user-service SecurityConfig 수정: Actuator endpoints ADMIN 권한 요구 설정 제거하여 Kubernetes probe 체크 정상화

This commit is contained in:
hiondal
2025-09-11 11:15:41 +09:00
parent 3e51992bc4
commit 744f33875c
26 changed files with 861 additions and 12 deletions
@@ -0,0 +1,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: cm-user-service
namespace: phonebill-dev
data:
SERVER_PORT: "8081"
DB_KIND: "postgresql"
DB_PORT: "5432"
DDL_AUTO: "update"
REDIS_DATABASE: "0"
SHOW_SQL: "true"
@@ -0,0 +1,60 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: user-service
namespace: phonebill-dev
spec:
replicas: 1
selector:
matchLabels:
app: user-service
template:
metadata:
labels:
app: user-service
spec:
imagePullSecrets:
- name: phonebill
containers:
- name: user-service
image: acrdigitalgarage01.azurecr.io/phonebill/user-service:latest
imagePullPolicy: Always
ports:
- containerPort: 8081
envFrom:
- configMapRef:
name: cm-common
- configMapRef:
name: cm-user-service
- secretRef:
name: secret-common
- secretRef:
name: secret-user-service
resources:
requests:
cpu: 256m
memory: 256Mi
limits:
cpu: 1024m
memory: 1024Mi
startupProbe:
httpGet:
path: /actuator/health
port: 8081
initialDelaySeconds: 30
periodSeconds: 10
failureThreshold: 6
readinessProbe:
httpGet:
path: /actuator/health/readiness
port: 8081
initialDelaySeconds: 10
periodSeconds: 5
failureThreshold: 3
livenessProbe:
httpGet:
path: /actuator/health/liveness
port: 8081
initialDelaySeconds: 30
periodSeconds: 10
failureThreshold: 3
@@ -0,0 +1,11 @@
apiVersion: v1
kind: Secret
metadata:
name: secret-user-service
namespace: phonebill-dev
type: Opaque
stringData:
DB_HOST: "auth-postgres-dev-postgresql"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025!"
+12
View File
@@ -0,0 +1,12 @@
apiVersion: v1
kind: Service
metadata:
name: user-service
namespace: phonebill-dev
spec:
selector:
app: user-service
ports:
- port: 80
targetPort: 8081
type: ClusterIP