feat: 프로젝트 v1.0 스테이징

.github/CODEOWNERS

@@ -0,0 +1,20 @@
+# 팀원 이름
+# 박시윤 @siiiirru
+# 한동연 @1dyn
+# 양정모 @kaiju782
+# 서예은 @michelle259
+# 조성민 @csm123455
+# 조성욱 @KingZuto
+
+# 특정 디렉토리 오너
+/backend/auth/ @1dyn
+/backend/config/ @KingZuto
+/backend/gateway/ @siiiirru
+/backend/recommend/ @michelle259
+/backend/review/ @csm123455
+/backend/schedule/ @kaiju782
+
+
+
+# 특정 파일 오너
+# /.github/workflows/deploy.yml @devops-lead

.github/workflows/backend-ci-cd.yaml

@@ -0,0 +1,167 @@
+name: Backend CI/CD
+
+on:
+  push:
+    branches:
+      - dev
+    paths:
+      - 'backend/**'
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  detect-changes:
+    runs-on: ubuntu-latest
+    outputs:
+      services: ${{ steps.detect.outputs.services }}
+      commit_hash: ${{ steps.hash.outputs.commit_hash }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Detect changed services
+        id: detect
+        run: |
+          git fetch origin dev
+          CHANGED=$(git diff --name-only ${{ github.event.before }} ${{ github.sha }} | grep '^backend/' | cut -d '/' -f2 | sort | uniq | jq -R -s -c 'split("\n") | map(select(. != ""))')
+          echo "services=$CHANGED" >> $GITHUB_OUTPUT
+
+      - name: Get short git commit hash
+        id: hash
+        run: echo "commit_hash=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+
+  build-and-push:
+    needs: detect-changes
+    runs-on: ubuntu-latest
+    if: ${{ fromJson(needs.detect-changes.outputs.services) != '[]' }}
+    strategy:
+      matrix:
+        service: ${{ fromJson(needs.detect-changes.outputs.services) }}
+      fail-fast: false
+    env:
+      IMAGE_TAG: ${{ needs.detect-changes.outputs.commit_hash }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: maven
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/mapzip-dev-GitHubActionsOIDCRole
+          role-session-name: GitHub_to_AWS_via_FederatedOIDC
+          aws-region: ap-northeast-2
+
+      - name: Login to Amazon ECR Private
+        id: login-ecr-private
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Build and push Docker image
+        id: build
+        env:
+          REGISTRY: ${{ steps.login-ecr-private.outputs.registry }}
+        run: |
+          SERVICE="${{ matrix.service }}"
+          echo "Building and pushing $SERVICE"
+
+          cd "./backend/$SERVICE" || exit 1
+          mvn -B package -DskipTests --file pom.xml
+          mv ./target/*.jar ./target/app.jar
+          cd - || exit 1
+
+          docker build -t "$REGISTRY/mapzip-dev-ecr-$SERVICE:$IMAGE_TAG" "./backend/$SERVICE"
+          docker push "$REGISTRY/mapzip-dev-ecr-$SERVICE:$IMAGE_TAG"
+
+      - name: Save successful service name
+        if: success()
+        run: |
+          mkdir -p success
+          echo "${{ matrix.service }}" > "success/${{ matrix.service }}.txt"
+
+      - name: Upload success list
+        if: success()
+        uses: actions/upload-artifact@v4
+        with:
+          name: successful-service-${{ matrix.service }}
+          path: success/${{ matrix.service }}.txt
+
+  update-argocd-yaml:
+    needs:
+      - detect-changes
+      - build-and-push
+    runs-on: ubuntu-latest
+    if: ${{ fromJson(needs.detect-changes.outputs.services) != '[]' }}
+    steps:
+      - name: Download all success artifacts
+        uses: actions/download-artifact@v4
+        with:
+          pattern: successful-service-*
+          path: ./services
+          merge-multiple: true
+
+      - name: Read success list
+        id: get-success
+        run: |
+          SUCCESS_SERVICES=""
+          if [ -d "./services" ]; then
+            for file in ./services/*.txt; do
+              if [ -f "$file" ]; then
+                SERVICE=$(basename "$file" .txt)
+                SUCCESS_SERVICES="$SUCCESS_SERVICES $SERVICE"
+              fi
+            done
+          fi
+          echo "success_services=$(echo $SUCCESS_SERVICES | xargs)" >> $GITHUB_OUTPUT
+
+      - name: Checkout Infra repo
+        uses: actions/checkout@v4
+        with:
+          repository: CLD3rd-Team4/Infra
+          ref: dev
+          token: ${{ secrets.INFRA_PAT }}
+          path: infra
+
+      - name: Update YAMLs with new image tags
+        env:
+          IMAGE_TAG: ${{ needs.detect-changes.outputs.commit_hash }}
+        run: |
+          INFRA_PATH="argocd"
+          git config --global user.name "github-actions"
+          git config --global user.email "github-actions@github.com"
+          cd infra
+
+          for SERVICE_NAME in ${{ steps.get-success.outputs.success_services }}; do
+            echo "Updating image tag for service: $SERVICE_NAME"
+
+            if [[ "$SERVICE_NAME" == "auth" || "$SERVICE_NAME" == "gateway" || "$SERVICE_NAME" == "config" ]]; then
+              SERVICE_DIR="$INFRA_PATH/platform"
+            else
+              SERVICE_DIR="$INFRA_PATH/service-$SERVICE_NAME"
+            fi
+
+            FILE_NAME="${SERVICE_NAME#service-}.yaml"
+            YAML_FILE="$SERVICE_DIR/$FILE_NAME"
+
+            if [ ! -f "$YAML_FILE" ]; then
+              echo "Warning: YAML file not found: $YAML_FILE"
+              continue
+            fi
+
+            sed -i -E "/containers:/,/(^[[:space:]]*[^-[:space:]]|^$)/ s|(image:[[:space:]]*[^[:space:]]+:)[^[:space:]]+|\1$IMAGE_TAG|" "$YAML_FILE"
+
+            git add "$YAML_FILE"
+            git commit -m "Update $SERVICE_NAME image tag to $IMAGE_TAG [ci skip]" || echo "No changes to commit for $SERVICE_NAME"
+          done
+
+          git push origin dev
+

.github/workflows/config-ci-cd.yaml

@@ -0,0 +1,124 @@
+name: Config CI/CD
+
+on:
+  push:
+    branches:
+      - dev
+    paths:
+      - 'config-repo/**'
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  detect-config-changes:
+    runs-on: ubuntu-latest
+    outputs:
+      services: ${{ steps.detect.outputs.services }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Detect changed config services
+        id: detect
+        run: |
+          git fetch origin dev
+
+          # Backend 변경사항도 확인 (중복 재시작 방지)
+          BACKEND_CHANGED=$(git diff --name-only ${{ github.event.before }} ${{ github.sha }} | grep '^backend/' | cut -d '/' -f2 | sort | uniq)
+
+          # config-repo/application.yml 변경 확인
+          APPLICATION_CHANGED=$(git diff --name-only ${{ github.event.before }} ${{ github.sha }} | grep '^config-repo/application\.yml$' | wc -l)
+
+          # config-repo/ 폴더에서 변경된 개별 설정 파일들 찾기
+          CONFIG_SERVICES=$(git diff --name-only ${{ github.event.before }} ${{ github.sha }} | grep '^config-repo/.*\.yml$' | grep -v '^config-repo/application\.yml$' | sed 's|config-repo/||g' | sed 's|\.yml||g' | sort | uniq)
+
+          # application.yml이 바뀌면 모든 서비스 재시작
+          if [ "$APPLICATION_CHANGED" -gt 0 ]; then
+            ALL_SERVICES="auth gateway schedule recommend review"
+          else
+            # 그렇지 않으면 변경된 서비스들만
+            ALL_SERVICES="$CONFIG_SERVICES"
+          fi
+
+          # Backend에서 변경된 서비스는 제외 (ArgoCD가 자동 재배포하므로)
+          FILTERED_SERVICES=""
+          for service in $ALL_SERVICES; do
+            if ! echo "$BACKEND_CHANGED" | grep -q "^$service$"; then
+              FILTERED_SERVICES="$FILTERED_SERVICES $service"
+            else
+              echo "⏭️ Skipping $service restart (backend changed - ArgoCD will handle deployment)"
+            fi
+          done
+
+          # JSON 배열로 변환
+          CHANGED=$(echo "$FILTERED_SERVICES" | tr ' ' '\n' | sort | uniq | jq -R -s -c 'split("\n") | map(select(. != ""))')
+          echo "services=$CHANGED" >> $GITHUB_OUTPUT
+          echo "🔄 Services to restart: $FILTERED_SERVICES"
+
+  restart-services:
+    needs: detect-config-changes
+    runs-on: ubuntu-latest
+    if: ${{ fromJson(needs.detect-config-changes.outputs.services) != '[]' }}
+    strategy:
+      matrix:
+        service: ${{ fromJson(needs.detect-config-changes.outputs.services) }}
+      fail-fast: false
+    steps:
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/mapzip-dev-GitHubActionsOIDCRole
+          role-session-name: GitHub_to_AWS_via_FederatedOIDC
+          aws-region: ap-northeast-2
+
+      - name: Install kubectl
+        run: |
+          curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+          chmod +x kubectl
+          sudo mv kubectl /usr/local/bin/
+
+      - name: Configure kubectl
+        run: |
+          aws eks update-kubeconfig --region ap-northeast-2 --name mapzip-dev-eks
+
+      - name: Restart ${{ matrix.service }} service
+        run: |
+          SERVICE="${{ matrix.service }}"
+          echo "🔄 Restarting $SERVICE service (config-only change)..."
+
+          # 서비스별 deployment 이름과 네임스페이스 매핑
+          case $SERVICE in
+            "auth")
+              DEPLOYMENT="auth-deployment"
+              NAMESPACE="service-platform"
+              ;;
+            "gateway")
+              DEPLOYMENT="spring-gateway-deployment"
+              NAMESPACE="service-platform"
+              ;;
+            "schedule")
+              DEPLOYMENT="schedule-deployment"
+              NAMESPACE="service-schedule"
+              ;;
+            "recommend")
+              DEPLOYMENT="recommend-deployment"
+              NAMESPACE="service-recommend"
+              ;;
+            "review")
+              DEPLOYMENT="review-deployment"
+              NAMESPACE="service-review"
+              ;;
+            *)
+              echo "❌ Unknown service: $SERVICE"
+              exit 1
+              ;;
+          esac
+
+          kubectl rollout restart deployment/$DEPLOYMENT -n $NAMESPACE
+          kubectl rollout status deployment/$DEPLOYMENT -n $NAMESPACE --timeout=300s
+
+          echo "✅ $SERVICE service restarted successfully in $NAMESPACE namespace"

.github/workflows/frontend-ci-cd.yaml

@@ -0,0 +1,77 @@
+name: frontend CI/CD
+
+on:
+  push:
+    branches:
+      - dev
+    paths:
+      - 'frontend/**'
+
+
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout source code
+        uses: actions/checkout@v3
+
+      - name: Setup Node  
+        uses: actions/setup-node@v3
+        with:
+          node-version: '18'
+          cache: 'npm'
+          cache-dependency-path: 'frontend/package-lock.json'
+
+      - name: Install dependencies
+        run: |
+          cd frontend
+          npm ci
+
+      - name: Build Next.js app
+        run: |
+          cd frontend
+          npm run build
+        env:
+          NEXT_PUBLIC_API_BASE_URL: ${{ secrets.NEXT_PUBLIC_API_BASE_URL }}
+          NEXT_PUBLIC_KAKAO_MAP_KEY: ${{ secrets.KAKAO_MAP_KEY }}
+
+
+      - name: Upload build artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-files
+          path: frontend/out/
+          include-hidden-files: true
+
+  cd:
+    needs: ci
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download build artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: build-files
+          path: out/
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/mapzip-dev-GitHubActionsOIDCRole
+          role-session-name: GitHub_to_AWS_via_FederatedOIDC 
+          aws-region: ap-northeast-2
+
+      - name: Upload to S3 using AWS CLI
+        run: |
+          aws s3 sync ./out s3://${{ secrets.S3_BUCKET_NAME }} --delete
+
+      - name: Invalidate CloudFront cache
+        run: |
+          aws cloudfront create-invalidation \
+            --distribution-id ${{ secrets.AWS_CLOUDFRONT_DISTRIBUTION_ID }} \
+            --paths "/*"