배포테스트 6차

Author: nerdboi123

.github/workflows/deploy-purchase-to-ecs.yml

@@ -22,7 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # 사전 점검
+      # --- 사전 진단 ---
       - name: Assert AWS_ROLE_TO_ASSUME is set
         run: |
           test -n "${{ secrets.AWS_ROLE_TO_ASSUME }}" || { echo "Missing secret: AWS_ROLE_TO_ASSUME"; exit 1; }
@@ -35,7 +35,7 @@ jobs:
           fi
           echo "OIDC token endpoint detected"
 
-      # OIDC로 AWS 자격 구성
+      # --- OIDC로 AWS 자격 구성 ---
       - name: Configure AWS credentials (OIDC)
         uses: aws-actions/configure-aws-credentials@v4
         with:
@@ -48,10 +48,15 @@ jobs:
           acct=$(aws sts get-caller-identity --query Account --output text)
           [ "$acct" = "782683897698" ] || { echo "Assumed wrong account: $acct" && exit 1; }
 
-      # ECR 로그인 + 빌드/푸시
-      - id: login-ecr
+      # --- ECR 로그인 & 빌드/푸시 ---
+      - name: Login to Amazon ECR
+        id: login-ecr
         uses: aws-actions/amazon-ecr-login@v2
 
+      - name: Assert ECR registry output
+        run: |
+          test -n "${{ steps.login-ecr.outputs.registry }}" || { echo "ECR registry output is empty. Check login-ecr step id."; exit 1; }
+
       - uses: docker/setup-buildx-action@v3
 
       - name: Build & Push to ECR
@@ -61,10 +66,13 @@ jobs:
           platforms: linux/amd64
           push: true
           tags: |
-            ${{ steps.ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}
-            ${{ steps.ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}:latest
+            ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}
+            ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}:latest
+          labels: |
+            org.opencontainers.image.revision=${{ github.sha }}
+            org.opencontainers.image.source=${{ github.repository }}
 
-      # 태스크 정의 렌더 & 배포
+      # --- ECS 태스크 정의 렌더 & 배포 ---
       - name: Set image output
         id: image
         run: |
@@ -85,4 +93,3 @@ jobs:
           service: ${{ env.ECS_SERVICE }}
           cluster: ${{ env.ECS_CLUSTER }}
           wait-for-service-stability: true
-