Skip to content

Master #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
yj-devsec wants to merge 7 commits into
base: main
Choose a base branch
from
Open

Master #6

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
ca0a4b9
Update App.js
yj-devsec Jan 5, 2026
50e4409
Update App.js
yj-devsec Jan 5, 2026
5b39dc1
Update App.js
yj-devsec Jan 5, 2026
d19d2c3
Merge pull request #1 from yj-devsec/feature-cicd1
yj-devsec Jan 5, 2026
2e4a0a2
Add cicd-1.yaml
yj-devsec Jan 6, 2026
c589c17
Merge branch 'dev' of https://github.com/yj-devsec/github-actions int…
yj-devsec Jan 6, 2026
b048102
Add cicd-2.yaml
yj-devsec Jan 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 0 additions & 29 deletions .github/workflows/cicd-1.yaml
View file
Open in desktop

This file was deleted.

156 changes: 156 additions & 0 deletions .github/workflows/cicd-2.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,156 @@
name: cicd-2
on:
pull_request:
types: [opened, synchronize, closed]
branches: [dev, master]
paths:
- 'my-app/**'

jobs:
test:
if: github.event.action == 'opened' || github.event.action == 'synchronize'
runs-on: ubuntu-latest
steps:
- name: checkout the code
uses: actions/checkout@v4
- name: setup-node
uses: actions/setup-node@v3
with:
node-version: 18
- name: Cache Node.js modules
uses: actions/cache@v3
with:
path: ~/.npm
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
restore-keys: |
${{ runner.os }}-node-
- name: Install dependencies
run: |
cd my-app
npm ci
- name: npm build
run: |
cd my-app
npm run build

set-environment:
if: github.event.pull_request.merged == true
runs-on: ubuntu-latest
outputs:
environment: ${{ steps.set-env.outputs.environment }}
steps:
- name: set env
id: set-env
run: |
echo ${{ github.base_ref }}
echo "environment=dev" >> $GITHUB_OUTPUT

if [[ ${{ github.base_ref }} == "master" ]]; then
echo "environment=prod" >> $GITHUB_OUTPUT
fi
- name: check env
run: echo ${{ steps.set-env.outputs.environment }}

image-build:
runs-on: ubuntu-latest
needs: [set-environment]
permissions:
id-token: write
contents: read
strategy:
matrix:
environment: ["${{ needs.set-environment.outputs.environment }}"]
environment: ${{ matrix.environment }}
steps:
- name: checkout the code
uses: actions/checkout@v4
- name: Configure AWS Credentials
id: credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: ${{ vars.AWS_REGION }}
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
- name: Login to Amazon ECR
id: login-ecr
uses: aws-actions/amazon-ecr-login@v2
with:
mask-password: 'true'
- name: docker build & push
run: |
docker build -f Dockerfile --tag ${{ secrets.REGISTRY }}/${{ vars.REPOSITORY }}:${{ github.sha }} .
docker push ${{ secrets.REGISTRY }}/${{ vars.REPOSITORY }}:${{ github.sha }}

deploy:
runs-on: ubuntu-latest
needs: [ set-environment, image-build ]
permissions:
id-token: write
contents: read
strategy:
matrix:
environment: ["${{ needs.set-environment.outputs.environment }}"]
environment: ${{ matrix.environment }}
steps:
- name: checkout the code
uses: actions/checkout@v4
- name: Configure AWS Credentials
id: credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: ${{ vars.AWS_REGION }}
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
- name: setup kubectl
uses: azure/setup-kubectl@v3
with:
version: latest
- name: setup helm
uses: azure/setup-helm@v3
with:
version: v3.11.1
- name: access kubernetes
run: |
aws eks update-kubeconfig --name ${{ vars.CLUSTER_NAME }}
- name: deploy
id: status
run: |
helm upgrade --install my-app kubernetes/my-app --create-namespace --namespace my-app-${{ vars.SUFFIX }} \
--set image.tag=${{ github.sha }} \
--set image.repository=${{ secrets.REGISTRY }}/${{ vars.REPOSITORY }}
- name: notify
if: always()
uses: slackapi/slack-github-action@v1.24.0
with:
payload: |
{
"text": "message",
"blocks": [
{
"type": "section",
"text": {
"type": "mrkdwn",
"text": "Environment : ${{ matrix.environment }}, Deploy Result : ${{ steps.status.outcome }}, Repository : ${{ github.repository }}."
}
}
]
}
env:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK

create-pr:
if: needs.set-environment.outputs.environment == 'dev'
runs-on: ubuntu-latest
needs: [set-environment, deploy]
steps:
- name: checkout
uses: actions/checkout@v4
- name: gh auth login
run: |
echo ${{ secrets.PERSONAL_ACCESS_TOKEN }} | gh auth login --with-token
- name: create branch
run: |
git checkout -b release/${{ github.run_id }}
git push origin release/${{ github.run_id }}
- name: create pr
run: |
gh pr create --base master --head release/${{ github.run_id }} --title "release/${{ github.run_id }} -> master" --body "release pr"
112 changes: 112 additions & 0 deletions .github/workflows/part4/cicd-1.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,112 @@
name: cicd-1
on:
pull_request:
types: [opened, synchronize, closed]
branches: [dev]
paths:
- 'my-app/**'

jobs:
test:
if: github.event.action == 'opened' || github.event.action == 'synchronize'
runs-on: ubuntu-latest
steps:
- name: checkout the code
uses: actions/checkout@v4
- name: setup-node
uses: actions/setup-node@v3
with:
node-version: 18
- name: Cache Node.js modules
uses: actions/cache@v3
with:
path: ~/.npm
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
restore-keys: |
${{ runner.os }}-node-
- name: Install dependencies
run: |
cd my-app
npm ci
- name: npm build
run: |
cd my-app
npm run build

image-build:
if: github.event.pull_request.merged == true
runs-on: ubuntu-latest
permissions:
id-token: write
contents: read
steps:
- name: checkout the code
uses: actions/checkout@v4
- name: Configure AWS Credentials
id: credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: ${{ vars.AWS_REGION }}
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
- name: Login to Amazon ECR
id: login-ecr
uses: aws-actions/amazon-ecr-login@v2
with:
mask-password: 'true'
- name: docker build & push
run: |
docker build -f Dockerfile --tag ${{ secrets.REGISTRY }}/${{ vars.REPOSITORY }}:${{ github.sha }} .
docker push ${{ secrets.REGISTRY }}/${{ vars.REPOSITORY }}:${{ github.sha }}

deploy:
runs-on: ubuntu-latest
needs: [ image-build ]
permissions:
id-token: write
contents: read
steps:
- name: checkout the code
uses: actions/checkout@v4
- name: Configure AWS Credentials
id: credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: ${{ vars.AWS_REGION }}
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
- name: setup kubectl
uses: azure/setup-kubectl@v3
with:
version: latest
- name: setup helm
uses: azure/setup-helm@v3
with:
version: v3.11.1
- name: access kubernetes
run: |
aws eks update-kubeconfig --name ${{ vars.CLUSTER_NAME }}
- name: deploy
id: status
run: |
helm upgrade --install my-app kubernetes/my-app --create-namespace --namespace my-app-${{ vars.SUFFIX }} \
--set image.tag=${{ github.sha }} \
--set image.repository=${{ secrets.REGISTRY }}/${{ vars.REPOSITORY }}
- name: notify
if: always()
uses: slackapi/slack-github-action@v1.24.0
with:
payload: |
{
"text": "message",
"blocks": [
{
"type": "section",
"text": {
"type": "mrkdwn",
"text": "Environment : dev, Deploy Result : ${{ steps.status.outcome }}, Repository : ${{ github.repository }}."
}
}
]
}
env:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
5 changes: 4 additions & 1 deletion my-app/src/App.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,11 +15,14 @@ function App() {
target="_blank"
rel="noopener noreferrer"
>
Learn GithubAction 2
Learn GithubAction cicd1 test2
</a>
</header>
</div>
);
}

export default App;