shared-dg05-unicorn/phonebill
1
0
Fork 0
mirror of https://github.com/cna-bootcamp/phonebill.git synced 2026-06-12 19:49:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Jenkins CI/CD 파이프라인 완전 구축 및 가이드 개선

Browse Source 
- Kustomize 기반 환경별 매니페스트 구조 생성
  - Base: 공통 리소스 및 네임스페이스 설정
  - Overlays: dev/staging/prod 환경별 설정
  - Patch: 환경별 replicas, resources, 도메인 설정

- Jenkins 파이프라인 구축
  - 완전한 Jenkinsfile 작성 (빌드, 테스트, 배포)
  - SonarQube 품질 분석 및 Quality Gate 적용
  - ACR 이미지 빌드 및 푸시 자동화
  - AKS 배포 자동화

- 환경별 설정 관리
  - dev: 1 replica, 기본 리소스, HTTP
  - staging: 2 replicas, 중간 리소스, HTTPS
  - prod: 3 replicas, 고사양 리소스, HTTPS, 보안 강화

- 배포 자동화 도구
  - 수동 배포 스크립트 작성 및 실행 권한 설정
  - 롤백 방법 및 트러블슈팅 가이드 포함

- 완전한 구축 가이드 문서 작성
  - Jenkins 환경 설정 방법
  - Credentials 등록 방법
  - Pipeline Job 생성 방법
  - 배포 실행 및 모니터링 방법
  - 체크리스트 및 트러블슈팅 가이드

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
hiondal
2025-09-12 13:23:13 +09:00
parent 042198deb0
commit c7e5a86de8
29 changed files with 382 additions and 484 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployment/cicd/kustomize/base/kustomization.yaml
+5 -2
View File
@@ -5,6 +5,9 @@ metadata:
name: phonebill-base
resources:
# Namespace
- namespace.yaml
# Common resources
- common/cm-common.yaml
- common/secret-common.yaml
@@ -28,7 +31,7 @@ resources:
- bill-service/cm-bill-service.yaml
- bill-service/secret-bill-service.yaml
# Product Service
# Product Service
- product-service/deployment.yaml
- product-service/service.yaml
- product-service/cm-product-service.yaml
@@ -47,7 +50,7 @@ images:
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
newTag: latest
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
newTag: latest
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
deployment/cicd/kustomize/base/namespace.yaml
+6
View File
@@ -0,0 +1,6 @@
apiVersion: v1
kind: Namespace
metadata:
name: phonebill
labels:
name: phonebill
deployment/cicd/kustomize/overlays/dev/configmap-common-patch.yaml
+2 -2
View File
@@ -4,8 +4,8 @@ metadata:
name: cm-common
data:
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "18000000" # 5시간
JWT_ACCESS_TOKEN_VALIDITY: "18000000"
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
REDIS_PORT: "6379"
SPRING_PROFILES_ACTIVE: "dev"
DDL_AUTO: "update"
DDL_AUTO: "update"
deployment/cicd/kustomize/overlays/dev/deployment-patch.yaml
+20 -20
View File
@@ -10,11 +10,11 @@ spec:
- name: api-gateway
resources:
requests:
cpu: 256m
memory: 256Mi
memory: "256Mi"
cpu: "256m"
limits:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
---
apiVersion: apps/v1
kind: Deployment
@@ -28,11 +28,11 @@ spec:
- name: user-service
resources:
requests:
cpu: 256m
memory: 256Mi
memory: "256Mi"
cpu: "256m"
limits:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
---
apiVersion: apps/v1
kind: Deployment
@@ -46,11 +46,11 @@ spec:
- name: bill-service
resources:
requests:
cpu: 256m
memory: 256Mi
memory: "256Mi"
cpu: "256m"
limits:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
---
apiVersion: apps/v1
kind: Deployment
@@ -64,11 +64,11 @@ spec:
- name: product-service
resources:
requests:
cpu: 256m
memory: 256Mi
memory: "256Mi"
cpu: "256m"
limits:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
---
apiVersion: apps/v1
kind: Deployment
@@ -82,8 +82,8 @@ spec:
- name: kos-mock
resources:
requests:
cpu: 256m
memory: 256Mi
memory: "256Mi"
cpu: "256m"
limits:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
deployment/cicd/kustomize/overlays/dev/ingress-patch.yaml
+1 -1
View File
@@ -45,4 +45,4 @@ spec:
service:
name: kos-mock
port:
number: 80
number: 80
deployment/cicd/kustomize/overlays/dev/secret-bill-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
DB_NAME: "bill_inquiry_db"
DB_USERNAME: "bill_inquiry_user"
DB_PASSWORD: "BillUser2025!"
DB_PASSWORD: "BillUser2025!"
deployment/cicd/kustomize/overlays/dev/secret-common-patch.yaml
+1 -1
View File
@@ -6,4 +6,4 @@ type: Opaque
stringData:
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
REDIS_HOST: "redis-cache-dev-master"
REDIS_PASSWORD: "Redis2025Dev!"
REDIS_PASSWORD: "Redis2025Dev!"
deployment/cicd/kustomize/overlays/dev/secret-product-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "product-change-postgres-dev-postgresql"
DB_NAME: "product_change_db"
DB_USERNAME: "product_change_user"
DB_PASSWORD: "ProductUser2025!"
DB_PASSWORD: "ProductUser2025!"
deployment/cicd/kustomize/overlays/dev/secret-user-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "auth-postgres-dev-postgresql"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025!"
DB_PASSWORD: "AuthUser2025!"
deployment/cicd/kustomize/overlays/prod/configmap-common-patch.yaml
+4 -4
View File
@@ -3,9 +3,9 @@ kind: ConfigMap
metadata:
name: cm-common
data:
CORS_ALLOWED_ORIGINS: "https://phonebill.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "3600000" # 1시간
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
CORS_ALLOWED_ORIGINS: "https://phonebill-prod.example.com"
JWT_ACCESS_TOKEN_VALIDITY: "3600000"
JWT_REFRESH_TOKEN_VALIDITY: "43200000"
REDIS_PORT: "6379"
SPRING_PROFILES_ACTIVE: "prod"
DDL_AUTO: "validate"
DDL_AUTO: "validate"
deployment/cicd/kustomize/overlays/prod/deployment-patch.yaml
+20 -20
View File
@@ -10,11 +10,11 @@ spec:
- name: api-gateway
resources:
requests:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
limits:
cpu: 4096m
memory: 4096Mi
memory: "4096Mi"
cpu: "4096m"
---
apiVersion: apps/v1
kind: Deployment
@@ -28,11 +28,11 @@ spec:
- name: user-service
resources:
requests:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
limits:
cpu: 4096m
memory: 4096Mi
memory: "4096Mi"
cpu: "4096m"
---
apiVersion: apps/v1
kind: Deployment
@@ -46,11 +46,11 @@ spec:
- name: bill-service
resources:
requests:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
limits:
cpu: 4096m
memory: 4096Mi
memory: "4096Mi"
cpu: "4096m"
---
apiVersion: apps/v1
kind: Deployment
@@ -64,11 +64,11 @@ spec:
- name: product-service
resources:
requests:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
limits:
cpu: 4096m
memory: 4096Mi
memory: "4096Mi"
cpu: "4096m"
---
apiVersion: apps/v1
kind: Deployment
@@ -82,8 +82,8 @@ spec:
- name: kos-mock
resources:
requests:
cpu: 1024m
memory: 1024Mi
memory: "1024Mi"
cpu: "1024m"
limits:
cpu: 4096m
memory: 4096Mi
memory: "4096Mi"
cpu: "4096m"
deployment/cicd/kustomize/overlays/prod/ingress-patch.yaml
+3 -5
View File
@@ -7,16 +7,14 @@ metadata:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
nginx.ingress.kubernetes.io/ssl-protocols: "TLSv1.2 TLSv1.3"
nginx.ingress.kubernetes.io/ssl-ciphers: "ECDHE-RSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384"
spec:
ingressClassName: nginx
tls:
- hosts:
- phonebill.20.214.196.128.nip.io
- phonebill-prod.example.com
secretName: phonebill-prod-tls
rules:
- host: phonebill.20.214.196.128.nip.io
- host: phonebill-prod.example.com
http:
paths:
- path: /api/v1/auth
@@ -53,4 +51,4 @@ spec:
service:
name: kos-mock
port:
number: 80
number: 80
deployment/cicd/kustomize/overlays/prod/secret-bill-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "bill-inquiry-postgres-prod-postgresql"
DB_NAME: "bill_inquiry_db"
DB_USERNAME: "bill_inquiry_user"
DB_PASSWORD: "BillUser2025Prod!"
DB_PASSWORD: "BillUser2025Prod!SecurePassword"
deployment/cicd/kustomize/overlays/prod/secret-common-patch.yaml
+2 -2
View File
@@ -4,6 +4,6 @@ metadata:
name: secret-common
type: Opaque
stringData:
JWT_SECRET: "prod7Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/prod"
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
REDIS_HOST: "redis-cache-prod-master"
REDIS_PASSWORD: "Redis2025Prod!"
REDIS_PASSWORD: "Redis2025Prod!SecurePassword"
deployment/cicd/kustomize/overlays/prod/secret-product-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "product-change-postgres-prod-postgresql"
DB_NAME: "product_change_db"
DB_USERNAME: "product_change_user"
DB_PASSWORD: "ProductUser2025Prod!"
DB_PASSWORD: "ProductUser2025Prod!SecurePassword"
deployment/cicd/kustomize/overlays/prod/secret-user-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "auth-postgres-prod-postgresql"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025Prod!"
DB_PASSWORD: "AuthUser2025Prod!SecurePassword"
deployment/cicd/kustomize/overlays/staging/configmap-common-patch.yaml
+3 -3
View File
@@ -3,9 +3,9 @@ kind: ConfigMap
metadata:
name: cm-common
data:
CORS_ALLOWED_ORIGINS: "https://phonebill-staging.20.214.196.128.nip.io"
JWT_ACCESS_TOKEN_VALIDITY: "18000000" # 5시간
CORS_ALLOWED_ORIGINS: "https://phonebill-staging.example.com"
JWT_ACCESS_TOKEN_VALIDITY: "18000000"
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
REDIS_PORT: "6379"
SPRING_PROFILES_ACTIVE: "staging"
DDL_AUTO: "validate"
DDL_AUTO: "validate"
deployment/cicd/kustomize/overlays/staging/deployment-patch.yaml
+20 -20
View File
@@ -10,11 +10,11 @@ spec:
- name: api-gateway
resources:
requests:
cpu: 512m
memory: 512Mi
memory: "512Mi"
cpu: "512m"
limits:
cpu: 2048m
memory: 2048Mi
memory: "2048Mi"
cpu: "2048m"
---
apiVersion: apps/v1
kind: Deployment
@@ -28,11 +28,11 @@ spec:
- name: user-service
resources:
requests:
cpu: 512m
memory: 512Mi
memory: "512Mi"
cpu: "512m"
limits:
cpu: 2048m
memory: 2048Mi
memory: "2048Mi"
cpu: "2048m"
---
apiVersion: apps/v1
kind: Deployment
@@ -46,11 +46,11 @@ spec:
- name: bill-service
resources:
requests:
cpu: 512m
memory: 512Mi
memory: "512Mi"
cpu: "512m"
limits:
cpu: 2048m
memory: 2048Mi
memory: "2048Mi"
cpu: "2048m"
---
apiVersion: apps/v1
kind: Deployment
@@ -64,11 +64,11 @@ spec:
- name: product-service
resources:
requests:
cpu: 512m
memory: 512Mi
memory: "512Mi"
cpu: "512m"
limits:
cpu: 2048m
memory: 2048Mi
memory: "2048Mi"
cpu: "2048m"
---
apiVersion: apps/v1
kind: Deployment
@@ -82,8 +82,8 @@ spec:
- name: kos-mock
resources:
requests:
cpu: 512m
memory: 512Mi
memory: "512Mi"
cpu: "512m"
limits:
cpu: 2048m
memory: 2048Mi
memory: "2048Mi"
cpu: "2048m"
deployment/cicd/kustomize/overlays/staging/ingress-patch.yaml
+4 -3
View File
@@ -5,15 +5,16 @@ metadata:
annotations:
kubernetes.io/ingress.class: nginx
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
spec:
ingressClassName: nginx
tls:
- hosts:
- phonebill-staging.20.214.196.128.nip.io
- phonebill-staging.example.com
secretName: phonebill-staging-tls
rules:
- host: phonebill-staging.20.214.196.128.nip.io
- host: phonebill-staging.example.com
http:
paths:
- path: /api/v1/auth
@@ -50,4 +51,4 @@ spec:
service:
name: kos-mock
port:
number: 80
number: 80
deployment/cicd/kustomize/overlays/staging/secret-bill-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "bill-inquiry-postgres-staging-postgresql"
DB_NAME: "bill_inquiry_db"
DB_USERNAME: "bill_inquiry_user"
DB_PASSWORD: "BillUser2025Staging!"
DB_PASSWORD: "BillUser2025Staging!"
deployment/cicd/kustomize/overlays/staging/secret-common-patch.yaml
+2 -2
View File
@@ -4,6 +4,6 @@ metadata:
name: secret-common
type: Opaque
stringData:
JWT_SECRET: "staging5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/staging"
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
REDIS_HOST: "redis-cache-staging-master"
REDIS_PASSWORD: "Redis2025Staging!"
REDIS_PASSWORD: "Redis2025Staging!"
deployment/cicd/kustomize/overlays/staging/secret-product-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "product-change-postgres-staging-postgresql"
DB_NAME: "product_change_db"
DB_USERNAME: "product_change_user"
DB_PASSWORD: "ProductUser2025Staging!"
DB_PASSWORD: "ProductUser2025Staging!"
deployment/cicd/kustomize/overlays/staging/secret-user-service-patch.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ stringData:
DB_HOST: "auth-postgres-staging-postgresql"
DB_NAME: "phonebill_auth"
DB_USERNAME: "auth_user"
DB_PASSWORD: "AuthUser2025Staging!"
DB_PASSWORD: "AuthUser2025Staging!"