Preview 환경에서 공유 DB를 안전하게 쓰는 법 — PR별 스키마 격리와 시드 데이터 자동화

# .github/workflows/preview-schema.yml
name: Schema Isolation
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  setup:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
 
      - name: Install Dependencies
        run: pnpm install
 
      - name: Create Schema & Migrate
        run: |
          SCHEMA_NAME="pr_${{ github.event.number }}"
 
          # 스키마 생성
          psql "$DATABASE_URL" -c "CREATE SCHEMA IF NOT EXISTS ${SCHEMA_NAME};"
 
          # 스키마가 지정된 DATABASE_URL로 마이그레이션 및 시드 실행
          DATABASE_URL="${DATABASE_URL}?schema=${SCHEMA_NAME}" \
            npx prisma migrate deploy
 
          DATABASE_URL="${DATABASE_URL}?schema=${SCHEMA_NAME}" \
            npx prisma db seed
        env:
          DATABASE_URL: ${{ secrets.SHARED_DATABASE_URL }}

# .github/workflows/preview-schema-cleanup.yml
name: Cleanup Preview Schema
on:
  pull_request:
    types: [closed]
 
jobs:
  cleanup:
    runs-on: ubuntu-latest
    steps:
      - name: Drop Schema
        run: |
          SCHEMA_NAME="pr_${{ github.event.number }}"
          psql "$DATABASE_URL" -c "DROP SCHEMA IF EXISTS ${SCHEMA_NAME} CASCADE;"
        env:
          DATABASE_URL: ${{ secrets.SHARED_DATABASE_URL }}

# .github/workflows/preview-db.yml
name: Preview Database Branch
on:
  pull_request:
    types: [opened, synchronize, reopened]
 
jobs:
  setup-db:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
 
      - name: Install Dependencies
        run: pnpm install
 
      - uses: neondatabase/create-branch-action@v5
        id: create-branch
        with:
          project_id: ${{ secrets.NEON_PROJECT_ID }}
          branch_name: preview/pr-${{ github.event.number }}
          api_key: ${{ secrets.NEON_API_KEY }}
          parent: main
 
      - name: Run Migrations
        run: npx prisma migrate deploy
        env:
          DATABASE_URL: ${{ steps.create-branch.outputs.db_url }}
 
      - name: Seed Data
        run: npx prisma db seed
        env:
          DATABASE_URL: ${{ steps.create-branch.outputs.db_url }}

# .github/workflows/preview-cleanup.yml
name: Cleanup Preview Branch
on:
  pull_request:
    types: [closed]
 
jobs:
  cleanup:
    runs-on: ubuntu-latest
    steps:
      - uses: neondatabase/delete-branch-action@v3
        with:
          project_id: ${{ secrets.NEON_PROJECT_ID }}
          branch: preview/pr-${{ github.event.number }}
          api_key: ${{ secrets.NEON_API_KEY }}

# .github/workflows/preview-dblab.yml
name: Preview with DBLab Clone
on:
  pull_request:
    types: [opened, synchronize, reopened]
 
jobs:
  setup-db:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Create Thin Clone
        id: clone
        run: |
          RESPONSE=$(curl -s -X POST "$DBLAB_API_URL/clone" \
            -H "Authorization: Bearer $DBLAB_TOKEN" \
            -H "Content-Type: application/json" \
            -d '{
              "id": "pr-${{ github.event.number }}",
              "protected": false,
              "db": {
                "username": "preview_user",
                "password": "'"$CLONE_PASSWORD"'"
              }
            }')
          echo "db_url=$(echo $RESPONSE | jq -r '.db.connStr')" >> $GITHUB_OUTPUT
        env:
          DBLAB_API_URL: ${{ secrets.DBLAB_API_URL }}
          DBLAB_TOKEN: ${{ secrets.DBLAB_TOKEN }}
          CLONE_PASSWORD: ${{ secrets.CLONE_PASSWORD }}
 
      - name: Run Migrations
        run: npx prisma migrate deploy
        env:
          DATABASE_URL: ${{ steps.clone.outputs.db_url }}
 
      - name: Seed Data
        run: npx prisma db seed
        env:
          DATABASE_URL: ${{ steps.clone.outputs.db_url }}

# .github/workflows/preview-dblab-cleanup.yml
name: Cleanup DBLab Clone
on:
  pull_request:
    types: [closed]
 
jobs:
  cleanup:
    runs-on: ubuntu-latest
    steps:
      - name: Delete Clone
        run: |
          curl -s -X DELETE "$DBLAB_API_URL/clone/pr-${{ github.event.number }}" \
            -H "Authorization: Bearer $DBLAB_TOKEN"
        env:
          DBLAB_API_URL: ${{ secrets.DBLAB_API_URL }}
          DBLAB_TOKEN: ${{ secrets.DBLAB_TOKEN }}

// prisma/seed.ts
import { PrismaClient } from '@prisma/client';
 
const prisma = new PrismaClient();
 
async function main() {
  const adminUser = await prisma.user.upsert({
    where: { email: 'admin@example.com' },
    update: {},
    create: {
      email: 'admin@example.com',
      name: 'Test Admin',
      role: 'ADMIN',
    },
  });
 
  const existingOrg = await prisma.organization.findUnique({
    where: { slug: 'test-org' },
  });
 
  if (!existingOrg) {
    await prisma.organization.create({
      data: {
        name: 'Test Organization',
        slug: 'test-org',
        members: { connect: { id: adminUser.id } },
      },
    });
  }
 
  console.log('Seed completed successfully');
}
 
main()
  .catch((e) => {
    console.error(e);
    process.exit(1);
  })
  .finally(() => prisma.$disconnect());

{
  "prisma": {
    "seed": "tsx prisma/seed.ts"
  },
  "devDependencies": {
    "tsx": "^4.0.0"
  }
}