shared-dg05-unicorn/phonebill
1
0
Fork 0
mirror of https://github.com/cna-bootcamp/phonebill.git synced 2026-06-12 19:49:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Jenkins CI/CD 파이프라인 완전 구축 및 가이드 개선

Browse Source 
주요 작업:
- Kustomize 기반 환경별 배포 구조 완성 (dev/staging/prod)
- deployment-patch.yaml 개선: replicas + resources 통합 관리
- Strategic Merge Patch 형식으로 변경하여 가독성 및 유지보수성 향상
- 환경별 차등 리소스 할당 정책 적용
- Jenkins 파이프라인 스크립트 및 수동 배포 스크립트 완성
- 상세한 체크리스트 및 실수 방지 가이드 추가

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
hiondal
2025-09-12 12:09:54 +09:00
parent 892f30ba44
commit 042198deb0
63 changed files with 1156 additions and 1615 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployment/cicd/kustomize/base/api-gateway/cm-api-gateway.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: cm-api-gateway
namespace: phonebill-dev
data:
SERVER_PORT: "8080"
BILL_SERVICE_URL: "http://bill-service"
deployment/cicd/kustomize/base/api-gateway/deployment.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
namespace: phonebill-dev
spec:
replicas: 1
selector:
deployment/cicd/kustomize/base/api-gateway/kustomization.yaml
-7
View File
@@ -1,7 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cm-api-gateway.yaml
- deployment.yaml
- service.yaml
deployment/cicd/kustomize/base/api-gateway/service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: api-gateway
namespace: phonebill-dev
spec:
selector:
app: api-gateway
deployment/cicd/kustomize/base/bill-service/cm-bill-service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: cm-bill-service
namespace: phonebill-dev
data:
SERVER_PORT: "8082"
DB_KIND: "postgresql"
deployment/cicd/kustomize/base/bill-service/deployment.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
namespace: phonebill-dev
spec:
replicas: 1
selector:
deployment/cicd/kustomize/base/bill-service/kustomization.yaml
-8
View File
@@ -1,8 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cm-bill-service.yaml
- deployment.yaml
- secret-bill-service.yaml
- service.yaml
deployment/cicd/kustomize/base/bill-service/secret-bill-service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Secret
metadata:
name: secret-bill-service
namespace: phonebill-dev
type: Opaque
stringData:
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
deployment/cicd/kustomize/base/bill-service/service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: bill-service
namespace: phonebill-dev
spec:
selector:
app: bill-service
deployment/cicd/kustomize/base/common/cm-common.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: cm-common
namespace: phonebill-dev
data:
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "18000000"
deployment/cicd/kustomize/base/common/ingress.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: phonebill
namespace: phonebill-dev
annotations:
kubernetes.io/ingress.class: nginx
nginx.ingress.kubernetes.io/ssl-redirect: "false"
deployment/cicd/kustomize/base/common/kustomization.yaml
-8
View File
@@ -1,8 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cm-common.yaml
- ingress.yaml
- secret-common.yaml
- secret-imagepull.yaml
deployment/cicd/kustomize/base/common/secret-common.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Secret
metadata:
name: secret-common
namespace: phonebill-dev
type: Opaque
stringData:
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
deployment/cicd/kustomize/base/common/secret-imagepull.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Secret
metadata:
name: phonebill
namespace: phonebill-dev
type: kubernetes.io/dockerconfigjson
stringData:
.dockerconfigjson: |
deployment/cicd/kustomize/base/kos-mock/cm-kos-mock.yaml
+1
View File
@@ -2,5 +2,6 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: cm-kos-mock
namespace: phonebill-dev
data:
SERVER_PORT: "8084"
deployment/cicd/kustomize/base/kos-mock/deployment.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
namespace: phonebill-dev
spec:
replicas: 1
selector:
deployment/cicd/kustomize/base/kos-mock/kustomization.yaml
-7
View File
@@ -1,7 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cm-kos-mock.yaml
- deployment.yaml
- service.yaml
deployment/cicd/kustomize/base/kos-mock/service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: kos-mock
namespace: phonebill-dev
spec:
selector:
app: kos-mock
deployment/cicd/kustomize/base/kustomization.yaml
+52 -6
View File
@@ -1,10 +1,56 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
metadata:
name: phonebill-base
resources:
- common
- api-gateway
- user-service
- bill-service
- product-service
- kos-mock
# Common resources
- common/cm-common.yaml
- common/secret-common.yaml
- common/secret-imagepull.yaml
- common/ingress.yaml
# API Gateway
- api-gateway/deployment.yaml
- api-gateway/service.yaml
- api-gateway/cm-api-gateway.yaml
# User Service
- user-service/deployment.yaml
- user-service/service.yaml
- user-service/cm-user-service.yaml
- user-service/secret-user-service.yaml
# Bill Service
- bill-service/deployment.yaml
- bill-service/service.yaml
- bill-service/cm-bill-service.yaml
- bill-service/secret-bill-service.yaml
# Product Service
- product-service/deployment.yaml
- product-service/service.yaml
- product-service/cm-product-service.yaml
- product-service/secret-product-service.yaml
# KOS Mock
- kos-mock/deployment.yaml
- kos-mock/service.yaml
- kos-mock/cm-kos-mock.yaml
commonLabels:
app: phonebill
version: v1
images:
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
newTag: latest
deployment/cicd/kustomize/base/product-service/cm-product-service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: cm-product-service
namespace: phonebill-dev
data:
SERVER_PORT: "8083"
DB_KIND: "postgresql"
deployment/cicd/kustomize/base/product-service/deployment.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
namespace: phonebill-dev
spec:
replicas: 1
selector:
deployment/cicd/kustomize/base/product-service/kustomization.yaml
-8
View File
@@ -1,8 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cm-product-service.yaml
- deployment.yaml
- secret-product-service.yaml
- service.yaml
deployment/cicd/kustomize/base/product-service/secret-product-service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Secret
metadata:
name: secret-product-service
namespace: phonebill-dev
type: Opaque
stringData:
DB_HOST: "product-change-postgres-dev-postgresql"
deployment/cicd/kustomize/base/product-service/service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: product-service
namespace: phonebill-dev
spec:
selector:
app: product-service
deployment/cicd/kustomize/base/user-service/cm-user-service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: cm-user-service
namespace: phonebill-dev
data:
SERVER_PORT: "8081"
DB_KIND: "postgresql"
deployment/cicd/kustomize/base/user-service/deployment.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
namespace: phonebill-dev
spec:
replicas: 1
selector:
deployment/cicd/kustomize/base/user-service/kustomization.yaml
-8
View File
@@ -1,8 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cm-user-service.yaml
- deployment.yaml
- secret-user-service.yaml
- service.yaml
deployment/cicd/kustomize/base/user-service/secret-user-service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Secret
metadata:
name: secret-user-service
namespace: phonebill-dev
type: Opaque
stringData:
DB_HOST: "auth-postgres-dev-postgresql"
deployment/cicd/kustomize/base/user-service/service.yaml
+1
View File
@@ -2,6 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: user-service
namespace: phonebill-dev
spec:
selector:
app: user-service
deployment/cicd/kustomize/overlays/dev/configmap-common-patch.yaml
+4 -1
View File
@@ -4,5 +4,8 @@ metadata:
name: cm-common
data:
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "18000000" # 5시간
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
REDIS_PORT: "6379"
SPRING_PROFILES_ACTIVE: "dev"
DDL_AUTO: "update"
DDL_AUTO: "update"
deployment/cicd/kustomize/overlays/dev/deployment-patch.yaml
+89
View File
@@ -0,0 +1,89 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
spec:
replicas: 1
template:
spec:
containers:
- name: api-gateway
resources:
requests:
cpu: 256m
memory: 256Mi
limits:
cpu: 1024m
memory: 1024Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
spec:
replicas: 1
template:
spec:
containers:
- name: user-service
resources:
requests:
cpu: 256m
memory: 256Mi
limits:
cpu: 1024m
memory: 1024Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
spec:
replicas: 1
template:
spec:
containers:
- name: bill-service
resources:
requests:
cpu: 256m
memory: 256Mi
limits:
cpu: 1024m
memory: 1024Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
spec:
replicas: 1
template:
spec:
containers:
- name: product-service
resources:
requests:
cpu: 256m
memory: 256Mi
limits:
cpu: 1024m
memory: 1024Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
spec:
replicas: 1
template:
spec:
containers:
- name: kos-mock
resources:
requests:
cpu: 256m
memory: 256Mi
limits:
cpu: 1024m
memory: 1024Mi
deployment/cicd/kustomize/overlays/dev/ingress-patch.yaml
+39 -1
View File
@@ -6,5 +6,43 @@ metadata:
kubernetes.io/ingress.class: nginx
nginx.ingress.kubernetes.io/ssl-redirect: "false"
spec:
ingressClassName: nginx
rules:
- host: phonebill-api.20.214.196.128.nip.io
- host: phonebill-api.20.214.196.128.nip.io
http:
paths:
- path: /api/v1/auth
pathType: Prefix
backend:
service:
name: user-service
port:
number: 80
- path: /api/v1/users
pathType: Prefix
backend:
service:
name: user-service
port:
number: 80
- path: /api/v1/bills
pathType: Prefix
backend:
service:
name: bill-service
port:
number: 80
- path: /api/v1/products
pathType: Prefix
backend:
service:
name: product-service
port:
number: 80
- path: /api/v1/kos
pathType: Prefix
backend:
service:
name: kos-mock
port:
number: 80
deployment/cicd/kustomize/overlays/dev/kustomization.yaml
+25 -11
View File
@@ -4,16 +4,30 @@ kind: Kustomization
namespace: phonebill-dev
resources:
- ../../base
- ../../base
patchesStrategicMerge:
- configmap-common-patch.yaml
- deployment-patch.yaml
- ingress-patch.yaml
- secret-common-patch.yaml
- secret-user-service-patch.yaml
- secret-bill-service-patch.yaml
- secret-product-service-patch.yaml
images:
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
newTag: dev-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
newTag: dev-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
newTag: dev-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
newTag: dev-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
newTag: dev-latest
namePrefix: dev-
commonLabels:
env: dev
patchesStrategicMerge:
- configmap-common-patch.yaml
- secret-common-patch.yaml
- ingress-patch.yaml
- replica-patch.yaml
- secret-user-service-patch.yaml
- secret-bill-service-patch.yaml
- secret-product-service-patch.yaml
environment: dev
deployment/cicd/kustomize/overlays/dev/replica-patch.yaml
-35
View File
@@ -1,35 +0,0 @@
# Replica count patches for dev environment
apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
spec:
replicas: 1
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
spec:
replicas: 1
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
spec:
replicas: 1
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
spec:
replicas: 1
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
spec:
replicas: 1
deployment/cicd/kustomize/overlays/dev/secret-bill-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
DB_PASSWORD: "BillUser2025!"
DB_NAME: "bill_inquiry_db"
DB_USERNAME: "bill_inquiry_user"
DB_PASSWORD: "BillUser2025!"
deployment/cicd/kustomize/overlays/dev/secret-common-patch.yaml
+2 -1
View File
@@ -4,5 +4,6 @@ metadata:
name: secret-common
type: Opaque
stringData:
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
REDIS_HOST: "redis-cache-dev-master"
REDIS_PASSWORD: "Redis2025Dev!"
REDIS_PASSWORD: "Redis2025Dev!"
deployment/cicd/kustomize/overlays/dev/secret-product-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "product-change-postgres-dev-postgresql"
DB_PASSWORD: "ProductUser2025!"
DB_NAME: "product_change_db"
DB_USERNAME: "product_change_user"
DB_PASSWORD: "ProductUser2025!"
deployment/cicd/kustomize/overlays/dev/secret-user-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "auth-postgres-dev-postgresql"
DB_PASSWORD: "AuthUser2025!"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025!"
deployment/cicd/kustomize/overlays/prod/configmap-common-patch.yaml
+5 -2
View File
@@ -3,6 +3,9 @@ kind: ConfigMap
metadata:
name: cm-common
data:
CORS_ALLOWED_ORIGINS: "https://phonebill.example.com,https://phonebill-app.example.com"
CORS_ALLOWED_ORIGINS: "https://phonebill.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "3600000" # 1시간
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
REDIS_PORT: "6379"
SPRING_PROFILES_ACTIVE: "prod"
DDL_AUTO: "validate"
DDL_AUTO: "validate"
deployment/cicd/kustomize/overlays/prod/deployment-patch.yaml
+89
View File
@@ -0,0 +1,89 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
spec:
replicas: 3
template:
spec:
containers:
- name: api-gateway
resources:
requests:
cpu: 1024m
memory: 1024Mi
limits:
cpu: 4096m
memory: 4096Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
spec:
replicas: 3
template:
spec:
containers:
- name: user-service
resources:
requests:
cpu: 1024m
memory: 1024Mi
limits:
cpu: 4096m
memory: 4096Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
spec:
replicas: 3
template:
spec:
containers:
- name: bill-service
resources:
requests:
cpu: 1024m
memory: 1024Mi
limits:
cpu: 4096m
memory: 4096Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
spec:
replicas: 3
template:
spec:
containers:
- name: product-service
resources:
requests:
cpu: 1024m
memory: 1024Mi
limits:
cpu: 4096m
memory: 4096Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
spec:
replicas: 3
template:
spec:
containers:
- name: kos-mock
resources:
requests:
cpu: 1024m
memory: 1024Mi
limits:
cpu: 4096m
memory: 4096Mi
deployment/cicd/kustomize/overlays/prod/ingress-patch.yaml
+42 -2
View File
@@ -7,10 +7,50 @@ metadata:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
nginx.ingress.kubernetes.io/ssl-protocols: "TLSv1.2 TLSv1.3"
nginx.ingress.kubernetes.io/ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384"
spec:
ingressClassName: nginx
tls:
- hosts:
- phonebill-api.example.com
- phonebill.20.214.196.128.nip.io
secretName: phonebill-prod-tls
rules:
- host: phonebill-api.example.com
- host: phonebill.20.214.196.128.nip.io
http:
paths:
- path: /api/v1/auth
pathType: Prefix
backend:
service:
name: user-service
port:
number: 80
- path: /api/v1/users
pathType: Prefix
backend:
service:
name: user-service
port:
number: 80
- path: /api/v1/bills
pathType: Prefix
backend:
service:
name: bill-service
port:
number: 80
- path: /api/v1/products
pathType: Prefix
backend:
service:
name: product-service
port:
number: 80
- path: /api/v1/kos
pathType: Prefix
backend:
service:
name: kos-mock
port:
number: 80
deployment/cicd/kustomize/overlays/prod/kustomization.yaml
+25 -5
View File
@@ -4,10 +4,30 @@ kind: Kustomization
namespace: phonebill-prod
resources:
- ../../base
- ../../base
patchesStrategicMerge:
- configmap-common-patch.yaml
- deployment-patch.yaml
- ingress-patch.yaml
- secret-common-patch.yaml
- secret-user-service-patch.yaml
- secret-bill-service-patch.yaml
- secret-product-service-patch.yaml
images:
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
newTag: prod-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
newTag: prod-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
newTag: prod-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
newTag: prod-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
newTag: prod-latest
namePrefix: prod-
commonLabels:
env: prod
patchesStrategicMerge:
- env-patches.yaml
environment: prod
deployment/cicd/kustomize/overlays/prod/replica-patch.yaml
-35
View File
@@ -1,35 +0,0 @@
# Replica count patches for production environment
apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
spec:
replicas: 3
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
spec:
replicas: 3
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
spec:
replicas: 3
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
spec:
replicas: 3
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
spec:
replicas: 2
deployment/cicd/kustomize/overlays/prod/secret-bill-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "bill-inquiry-postgres-prod-postgresql"
DB_PASSWORD: "BillUserProd$ecure2025!"
DB_NAME: "bill_inquiry_db"
DB_USERNAME: "bill_inquiry_user"
DB_PASSWORD: "BillUser2025Prod!"
deployment/cicd/kustomize/overlays/prod/secret-common-patch.yaml
+2 -1
View File
@@ -4,5 +4,6 @@ metadata:
name: secret-common
type: Opaque
stringData:
JWT_SECRET: "prod7Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/prod"
REDIS_HOST: "redis-cache-prod-master"
REDIS_PASSWORD: "Redis2025Prod$ecure!"
REDIS_PASSWORD: "Redis2025Prod!"
deployment/cicd/kustomize/overlays/prod/secret-product-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "product-change-postgres-prod-postgresql"
DB_PASSWORD: "ProductUserProd$ecure2025!"
DB_NAME: "product_change_db"
DB_USERNAME: "product_change_user"
DB_PASSWORD: "ProductUser2025Prod!"
deployment/cicd/kustomize/overlays/prod/secret-user-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "auth-postgres-prod-postgresql"
DB_PASSWORD: "AuthUserProd$ecure2025!"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025Prod!"
deployment/cicd/kustomize/overlays/staging/configmap-common-patch.yaml
+5 -2
View File
@@ -3,6 +3,9 @@ kind: ConfigMap
metadata:
name: cm-common
data:
CORS_ALLOWED_ORIGINS: "https://phonebill-staging.example.com,https://phonebill.staging.example.com"
CORS_ALLOWED_ORIGINS: "https://phonebill-staging.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "18000000" # 5시간
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
REDIS_PORT: "6379"
SPRING_PROFILES_ACTIVE: "staging"
DDL_AUTO: "validate"
DDL_AUTO: "validate"
deployment/cicd/kustomize/overlays/staging/deployment-patch.yaml
+89
View File
@@ -0,0 +1,89 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
spec:
replicas: 2
template:
spec:
containers:
- name: api-gateway
resources:
requests:
cpu: 512m
memory: 512Mi
limits:
cpu: 2048m
memory: 2048Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
spec:
replicas: 2
template:
spec:
containers:
- name: user-service
resources:
requests:
cpu: 512m
memory: 512Mi
limits:
cpu: 2048m
memory: 2048Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
spec:
replicas: 2
template:
spec:
containers:
- name: bill-service
resources:
requests:
cpu: 512m
memory: 512Mi
limits:
cpu: 2048m
memory: 2048Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
spec:
replicas: 2
template:
spec:
containers:
- name: product-service
resources:
requests:
cpu: 512m
memory: 512Mi
limits:
cpu: 2048m
memory: 2048Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
spec:
replicas: 2
template:
spec:
containers:
- name: kos-mock
resources:
requests:
cpu: 512m
memory: 512Mi
limits:
cpu: 2048m
memory: 2048Mi
deployment/cicd/kustomize/overlays/staging/ingress-patch.yaml
+40 -2
View File
@@ -7,9 +7,47 @@ metadata:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
spec:
ingressClassName: nginx
tls:
- hosts:
- phonebill-api-staging.example.com
- phonebill-staging.20.214.196.128.nip.io
secretName: phonebill-staging-tls
rules:
- host: phonebill-api-staging.example.com
- host: phonebill-staging.20.214.196.128.nip.io
http:
paths:
- path: /api/v1/auth
pathType: Prefix
backend:
service:
name: user-service
port:
number: 80
- path: /api/v1/users
pathType: Prefix
backend:
service:
name: user-service
port:
number: 80
- path: /api/v1/bills
pathType: Prefix
backend:
service:
name: bill-service
port:
number: 80
- path: /api/v1/products
pathType: Prefix
backend:
service:
name: product-service
port:
number: 80
- path: /api/v1/kos
pathType: Prefix
backend:
service:
name: kos-mock
port:
number: 80
deployment/cicd/kustomize/overlays/staging/kustomization.yaml
+25 -11
View File
@@ -4,16 +4,30 @@ kind: Kustomization
namespace: phonebill-staging
resources:
- ../../base
- ../../base
patchesStrategicMerge:
- configmap-common-patch.yaml
- deployment-patch.yaml
- ingress-patch.yaml
- secret-common-patch.yaml
- secret-user-service-patch.yaml
- secret-bill-service-patch.yaml
- secret-product-service-patch.yaml
images:
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
newTag: staging-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
newTag: staging-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
newTag: staging-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
newTag: staging-latest
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
newTag: staging-latest
namePrefix: staging-
commonLabels:
env: staging
patchesStrategicMerge:
- configmap-common-patch.yaml
- secret-common-patch.yaml
- ingress-patch.yaml
- replica-patch.yaml
- secret-user-service-patch.yaml
- secret-bill-service-patch.yaml
- secret-product-service-patch.yaml
environment: staging
deployment/cicd/kustomize/overlays/staging/replica-patch.yaml
-35
View File
@@ -1,35 +0,0 @@
# Replica count patches for staging environment
apiVersion: apps/v1
kind: Deployment
metadata:
name: api-gateway
spec:
replicas: 2
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
spec:
replicas: 2
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: bill-service
spec:
replicas: 2
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: product-service
spec:
replicas: 2
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kos-mock
spec:
replicas: 1
deployment/cicd/kustomize/overlays/staging/secret-bill-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "bill-inquiry-postgres-staging-postgresql"
DB_PASSWORD: "BillUserStaging2025!"
DB_NAME: "bill_inquiry_db"
DB_USERNAME: "bill_inquiry_user"
DB_PASSWORD: "BillUser2025Staging!"
deployment/cicd/kustomize/overlays/staging/secret-common-patch.yaml
+2 -1
View File
@@ -4,5 +4,6 @@ metadata:
name: secret-common
type: Opaque
stringData:
JWT_SECRET: "staging5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/staging"
REDIS_HOST: "redis-cache-staging-master"
REDIS_PASSWORD: "Redis2025Staging!"
REDIS_PASSWORD: "Redis2025Staging!"
deployment/cicd/kustomize/overlays/staging/secret-product-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "product-change-postgres-staging-postgresql"
DB_PASSWORD: "ProductUserStaging2025!"
DB_NAME: "product_change_db"
DB_USERNAME: "product_change_user"
DB_PASSWORD: "ProductUser2025Staging!"
deployment/cicd/kustomize/overlays/staging/secret-user-service-patch.yaml
+3 -1
View File
@@ -5,4 +5,6 @@ metadata:
type: Opaque
stringData:
DB_HOST: "auth-postgres-staging-postgresql"
DB_PASSWORD: "AuthUserStaging2025!"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025Staging!"