"name\": \"Branch\", \"value\": \"${{ github.ref_name }}\", \"inline\": true}, {\"name\": \"Commit\", \"value\": \"\`${GITHUB_SHA:0:7}\`\", \"inline\": true}], \"timestamp\": \"$(date -u +%Y-%m-%dT%H:%M:%S.000Z)\"}]}" \
            $DISCORD_WEBHOOK || true