Runnect-Spring-Boot-Server/.github/workflows/ec2-reboot.yml at e451281330de5a27e81f28770c50cedebb5e7136 · Runnect/Runnect-Spring-Boot-Server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
name: EC2-DIAGNOSTIC

on:
  workflow_dispatch:

jobs:
  diagnose:
    name: Diagnose EC2 Instance
    runs-on: ubuntu-latest

    steps:
    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_PROD_ACCESS_KEY }}
        aws-secret-access-key: ${{ secrets.AWS_PROD_SECRET_KEY }}
        aws-region: ap-northeast-2

    - name: Check IAM identity and permissions
      run: |
        echo "=== IAM 정보 ==="
        aws sts get-caller-identity 2>&1 || true

        echo ""
        echo "=== IAM 정책 확인 ==="
        ACCOUNT=$(aws sts get-caller-identity --query Account --output text 2>/dev/null)
        USER_NAME=$(aws sts get-caller-identity --query Arn --output text 2>/dev/null | awk -F'/' '{print $NF}')
        echo "Account: $ACCOUNT"
        echo "User: $USER_NAME"

        echo ""
        echo "=== Attached Policies ==="
        aws iam list-attached-user-policies --user-name "$USER_NAME" 2>&1 || echo "IAM 정책 조회 권한 없음"

        echo ""
        echo "=== Inline Policies ==="
        aws iam list-user-policies --user-name "$USER_NAME" 2>&1 || echo "IAM 인라인 정책 조회 권한 없음"

    - name: CodeDeploy deployment group info
      run: |
        echo "=== 배포 그룹 상세 ==="
        aws deploy get-deployment-group \
          --application-name runnect-prod-codedeploy \
          --deployment-group-name runnect-prod-codedeploy-group \
          --output json 2>&1 || echo "배포 그룹 조회 실패"

    - name: Latest deployment details
      run: |
        echo "=== 최근 배포 목록 ==="
        LATEST=$(aws deploy list-deployments \
          --application-name runnect-prod-codedeploy \
          --deployment-group-name runnect-prod-codedeploy-group \
          --query "deployments[0]" \
          --output text 2>/dev/null)
        echo "Latest deployment: $LATEST"

        if [ -n "$LATEST" ] && [ "$LATEST" != "None" ]; then
          echo ""
          echo "=== 배포 상세 ==="
          aws deploy get-deployment --deployment-id "$LATEST" --output json 2>&1

          echo ""
          echo "=== 배포 인스턴스 목록 ==="
          aws deploy list-deployment-instances --deployment-id "$LATEST" --output json 2>&1 || echo "인스턴스 목록 조회 실패"

          echo ""
          echo "=== 배포 타겟 상세 ==="
          INSTANCE_IDS=$(aws deploy list-deployment-instances --deployment-id "$LATEST" --query "instancesList" --output text 2>/dev/null)
          for INST in $INSTANCE_IDS; do
            echo "--- Instance: $INST ---"
            aws deploy get-deployment-instance --deployment-id "$LATEST" --instance-id "$INST" --output json 2>&1 || echo "조회 실패"
          done
        fi

    - name: Check SSM access
      run: |
        echo "=== SSM 인스턴스 목록 ==="
        aws ssm describe-instance-information --output json 2>&1 || echo "SSM 권한 없음"

    - name: Try EC2 describe (may fail)
      run: |
        echo "=== EC2 인스턴스 조회 시도 ==="
        aws ec2 describe-instances --output json 2>&1 || echo "EC2 권한 없음"

        echo ""
        echo "=== Elastic IP 조회 시도 ==="
        aws ec2 describe-addresses --public-ips 3.35.195.11 2>&1 || echo "Elastic IP 조회 실패"

        echo ""
        echo "=== 보안 그룹 조회 시도 ==="
        aws ec2 describe-security-groups 2>&1 || echo "보안 그룹 조회 실패"

    - name: Check S3 bucket
      run: |
        echo "=== S3 버킷 확인 ==="
        aws s3 ls s3://runnect-prod-bucket/ 2>&1 || echo "S3 접근 실패"