name: Build Maven Artifact, Push Docker Image to ECR, and Deploy to EC2

on:

push:

branches:

- master # Run only when code is pushed to master branch

jobs:

build:

runs-on: self-hosted

steps:

# 1. Checkout repo

- name: Checkout repository

uses: actions/checkout@v3

# 2. Set up Java (for Maven)

- name: Set up JDK 17

uses: actions/setup-java@v3

with:

distribution: 'temurin'

java-version: '17'

# 3. Build artifact with Maven (WAR or JAR)

- name: Build with Maven

run: mvn clean package -DskipTests

# 4. Find and rename artifact (supports both .jar and .war)

- name: Rename artifact

run: |

echo "Listing target/ folder..."

ls -lh target/

ARTIFACT_FILE=$(ls target/*.jar 2>/dev/null | grep -v 'original' | head -n 1 || true)

if [ -z "$ARTIFACT_FILE" ]; then

ARTIFACT_FILE=$(ls target/*.war | head -n 1)

fi

echo "Found artifact: $ARTIFACT_FILE"

if [ -z "$ARTIFACT_FILE" ]; then

echo "❌ No jar/war file found. Failing build."

exit 1

fi

cp "$ARTIFACT_FILE" target/app.jar

ls -lh target/

# 5. Configure AWS credentials

- name: Configure AWS credentials

uses: aws-actions/configure-aws-credentials@v2

with:

aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}

aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

aws-region: ${{ secrets.AWS_REGION }}

# 6. Login to Amazon ECR

- name: Login to Amazon ECR

id: login-ecr

uses: aws-actions/amazon-ecr-login@v1

# 7. Build, Tag, and Push Docker image

- name: Build, Tag, and Push image to ECR

env:

ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}

ECR_REPOSITORY: ${{ secrets.ECR_REPOSITORY }}

IMAGE_TAG: ${{ github.sha }}

run: |

echo "Building Docker image with artifact..."

docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .

echo "Pushing image to ECR..."

docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG

# 8. Show image URI

- name: Image URI

run: echo "${{ steps.login-ecr.outputs.registry }}/${{ secrets.ECR_REPOSITORY }}:${{ github.sha }}"