|
90 | 90 | mkdir -p "${{ env.BACKEND_DIR }}" |
91 | 91 | printf "%s" "${DOT_ENV}" > "${{ env.BACKEND_DIR }}/.env" |
92 | 92 |
|
93 | | - # GA4 서비스 계정 파일 생성 |
94 | | - - name: Create GA4 Service Account Key |
95 | | - run: | |
96 | | - mkdir -p src/main/resources |
97 | | - echo "${{ secrets.GA4_JSON }}" > src/main/resources/ga4-service-account.json |
98 | | -
|
99 | 93 | - name: Docker Buildx 설치 |
100 | 94 | uses: docker/setup-buildx-action@v3 |
101 | 95 |
|
@@ -151,6 +145,18 @@ jobs: |
151 | 145 | [[ -n "${INSTANCE_ID}" && "${INSTANCE_ID}" != "None" ]] || { echo "No running instance found"; exit 1; } |
152 | 146 | echo "INSTANCE_ID=${INSTANCE_ID}" >> "${GITHUB_ENV}" |
153 | 147 |
|
| 148 | + # 3) GA4 JSON을 EC2에 복사 |
| 149 | + - name: Copy GA4 JSON to EC2 |
| 150 | + run: | |
| 151 | + echo "${{ secrets.GA4_JSON }}" > ga4-service-account.json |
| 152 | + aws ssm send-command \ |
| 153 | + --document-name "AWS-RunShellScript" \ |
| 154 | + --targets "Key=instanceIds,Values=${{ env.INSTANCE_ID }}" \ |
| 155 | + --parameters 'commands=["mkdir -p /home/ec2-user/secrets", "echo \"$GA4_JSON\" > /home/ec2-user/secrets/ga4-service-account.json"]' \ |
| 156 | + --region ${{ secrets.AWS_REGION }} |
| 157 | + env: |
| 158 | + GA4_JSON: ${{ secrets.GA4_JSON }} |
| 159 | + |
154 | 160 | # 원격(SSM)으로 Blue/Green 스위치 수행 |
155 | 161 | - name: AWS SSM Send-Command |
156 | 162 | uses: peterkimzz/aws-ssm-send-command@master |
@@ -243,6 +249,7 @@ jobs: |
243 | 249 | --restart unless-stopped \ |
244 | 250 | --network "${NET}" \ |
245 | 251 | -e TZ=Asia/Seoul \ |
| 252 | + -v /home/ec2-user/secrets/ga4-service-account.json:/app/secrets/ga4-service-account.json:ro \ |
246 | 253 | "${IMAGE}" |
247 | 254 |
|
248 | 255 | # --------------------------------------------------------- |
|
0 commit comments