mirror of
https://github.com/cna-bootcamp/phonebill.git
synced 2026-06-12 19:49:10 +00:00
Jenkins 기반 CI/CD 파이프라인 구성
- Kustomize 기반 환경별(dev/staging/prod) 매니페스트 관리 - Jenkins 파이프라인 스크립트 작성 (Podman, Gradle, kubectl 컨테이너) - SonarQube 코드 품질 분석 및 Quality Gate 연동 - 수동 배포 및 리소스 검증 스크립트 추가 - k8s 매니페스트 구조 재정리 (configmaps, secrets, deployments, services 분리) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
ondal
Vendored
+44
-51
@@ -12,7 +12,7 @@ podTemplate(
|
||||
slaveConnectTimeout: 300,
|
||||
idleMinutes: 1,
|
||||
activeDeadlineSeconds: 3600,
|
||||
podRetention: never(), // 파드 자동 정리 옵션: never(), onFailure(), always(), default()
|
||||
podRetention: never(),
|
||||
yaml: '''
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 3
|
||||
@@ -51,8 +51,8 @@ podTemplate(
|
||||
]
|
||||
),
|
||||
containerTemplate(
|
||||
name: 'azure-cli',
|
||||
image: 'hiondal/azure-kubectl:latest',
|
||||
name: 'kubectl',
|
||||
image: 'bitnami/kubectl:latest',
|
||||
command: 'cat',
|
||||
ttyEnabled: true,
|
||||
resourceRequestCpu: '200m',
|
||||
@@ -63,14 +63,12 @@ podTemplate(
|
||||
],
|
||||
volumes: [
|
||||
emptyDirVolume(mountPath: '/home/gradle/.gradle', memory: false),
|
||||
emptyDirVolume(mountPath: '/root/.azure', memory: false),
|
||||
emptyDirVolume(mountPath: '/run/podman', memory: false)
|
||||
]
|
||||
) {
|
||||
node(PIPELINE_ID) {
|
||||
def props
|
||||
//def imageTag = getImageTag()
|
||||
def imageTag = "dg0500"
|
||||
def imageTag = getImageTag()
|
||||
def environment = params.ENVIRONMENT ?: 'dev'
|
||||
def skipSonarQube = (params.SKIP_SONARQUBE?.toLowerCase() == 'true')
|
||||
def services = ['api-gateway', 'user-service', 'bill-service', 'product-service', 'kos-mock']
|
||||
@@ -81,15 +79,12 @@ podTemplate(
|
||||
props = readProperties file: "deployment/cicd/config/deploy_env_vars_${environment}"
|
||||
}
|
||||
|
||||
stage("Setup AKS") {
|
||||
container('azure-cli') {
|
||||
withCredentials([azureServicePrincipal('azure-credentials')]) {
|
||||
sh """
|
||||
az login --service-principal -u \$AZURE_CLIENT_ID -p \$AZURE_CLIENT_SECRET -t \$AZURE_TENANT_ID
|
||||
az aks get-credentials --resource-group ${props.resource_group} --name ${props.cluster_name} --overwrite-existing
|
||||
kubectl create namespace phonebill-dg0500 --dry-run=client -o yaml | kubectl apply -f -
|
||||
"""
|
||||
}
|
||||
stage("Setup Kubernetes") {
|
||||
container('kubectl') {
|
||||
sh """
|
||||
kubectl config use-context ${props.k8s_context} || echo "Context switch skipped"
|
||||
kubectl create namespace ${props.namespace} --dry-run=client -o yaml | kubectl apply -f -
|
||||
"""
|
||||
}
|
||||
}
|
||||
|
||||
@@ -107,27 +102,36 @@ podTemplate(
|
||||
echo "⏭️ Skipping SonarQube Analysis (SKIP_SONARQUBE=${params.SKIP_SONARQUBE})"
|
||||
} else {
|
||||
container('gradle') {
|
||||
withSonarQubeEnv('SonarQube') {
|
||||
// 각 서비스별 테스트 및 SonarQube 분석
|
||||
services.each { service ->
|
||||
sh """
|
||||
./gradlew :${service}:test :${service}:jacocoTestReport :${service}:sonar \\
|
||||
-Dsonar.projectKey=phonebill-${service}-dg0500 \\
|
||||
-Dsonar.projectName=phonebill-${service}-dg0500 \\
|
||||
-Dsonar.java.binaries=build/classes/java/main \\
|
||||
-Dsonar.coverage.jacoco.xmlReportPaths=build/reports/jacoco/test/jacocoTestReport.xml \\
|
||||
-Dsonar.exclusions=**/config/**,**/entity/**,**/dto/**,**/*Application.class,**/exception/**
|
||||
"""
|
||||
}
|
||||
services.each { service ->
|
||||
if (service != 'api-gateway') {
|
||||
withSonarQubeEnv('SonarQube') {
|
||||
echo "🔍 Starting SonarQube analysis for ${service}..."
|
||||
|
||||
// Quality Gate 확인
|
||||
timeout(time: 10, unit: 'MINUTES') {
|
||||
def qg = waitForQualityGate()
|
||||
if (qg.status != 'OK') {
|
||||
error "Pipeline aborted due to quality gate failure: ${qg.status}"
|
||||
sh """
|
||||
./gradlew :${service}:test :${service}:jacocoTestReport :${service}:sonar \\
|
||||
-Dsonar.projectKey=phonebill-${service}-${environment} \\
|
||||
-Dsonar.projectName=phonebill-${service}-${environment} \\
|
||||
-Dsonar.java.binaries=build/classes/java/main \\
|
||||
-Dsonar.coverage.jacoco.xmlReportPaths=build/reports/jacoco/test/jacocoTestReport.xml \\
|
||||
-Dsonar.exclusions=**/config/**,**/entity/**,**/dto/**,**/*Application.class,**/exception/**
|
||||
"""
|
||||
|
||||
echo "✅ SonarQube analysis completed for ${service}"
|
||||
}
|
||||
|
||||
timeout(time: 5, unit: 'MINUTES') {
|
||||
echo "⏳ Waiting for Quality Gate result for ${service}..."
|
||||
def qg = waitForQualityGate()
|
||||
if (qg.status != 'OK') {
|
||||
error "❌ Quality Gate failed for ${service}: ${qg.status}"
|
||||
} else {
|
||||
echo "✅ Quality Gate passed for ${service}"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
echo "🎉 All services passed SonarQube Quality Gates!"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -136,32 +140,23 @@ podTemplate(
|
||||
timeout(time: 30, unit: 'MINUTES') {
|
||||
container('podman') {
|
||||
withCredentials([
|
||||
usernamePassword(
|
||||
credentialsId: 'acr-credentials',
|
||||
usernameVariable: 'ACR_USERNAME',
|
||||
passwordVariable: 'ACR_PASSWORD'
|
||||
),
|
||||
usernamePassword(
|
||||
credentialsId: 'dockerhub-credentials',
|
||||
usernameVariable: 'DOCKERHUB_USERNAME',
|
||||
passwordVariable: 'DOCKERHUB_PASSWORD'
|
||||
)
|
||||
]) {
|
||||
// Docker Hub 로그인 (rate limit 해결)
|
||||
sh "podman login docker.io --username \$DOCKERHUB_USERNAME --password \$DOCKERHUB_PASSWORD"
|
||||
|
||||
// ACR 로그인
|
||||
sh "podman login acrdigitalgarage01.azurecr.io --username \$ACR_USERNAME --password \$ACR_PASSWORD"
|
||||
|
||||
services.each { service ->
|
||||
sh """
|
||||
podman build \\
|
||||
--build-arg BUILD_LIB_DIR="${service}/build/libs" \\
|
||||
--build-arg ARTIFACTORY_FILE="${service}.jar" \\
|
||||
-f deployment/container/Dockerfile-backend \\
|
||||
-t acrdigitalgarage01.azurecr.io/phonebill/${service}:${environment}-${imageTag} .
|
||||
-t docker.io/hiondal/${service}:${environment}-${imageTag} .
|
||||
|
||||
podman push acrdigitalgarage01.azurecr.io/phonebill/${service}:${environment}-${imageTag}
|
||||
podman push docker.io/hiondal/${service}:${environment}-${imageTag}
|
||||
"""
|
||||
}
|
||||
}
|
||||
@@ -170,9 +165,9 @@ podTemplate(
|
||||
}
|
||||
|
||||
stage('Update Kustomize & Deploy') {
|
||||
container('azure-cli') {
|
||||
container('kubectl') {
|
||||
sh """
|
||||
# Kustomize 설치 (sudo 없이 사용자 디렉토리에 설치)
|
||||
# Kustomize 설치
|
||||
curl -s "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash
|
||||
mkdir -p \$HOME/bin
|
||||
mv kustomize \$HOME/bin/
|
||||
@@ -181,12 +176,12 @@ podTemplate(
|
||||
# 환경별 디렉토리로 이동
|
||||
cd deployment/cicd/kustomize/overlays/${environment}
|
||||
|
||||
# 서비스 목록 정의 (실제 서비스명으로 교체, 공백으로 구분)
|
||||
# 서비스 목록 정의
|
||||
services="api-gateway user-service bill-service product-service kos-mock"
|
||||
|
||||
# 이미지 태그 업데이트
|
||||
for service in \$services; do
|
||||
\$HOME/bin/kustomize edit set image acrdigitalgarage01.azurecr.io/phonebill/\$service:${environment}-${imageTag}
|
||||
\$HOME/bin/kustomize edit set image docker.io/hiondal/\$service:${environment}-${imageTag}
|
||||
done
|
||||
|
||||
# 매니페스트 적용
|
||||
@@ -195,17 +190,15 @@ podTemplate(
|
||||
# 배포 상태 확인
|
||||
echo "Waiting for deployments to be ready..."
|
||||
for service in \$services; do
|
||||
kubectl -n phonebill-dg0500 wait --for=condition=available deployment/\$service --timeout=300s
|
||||
kubectl -n ${props.namespace} wait --for=condition=available deployment/\$service --timeout=300s || echo "Timeout waiting for \$service"
|
||||
done
|
||||
"""
|
||||
}
|
||||
}
|
||||
|
||||
// 파이프라인 완료 로그 (Scripted Pipeline 방식)
|
||||
stage('Pipeline Complete') {
|
||||
echo "🧹 Pipeline completed. Pod cleanup handled by Jenkins Kubernetes Plugin."
|
||||
|
||||
// 성공/실패 여부 로깅
|
||||
if (currentBuild.result == null || currentBuild.result == 'SUCCESS') {
|
||||
echo "✅ Pipeline completed successfully!"
|
||||
} else {
|
||||
@@ -222,4 +215,4 @@ podTemplate(
|
||||
echo "Pod will be terminated in 3 seconds due to terminationGracePeriodSeconds: 3"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1,240 +0,0 @@
|
||||
def PIPELINE_ID = "${env.BUILD_NUMBER}"
|
||||
|
||||
def getImageTag() {
|
||||
def dateFormat = new java.text.SimpleDateFormat('yyyyMMddHHmmss')
|
||||
def currentDate = new Date()
|
||||
return dateFormat.format(currentDate)
|
||||
}
|
||||
|
||||
podTemplate(
|
||||
label: "${PIPELINE_ID}",
|
||||
serviceAccount: 'jenkins',
|
||||
slaveConnectTimeout: 300,
|
||||
idleMinutes: 1,
|
||||
activeDeadlineSeconds: 3600,
|
||||
podRetention: never(), // 파드 자동 정리 옵션: never(), onFailure(), always(), default()
|
||||
yaml: '''
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 3
|
||||
restartPolicy: Never
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: dedicated
|
||||
operator: Equal
|
||||
value: cicd
|
||||
''',
|
||||
containers: [
|
||||
containerTemplate(
|
||||
name: 'podman',
|
||||
image: "mgoltzsche/podman",
|
||||
ttyEnabled: true,
|
||||
command: 'cat',
|
||||
privileged: true,
|
||||
resourceRequestCpu: '500m',
|
||||
resourceRequestMemory: '2Gi',
|
||||
resourceLimitCpu: '2000m',
|
||||
resourceLimitMemory: '4Gi'
|
||||
),
|
||||
containerTemplate(
|
||||
name: 'gradle',
|
||||
image: 'gradle:jdk21',
|
||||
ttyEnabled: true,
|
||||
command: 'cat',
|
||||
resourceRequestCpu: '500m',
|
||||
resourceRequestMemory: '1Gi',
|
||||
resourceLimitCpu: '1000m',
|
||||
resourceLimitMemory: '2Gi',
|
||||
envVars: [
|
||||
envVar(key: 'DOCKER_HOST', value: 'unix:///run/podman/podman.sock'),
|
||||
envVar(key: 'TESTCONTAINERS_DOCKER_SOCKET_OVERRIDE', value: '/run/podman/podman.sock'),
|
||||
envVar(key: 'TESTCONTAINERS_RYUK_DISABLED', value: 'true')
|
||||
]
|
||||
),
|
||||
containerTemplate(
|
||||
name: 'azure-cli',
|
||||
image: 'hiondal/azure-kubectl:latest',
|
||||
command: 'cat',
|
||||
ttyEnabled: true,
|
||||
resourceRequestCpu: '200m',
|
||||
resourceRequestMemory: '512Mi',
|
||||
resourceLimitCpu: '500m',
|
||||
resourceLimitMemory: '1Gi'
|
||||
),
|
||||
containerTemplate(
|
||||
name: 'git',
|
||||
image: 'alpine/git:latest',
|
||||
command: 'cat',
|
||||
ttyEnabled: true,
|
||||
resourceRequestCpu: '100m',
|
||||
resourceRequestMemory: '256Mi',
|
||||
resourceLimitCpu: '300m',
|
||||
resourceLimitMemory: '512Mi'
|
||||
)
|
||||
],
|
||||
volumes: [
|
||||
emptyDirVolume(mountPath: '/home/gradle/.gradle', memory: false),
|
||||
emptyDirVolume(mountPath: '/root/.azure', memory: false),
|
||||
emptyDirVolume(mountPath: '/run/podman', memory: false)
|
||||
]
|
||||
) {
|
||||
node(PIPELINE_ID) {
|
||||
def props
|
||||
def imageTag = "dg0500-"+getImageTag()
|
||||
def environment = params.ENVIRONMENT ?: 'dev'
|
||||
def skipSonarQube = (params.SKIP_SONARQUBE?.toLowerCase() == 'true')
|
||||
def services = ['api-gateway', 'user-service', 'bill-service', 'product-service', 'kos-mock']
|
||||
|
||||
try {
|
||||
stage("Get Source") {
|
||||
|
||||
checkout scm
|
||||
props = readProperties file: "deployment/cicd/config/deploy_env_vars_${environment}"
|
||||
}
|
||||
|
||||
|
||||
stage('Build') {
|
||||
container('gradle') {
|
||||
sh """
|
||||
chmod +x gradlew
|
||||
./gradlew build -x test
|
||||
"""
|
||||
}
|
||||
}
|
||||
|
||||
stage('SonarQube Analysis & Quality Gate') {
|
||||
if (skipSonarQube) {
|
||||
echo "⏭️ Skipping SonarQube Analysis (SKIP_SONARQUBE=${params.SKIP_SONARQUBE})"
|
||||
} else {
|
||||
container('gradle') {
|
||||
// 각 서비스별로 개별적으로 SonarQube 분석 및 Quality Gate 확인
|
||||
services.each { service ->
|
||||
withSonarQubeEnv('SonarQube') {
|
||||
echo "🔍 Starting SonarQube analysis for ${service}..."
|
||||
|
||||
// 서비스별 테스트 및 SonarQube 분석
|
||||
sh """
|
||||
./gradlew :${service}:test :${service}:jacocoTestReport :${service}:sonar \\
|
||||
-Dsonar.projectKey=phonebill-${service}-dg0500 \\
|
||||
-Dsonar.projectName=phonebill-${service}-dg0500 \\
|
||||
-Dsonar.java.binaries=build/classes/java/main \\
|
||||
-Dsonar.coverage.jacoco.xmlReportPaths=build/reports/jacoco/test/jacocoTestReport.xml \\
|
||||
-Dsonar.exclusions=**/config/**,**/entity/**,**/dto/**,**/*Application.class,**/exception/**
|
||||
"""
|
||||
|
||||
echo "✅ SonarQube analysis completed for ${service}"
|
||||
}
|
||||
|
||||
// 각 서비스별 Quality Gate 확인
|
||||
timeout(time: 5, unit: 'MINUTES') {
|
||||
echo "⏳ Waiting for Quality Gate result for ${service}..."
|
||||
def qg = waitForQualityGate()
|
||||
if (qg.status != 'OK') {
|
||||
error "❌ Quality Gate failed for ${service}: ${qg.status}"
|
||||
} else {
|
||||
echo "✅ Quality Gate passed for ${service}"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
echo "🎉 All services passed SonarQube Quality Gates!"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Build & Push Images') {
|
||||
timeout(time: 30, unit: 'MINUTES') {
|
||||
container('podman') {
|
||||
withCredentials([
|
||||
usernamePassword(
|
||||
credentialsId: 'acr-credentials',
|
||||
usernameVariable: 'ACR_USERNAME',
|
||||
passwordVariable: 'ACR_PASSWORD'
|
||||
),
|
||||
usernamePassword(
|
||||
credentialsId: 'dockerhub-credentials',
|
||||
usernameVariable: 'DOCKERHUB_USERNAME',
|
||||
passwordVariable: 'DOCKERHUB_PASSWORD'
|
||||
)
|
||||
]) {
|
||||
// Docker Hub 로그인 (rate limit 해결)
|
||||
sh "podman login docker.io --username \$DOCKERHUB_USERNAME --password \$DOCKERHUB_PASSWORD"
|
||||
|
||||
// ACR 로그인
|
||||
sh "podman login acrdigitalgarage01.azurecr.io --username \$ACR_USERNAME --password \$ACR_PASSWORD"
|
||||
|
||||
services.each { service ->
|
||||
sh """
|
||||
podman build \\
|
||||
--build-arg BUILD_LIB_DIR="${service}/build/libs" \\
|
||||
--build-arg ARTIFACTORY_FILE="${service}.jar" \\
|
||||
-f deployment/container/Dockerfile-backend \\
|
||||
-t acrdigitalgarage01.azurecr.io/phonebill/${service}:${environment}-${imageTag} .
|
||||
|
||||
podman push acrdigitalgarage01.azurecr.io/phonebill/${service}:${environment}-${imageTag}
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Update Manifest Repository') {
|
||||
container('git') {
|
||||
withCredentials([usernamePassword(
|
||||
credentialsId: 'github-credentials-dg0500',
|
||||
usernameVariable: 'GIT_USERNAME',
|
||||
passwordVariable: 'GIT_TOKEN'
|
||||
)]) {
|
||||
sh """
|
||||
# 매니페스트 레포지토리 클론
|
||||
REPO_URL=\$(echo "https://github.com/cna-bootcamp/phonebill-manifest.git" | sed 's|https://||')
|
||||
git clone https://\${GIT_USERNAME}:\${GIT_TOKEN}@\${REPO_URL} manifest-repo
|
||||
cd manifest-repo
|
||||
|
||||
# 각 서비스별 이미지 태그 업데이트 (sed 명령 사용)
|
||||
services="api-gateway user-service bill-service product-service kos-mock"
|
||||
for service in \$services; do
|
||||
echo "Updating \$service image tag..."
|
||||
sed -i "s|image: acrdigitalgarage01.azurecr.io/phonebill/\$service:.*|image: acrdigitalgarage01.azurecr.io/phonebill/\$service:${environment}-${imageTag}|g" \\
|
||||
phonebill/kustomize/base/\$service/deployment.yaml
|
||||
|
||||
# 변경 사항 확인
|
||||
echo "Updated \$service deployment.yaml:"
|
||||
grep "image: acrdigitalgarage01.azurecr.io/phonebill/\$service" phonebill/kustomize/base/\$service/deployment.yaml
|
||||
done
|
||||
|
||||
# Git 설정 및 푸시
|
||||
git config user.name "Jenkins CI"
|
||||
git config user.email "jenkins@example.com"
|
||||
git add .
|
||||
git commit -m "🚀 Update phonebill ${environment} images to ${environment}-${imageTag}"
|
||||
git push origin main
|
||||
|
||||
echo "✅ 매니페스트 업데이트 완료. ArgoCD가 자동으로 배포합니다."
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 파이프라인 완료 로그 (Scripted Pipeline 방식)
|
||||
stage('Pipeline Complete') {
|
||||
echo "🧹 Pipeline completed. Pod cleanup handled by Jenkins Kubernetes Plugin."
|
||||
|
||||
// 성공/실패 여부 로깅
|
||||
if (currentBuild.result == null || currentBuild.result == 'SUCCESS') {
|
||||
echo "✅ Pipeline completed successfully!"
|
||||
} else {
|
||||
echo "❌ Pipeline failed with result: ${currentBuild.result}"
|
||||
}
|
||||
}
|
||||
|
||||
} catch (Exception e) {
|
||||
currentBuild.result = 'FAILURE'
|
||||
echo "❌ Pipeline failed with exception: ${e.getMessage()}"
|
||||
throw e
|
||||
} finally {
|
||||
echo "🧹 Cleaning up resources and preparing for pod termination..."
|
||||
echo "Pod will be terminated in 3 seconds due to terminationGracePeriodSeconds: 3"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,3 +1,4 @@
|
||||
# dev Environment Configuration
|
||||
resource_group=rg-digitalgarage-01
|
||||
cluster_name=aks-digitalgarage-01
|
||||
# Dev Environment Configuration
|
||||
# Minikube Remote 환경 설정
|
||||
k8s_context=minikube-remote
|
||||
namespace=phonebill
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
# prod Environment Configuration
|
||||
resource_group=rg-digitalgarage-01
|
||||
cluster_name=aks-digitalgarage-01
|
||||
# Production Environment Configuration
|
||||
# Minikube Remote 환경 설정
|
||||
k8s_context=minikube-remote
|
||||
namespace=phonebill-prod
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
# staging Environment Configuration
|
||||
resource_group=rg-digitalgarage-01
|
||||
cluster_name=aks-digitalgarage-01
|
||||
# Staging Environment Configuration
|
||||
# Minikube Remote 환경 설정
|
||||
k8s_context=minikube-remote
|
||||
namespace=phonebill-staging
|
||||
|
||||
@@ -1,181 +1,253 @@
|
||||
# phonebill Jenkins CI/CD 파이프라인 구축 가이드
|
||||
# Jenkins CI/CD 파이프라인 가이드
|
||||
|
||||
## 📋 개요
|
||||
## 개요
|
||||
이 문서는 Phonebill 프로젝트의 Jenkins 기반 CI/CD 파이프라인 구축 및 운영 가이드입니다.
|
||||
|
||||
본 가이드는 phonebill 프로젝트를 위한 Jenkins + Kustomize 기반 CI/CD 파이프라인 구축 방법을 제공합니다.
|
||||
## 프로젝트 정보
|
||||
|
||||
### 프로젝트 정보
|
||||
- **시스템명**: phonebill
|
||||
- **서비스 목록**: api-gateway, user-service, bill-service, product-service, kos-mock
|
||||
- **JDK 버전**: 21
|
||||
- **Azure 환경**:
|
||||
- ACR: acrdigitalgarage01
|
||||
- 리소스 그룹: rg-digitalgarage-01
|
||||
- AKS 클러스터: aks-digitalgarage-01
|
||||
- 네임스페이스: phonebill-dg0500
|
||||
| 항목 | 값 |
|
||||
|------|-----|
|
||||
| 시스템명 | phonebill |
|
||||
| JDK 버전 | 21 |
|
||||
| Image Registry | docker.io |
|
||||
| Image Organization | hiondal |
|
||||
| K8s Context | minikube-remote |
|
||||
| Namespace | phonebill |
|
||||
|
||||
## 🏗️ 파이프라인 아키텍처
|
||||
### 서비스 목록
|
||||
- api-gateway (포트: 8080)
|
||||
- user-service (포트: 8081)
|
||||
- bill-service (포트: 8082)
|
||||
- product-service (포트: 8083)
|
||||
- kos-mock (포트: 8084)
|
||||
|
||||
### 주요 구성 요소
|
||||
- **빌드**: Gradle 기반 멀티모듈 빌드
|
||||
- **품질 검증**: SonarQube 분석 & Quality Gate
|
||||
- **컨테이너화**: Podman 기반 이미지 빌드
|
||||
- **배포**: Kustomize를 통한 환경별 배포
|
||||
- **인프라**: AKS (Azure Kubernetes Service)
|
||||
---
|
||||
|
||||
### 환경별 설정
|
||||
| 환경 | Replicas | CPU Request | Memory Request | CPU Limit | Memory Limit |
|
||||
|------|----------|-------------|----------------|-----------|--------------|
|
||||
| dev | 1 | 256m | 256Mi | 1024m | 1024Mi |
|
||||
| staging | 2 | 512m | 512Mi | 2048m | 2048Mi |
|
||||
| prod | 3 | 1024m | 1024Mi | 4096m | 4096Mi |
|
||||
## 1. 사전 준비사항
|
||||
|
||||
## 🚀 Jenkins 서버 환경 구성
|
||||
|
||||
### 1. Jenkins 필수 플러그인 설치
|
||||
|
||||
Jenkins 관리 > Plugin Manager에서 다음 플러그인들을 설치해주세요:
|
||||
|
||||
```bash
|
||||
# Jenkins 필수 플러그인 목록
|
||||
### 1.1 Jenkins 필수 플러그인
|
||||
```
|
||||
- Kubernetes
|
||||
- Pipeline Utility Steps
|
||||
- Docker Pipeline
|
||||
- GitHub
|
||||
- SonarQube Scanner
|
||||
- Azure Credentials
|
||||
```
|
||||
|
||||
### 2. Jenkins Credentials 등록
|
||||
### 1.2 Jenkins Credentials 등록
|
||||
|
||||
**Manage Jenkins > Credentials > Add Credentials**에서 다음 인증 정보들을 등록해주세요:
|
||||
Jenkins 관리 > Credentials > Add Credentials에서 등록:
|
||||
|
||||
#### Azure Service Principal
|
||||
#### Docker Hub Credentials
|
||||
```
|
||||
Kind: Microsoft Azure Service Principal
|
||||
ID: azure-credentials
|
||||
Subscription ID: {구독ID}
|
||||
Client ID: {클라이언트ID}
|
||||
Client Secret: {클라이언트시크릿}
|
||||
Tenant ID: {테넌트ID}
|
||||
Azure Environment: Azure
|
||||
- Kind: Username with password
|
||||
- ID: dockerhub-credentials
|
||||
- Username: {DOCKERHUB_USERNAME}
|
||||
- Password: {DOCKERHUB_PASSWORD}
|
||||
```
|
||||
|
||||
#### ACR Credentials
|
||||
#### SonarQube Token (선택사항)
|
||||
```
|
||||
Kind: Username with password
|
||||
ID: acr-credentials
|
||||
Username: acrdigitalgarage01
|
||||
Password: {ACR_PASSWORD}
|
||||
- Kind: Secret text
|
||||
- ID: sonarqube-token
|
||||
- Secret: {SonarQube 토큰}
|
||||
```
|
||||
|
||||
#### Docker Hub Credentials (Rate Limit 해결용)
|
||||
### 1.3 SonarQube 설정 (선택사항)
|
||||
Jenkins 관리 > Configure System > SonarQube servers:
|
||||
```
|
||||
Kind: Username with password
|
||||
ID: dockerhub-credentials
|
||||
Username: {DOCKERHUB_USERNAME}
|
||||
Password: {DOCKERHUB_PASSWORD}
|
||||
참고: Docker Hub 무료 계정 생성 (https://hub.docker.com)
|
||||
- Name: SonarQube
|
||||
- Server URL: http://{SONARQUBE_URL}
|
||||
- Server authentication token: sonarqube-token (위에서 등록한 credential)
|
||||
```
|
||||
|
||||
#### SonarQube Token
|
||||
```
|
||||
Kind: Secret text
|
||||
ID: sonarqube-token
|
||||
Secret: {SonarQube토큰}
|
||||
```
|
||||
---
|
||||
|
||||
## 📂 Kustomize 구조
|
||||
## 2. Kustomize 구조
|
||||
|
||||
### 2.1 디렉토리 구조
|
||||
```
|
||||
deployment/cicd/kustomize/
|
||||
├── base/
|
||||
│ ├── kustomization.yaml # Base 설정
|
||||
│ ├── common/ # 공통 리소스
|
||||
│ │ ├── cm-common.yaml
|
||||
│ │ ├── secret-common.yaml
|
||||
│ │ ├── secret-imagepull.yaml
|
||||
│ │ └── ingress.yaml
|
||||
│ ├── api-gateway/ # API Gateway 리소스
|
||||
│ │ ├── deployment.yaml
|
||||
│ │ ├── service.yaml
|
||||
│ │ └── cm-api-gateway.yaml
|
||||
│ ├── user-service/ # User Service 리소스
|
||||
│ │ ├── deployment.yaml
|
||||
│ │ ├── service.yaml
|
||||
│ │ ├── cm-user-service.yaml
|
||||
│ │ └── secret-user-service.yaml
|
||||
│ ├── bill-service/ # Bill Service 리소스
|
||||
│ │ ├── deployment.yaml
|
||||
│ │ ├── service.yaml
|
||||
│ │ ├── cm-bill-service.yaml
|
||||
│ │ └── secret-bill-service.yaml
|
||||
│ ├── product-service/ # Product Service 리소스
|
||||
│ │ ├── deployment.yaml
|
||||
│ │ ├── service.yaml
|
||||
│ │ ├── cm-product-service.yaml
|
||||
│ │ └── secret-product-service.yaml
|
||||
│ └── kos-mock/ # KOS Mock 리소스
|
||||
│ ├── deployment.yaml
|
||||
│ ├── service.yaml
|
||||
│ └── cm-kos-mock.yaml
|
||||
└── overlays/
|
||||
├── dev/ # 개발 환경
|
||||
deployment/cicd/
|
||||
├── Jenkinsfile
|
||||
├── config/
|
||||
│ ├── deploy_env_vars_dev
|
||||
│ ├── deploy_env_vars_staging
|
||||
│ └── deploy_env_vars_prod
|
||||
├── scripts/
|
||||
│ ├── deploy.sh
|
||||
│ └── validate-resources.sh
|
||||
└── kustomize/
|
||||
├── base/
|
||||
│ ├── kustomization.yaml
|
||||
│ ├── cm-common-patch.yaml
|
||||
│ ├── secret-common-patch.yaml
|
||||
│ ├── ingress-patch.yaml
|
||||
│ ├── deployment-*-patch.yaml (각 서비스별)
|
||||
│ └── secret-*-patch.yaml (Secret 보유 서비스)
|
||||
├── staging/ # 스테이징 환경
|
||||
│ └── (dev와 동일한 구조)
|
||||
└── prod/ # 운영 환경
|
||||
└── (dev와 동일한 구조)
|
||||
│ ├── common/
|
||||
│ │ ├── cm-common.yaml
|
||||
│ │ ├── secret-common.yaml
|
||||
│ │ └── ingress.yaml
|
||||
│ ├── api-gateway/
|
||||
│ ├── user-service/
|
||||
│ ├── bill-service/
|
||||
│ ├── product-service/
|
||||
│ └── kos-mock/
|
||||
└── overlays/
|
||||
├── dev/
|
||||
├── staging/
|
||||
└── prod/
|
||||
```
|
||||
|
||||
## 🔧 Jenkins Pipeline Job 생성
|
||||
### 2.2 환경별 설정 차이
|
||||
|
||||
### 1. 새 Pipeline Job 생성
|
||||
1. Jenkins 대시보드에서 **New Item** 클릭
|
||||
2. **Pipeline** 선택하고 프로젝트명 입력
|
||||
3. **OK** 클릭
|
||||
| 항목 | dev | staging | prod |
|
||||
|------|-----|---------|------|
|
||||
| Namespace | phonebill | phonebill-staging | phonebill-prod |
|
||||
| Replicas | 1 | 2 | 3 |
|
||||
| CPU Requests | 256m | 512m | 1024m |
|
||||
| Memory Requests | 256Mi | 512Mi | 1024Mi |
|
||||
| CPU Limits | 1024m | 2048m | 4096m |
|
||||
| Memory Limits | 1024Mi | 2048Mi | 4096Mi |
|
||||
| DDL_AUTO | update | validate | validate |
|
||||
| SHOW_SQL | true | false | false |
|
||||
| SSL Redirect | false | true | true |
|
||||
|
||||
### 2. Pipeline 설정
|
||||
#### General 탭
|
||||
- **Build Parameters** 추가:
|
||||
```
|
||||
ENVIRONMENT: Choice Parameter
|
||||
Choices: dev, staging, prod
|
||||
Default: dev
|
||||
---
|
||||
|
||||
IMAGE_TAG: String Parameter
|
||||
Default: latest
|
||||
Description: 이미지 태그 (기본값: latest)
|
||||
## 3. Jenkins Pipeline Job 생성
|
||||
|
||||
SKIP_SONARQUBE: String Parameter
|
||||
Default: true
|
||||
Description: SonarQube 분석 건너뛰기 (true/false)
|
||||
```
|
||||
### 3.1 New Item > Pipeline 선택
|
||||
|
||||
#### Pipeline 탭
|
||||
### 3.2 Pipeline 설정
|
||||
```
|
||||
Definition: Pipeline script from SCM
|
||||
SCM: Git
|
||||
Repository URL: {Git저장소URL}
|
||||
Repository URL: {Git 저장소 URL}
|
||||
Branch: main (또는 develop)
|
||||
Script Path: deployment/cicd/Jenkinsfile
|
||||
```
|
||||
|
||||
## 📊 SonarQube 프로젝트 설정
|
||||
### 3.3 Pipeline Parameters 설정
|
||||
| 파라미터 | 타입 | 기본값 | 설명 |
|
||||
|----------|------|--------|------|
|
||||
| ENVIRONMENT | Choice | dev | 배포 환경 (dev/staging/prod) |
|
||||
| SKIP_SONARQUBE | String | true | SonarQube 분석 건너뛰기 (true/false) |
|
||||
|
||||
### 1. 각 서비스별 SonarQube 프로젝트 생성
|
||||
- phonebill-api-gateway-{환경}
|
||||
- phonebill-user-service-{환경}
|
||||
- phonebill-bill-service-{환경}
|
||||
- phonebill-product-service-{환경}
|
||||
- phonebill-kos-mock-{환경}
|
||||
---
|
||||
|
||||
### 2. Quality Gate 설정
|
||||
## 4. 파이프라인 스테이지
|
||||
|
||||
### 4.1 Get Source
|
||||
- Git 저장소에서 소스 코드 체크아웃
|
||||
- 환경별 설정 파일 로드
|
||||
|
||||
### 4.2 Setup Kubernetes
|
||||
- Kubernetes 컨텍스트 설정
|
||||
- 네임스페이스 생성
|
||||
|
||||
### 4.3 Build
|
||||
- Gradle을 사용한 빌드 (테스트 제외)
|
||||
- `./gradlew build -x test`
|
||||
|
||||
### 4.4 SonarQube Analysis & Quality Gate (선택사항)
|
||||
- SKIP_SONARQUBE=false일 때만 실행
|
||||
- 각 서비스별 테스트 및 코드 품질 분석
|
||||
- Quality Gate 통과 확인
|
||||
|
||||
### 4.5 Build & Push Images
|
||||
- Podman을 사용한 컨테이너 이미지 빌드
|
||||
- Docker Hub로 이미지 푸시
|
||||
- 이미지 태그: `{환경}-{타임스탬프}`
|
||||
|
||||
### 4.6 Update Kustomize & Deploy
|
||||
- Kustomize를 사용한 이미지 태그 업데이트
|
||||
- Kubernetes 매니페스트 적용
|
||||
- 배포 상태 확인
|
||||
|
||||
---
|
||||
|
||||
## 5. 배포 실행
|
||||
|
||||
### 5.1 Jenkins 파이프라인 실행
|
||||
1. Jenkins > phonebill > Build with Parameters
|
||||
2. ENVIRONMENT 선택 (dev/staging/prod)
|
||||
3. SKIP_SONARQUBE 입력 (true 또는 false)
|
||||
4. Build 클릭
|
||||
|
||||
### 5.2 수동 배포 (스크립트 사용)
|
||||
```bash
|
||||
# dev 환경 배포
|
||||
./deployment/cicd/scripts/deploy.sh dev latest
|
||||
|
||||
# staging 환경 배포
|
||||
./deployment/cicd/scripts/deploy.sh staging v1.0.0
|
||||
|
||||
# prod 환경 배포
|
||||
./deployment/cicd/scripts/deploy.sh prod v1.0.0
|
||||
```
|
||||
|
||||
### 5.3 배포 상태 확인
|
||||
```bash
|
||||
# Pod 상태 확인
|
||||
kubectl get pods -n phonebill
|
||||
|
||||
# 서비스 상태 확인
|
||||
kubectl get services -n phonebill
|
||||
|
||||
# Ingress 상태 확인
|
||||
kubectl get ingress -n phonebill
|
||||
|
||||
# 특정 Pod 로그 확인
|
||||
kubectl logs -f deployment/api-gateway -n phonebill
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 6. 롤백
|
||||
|
||||
### 6.1 이전 버전으로 롤백
|
||||
```bash
|
||||
# 특정 리비전으로 롤백
|
||||
kubectl rollout undo deployment/{서비스명} -n phonebill --to-revision=2
|
||||
|
||||
# 롤백 상태 확인
|
||||
kubectl rollout status deployment/{서비스명} -n phonebill
|
||||
|
||||
# 롤백 히스토리 확인
|
||||
kubectl rollout history deployment/{서비스명} -n phonebill
|
||||
```
|
||||
|
||||
### 6.2 이미지 태그 기반 롤백
|
||||
```bash
|
||||
cd deployment/cicd/kustomize/overlays/{환경}
|
||||
|
||||
# 이전 안정 버전 이미지 태그로 업데이트
|
||||
kustomize edit set image docker.io/hiondal/{서비스명}:{환경}-{이전태그}
|
||||
|
||||
# 배포
|
||||
kubectl apply -k .
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 7. 리소스 검증
|
||||
|
||||
### 7.1 검증 스크립트 실행
|
||||
```bash
|
||||
./deployment/cicd/scripts/validate-resources.sh
|
||||
```
|
||||
|
||||
### 7.2 Kustomize 빌드 테스트
|
||||
```bash
|
||||
# Base 빌드 테스트
|
||||
kubectl kustomize deployment/cicd/kustomize/base/
|
||||
|
||||
# 환경별 빌드 테스트
|
||||
kubectl kustomize deployment/cicd/kustomize/overlays/dev/
|
||||
kubectl kustomize deployment/cicd/kustomize/overlays/staging/
|
||||
kubectl kustomize deployment/cicd/kustomize/overlays/prod/
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 8. SonarQube 설정 (선택사항)
|
||||
|
||||
### 8.1 Quality Gate 권장 설정
|
||||
```
|
||||
Coverage: >= 80%
|
||||
Duplicated Lines: <= 3%
|
||||
@@ -184,194 +256,56 @@ Reliability Rating: <= A
|
||||
Security Rating: <= A
|
||||
```
|
||||
|
||||
## 🚀 배포 실행 방법
|
||||
|
||||
### 1. Jenkins Pipeline 실행
|
||||
1. Jenkins > {프로젝트명} > **Build with Parameters** 클릭
|
||||
2. 파라미터 설정:
|
||||
- **ENVIRONMENT**: dev/staging/prod 선택
|
||||
- **IMAGE_TAG**: 이미지 태그 입력 (선택사항)
|
||||
- **SKIP_SONARQUBE**: SonarQube 분석 건너뛰려면 "true", 실행하려면 "false"
|
||||
3. **Build** 클릭
|
||||
|
||||
### 2. 수동 배포 (스크립트 사용)
|
||||
```bash
|
||||
# 개발 환경 배포
|
||||
./deployment/cicd/scripts/deploy.sh dev 20241230120000
|
||||
|
||||
# 스테이징 환경 배포
|
||||
./deployment/cicd/scripts/deploy.sh staging 20241230120000
|
||||
|
||||
# 운영 환경 배포
|
||||
./deployment/cicd/scripts/deploy.sh prod 20241230120000
|
||||
```
|
||||
|
||||
### 3. 배포 상태 확인
|
||||
```bash
|
||||
# Pod 상태 확인
|
||||
kubectl get pods -n phonebill-dg0500
|
||||
|
||||
# 서비스 상태 확인
|
||||
kubectl get services -n phonebill-dg0500
|
||||
|
||||
# Ingress 상태 확인
|
||||
kubectl get ingress -n phonebill-dg0500
|
||||
|
||||
# 특정 서비스 로그 확인
|
||||
kubectl logs -f deployment/user-service -n phonebill-dg0500
|
||||
```
|
||||
|
||||
## 🔍 리소스 검증
|
||||
|
||||
### 리소스 검증 스크립트 실행
|
||||
```bash
|
||||
# 모든 Kustomize 리소스 검증
|
||||
./deployment/cicd/scripts/validate-resources.sh
|
||||
```
|
||||
|
||||
### 수동 검증 명령어
|
||||
```bash
|
||||
# Base 검증
|
||||
kubectl kustomize deployment/cicd/kustomize/base/
|
||||
|
||||
# 환경별 검증
|
||||
kubectl kustomize deployment/cicd/kustomize/overlays/dev/
|
||||
kubectl kustomize deployment/cicd/kustomize/overlays/staging/
|
||||
kubectl kustomize deployment/cicd/kustomize/overlays/prod/
|
||||
```
|
||||
|
||||
## 🔄 롤백 방법
|
||||
|
||||
### 1. Kubernetes 롤백
|
||||
```bash
|
||||
# 특정 버전으로 롤백
|
||||
kubectl rollout undo deployment/{서비스명} -n phonebill-dg0500 --to-revision=2
|
||||
|
||||
# 롤백 상태 확인
|
||||
kubectl rollout status deployment/{서비스명} -n phonebill-dg0500
|
||||
```
|
||||
|
||||
### 2. 이미지 태그 기반 롤백
|
||||
```bash
|
||||
# 이전 안정 버전 이미지 태그로 업데이트
|
||||
cd deployment/cicd/kustomize/overlays/{환경}
|
||||
kustomize edit set image acrdigitalgarage01.azurecr.io/phonebill/{서비스명}:{환경}-{이전태그}
|
||||
kubectl apply -k .
|
||||
```
|
||||
|
||||
## 🎯 파이프라인 단계별 설명
|
||||
|
||||
### 1. Get Source
|
||||
- Git 저장소에서 소스코드 체크아웃
|
||||
- 환경별 설정 파일 로드
|
||||
|
||||
### 2. Setup AKS
|
||||
- Azure CLI를 통한 AKS 클러스터 연결
|
||||
- 네임스페이스 생성 (phonebill-dg0500)
|
||||
|
||||
### 3. Build
|
||||
- Gradle을 통한 멀티모듈 빌드
|
||||
- 테스트는 SonarQube 단계에서 실행
|
||||
|
||||
### 4. SonarQube Analysis & Quality Gate
|
||||
- 각 서비스별 개별 테스트 실행
|
||||
- JaCoCo 코드 커버리지 리포트 생성
|
||||
- SonarQube 정적 분석
|
||||
- Quality Gate 통과 검증
|
||||
|
||||
### 5. Build & Push Images
|
||||
- Podman을 통한 컨테이너 이미지 빌드
|
||||
- 환경별 태그로 ACR에 푸시
|
||||
- 30분 타임아웃 설정
|
||||
|
||||
### 6. Update Kustomize & Deploy
|
||||
- Kustomize를 통한 이미지 태그 업데이트
|
||||
- 환경별 매니페스트 적용
|
||||
- 배포 완료까지 대기 (5분 타임아웃)
|
||||
|
||||
### 7. Pipeline Complete
|
||||
- 파이프라인 완료 상태 로깅
|
||||
- Pod 자동 정리 (3초 후 종료)
|
||||
|
||||
## ⚠️ 주의사항
|
||||
|
||||
### 1. 파드 자동 정리
|
||||
- 파이프라인 완료 시 에이전트 파드 자동 삭제
|
||||
- `podRetention: never()` 설정으로 즉시 정리
|
||||
- 리소스 절약을 위한 필수 설정
|
||||
|
||||
### 2. 변수 참조 문법
|
||||
- Jenkins Groovy에서는 `${variable}` 사용
|
||||
- `\${variable}` 사용 시 "syntax error: bad substitution" 오류 발생
|
||||
|
||||
### 3. 쉘 호환성
|
||||
- Jenkins 컨테이너 기본 쉘이 `/bin/sh`인 경우
|
||||
- Bash 배열 문법 `()` 미지원으로 공백 구분 문자열 사용
|
||||
|
||||
### 4. 환경별 설정 차이점
|
||||
- **DEV**: SSL 리다이렉트 비활성화, 기본 도메인 사용
|
||||
- **STAGING/PROD**: SSL 리다이렉트 활성화, 사용자 정의 도메인, 인증서 설정
|
||||
|
||||
## 🛠️ 트러블슈팅
|
||||
|
||||
### 1. 빌드 실패
|
||||
```bash
|
||||
# Gradle 캐시 클리어
|
||||
./gradlew clean build
|
||||
|
||||
# JDK 버전 확인
|
||||
java -version
|
||||
```
|
||||
|
||||
### 2. 이미지 푸시 실패
|
||||
```bash
|
||||
# ACR 로그인 확인
|
||||
az acr login --name acrdigitalgarage01
|
||||
|
||||
# Docker Hub rate limit 확인
|
||||
docker info | grep -i rate
|
||||
```
|
||||
|
||||
### 3. 배포 실패
|
||||
```bash
|
||||
# 네임스페이스 확인
|
||||
kubectl get namespaces
|
||||
|
||||
# 리소스 상태 확인
|
||||
kubectl describe deployment/{서비스명} -n phonebill-dg0500
|
||||
```
|
||||
|
||||
### 4. SonarQube 분석 실패
|
||||
- SonarQube 서버 연결 상태 확인
|
||||
- 토큰 유효성 검증
|
||||
- Quality Gate 설정 확인
|
||||
|
||||
## 📈 모니터링 및 로그
|
||||
|
||||
### 1. Jenkins 빌드 히스토리
|
||||
- 각 단계별 실행 시간 추적
|
||||
- 실패 단계 및 원인 분석
|
||||
|
||||
### 2. 애플리케이션 로그
|
||||
```bash
|
||||
# 실시간 로그 모니터링
|
||||
kubectl logs -f deployment/{서비스명} -n phonebill-dg0500
|
||||
|
||||
# 특정 기간 로그 확인
|
||||
kubectl logs deployment/{서비스명} -n phonebill-dg0500 --since=1h
|
||||
```
|
||||
|
||||
### 3. 성능 메트릭
|
||||
- Kubernetes 메트릭 서버 활용
|
||||
- 각 서비스별 리소스 사용량 모니터링
|
||||
### 8.2 SonarQube 프로젝트 생성
|
||||
각 서비스별로 다음 형식의 프로젝트 키로 생성:
|
||||
- `phonebill-user-service-dev`
|
||||
- `phonebill-user-service-staging`
|
||||
- `phonebill-user-service-prod`
|
||||
|
||||
---
|
||||
|
||||
## 📞 지원
|
||||
## 9. 트러블슈팅
|
||||
|
||||
문의사항이나 문제 발생 시:
|
||||
1. Jenkins 빌드 로그 확인
|
||||
2. Kubernetes 이벤트 확인: `kubectl get events -n phonebill-dg0500`
|
||||
3. 리소스 검증 스크립트 실행: `./deployment/cicd/scripts/validate-resources.sh`
|
||||
### 9.1 이미지 푸시 실패
|
||||
- Docker Hub 인증 정보 확인
|
||||
- Rate Limit 확인 (무료 계정 제한)
|
||||
|
||||
**최운영/데옵스**: phonebill Jenkins CI/CD 파이프라인이 성공적으로 구축되었습니다! 🎉
|
||||
### 9.2 배포 실패
|
||||
```bash
|
||||
# Pod 이벤트 확인
|
||||
kubectl describe pod {POD_NAME} -n phonebill
|
||||
|
||||
# Pod 로그 확인
|
||||
kubectl logs {POD_NAME} -n phonebill
|
||||
```
|
||||
|
||||
### 9.3 Kustomize 빌드 실패
|
||||
- 리소스 파일 존재 여부 확인
|
||||
- YAML 문법 검증
|
||||
- `kubectl kustomize` 명령으로 디버깅
|
||||
|
||||
### 9.4 SonarQube 연결 실패
|
||||
- SonarQube 서버 URL 확인
|
||||
- 인증 토큰 유효성 확인
|
||||
- 네트워크 연결 확인
|
||||
|
||||
---
|
||||
|
||||
## 10. 체크리스트
|
||||
|
||||
### 사전 준비
|
||||
- [ ] Jenkins 필수 플러그인 설치 완료
|
||||
- [ ] Docker Hub Credentials 등록 완료
|
||||
- [ ] SonarQube Token 등록 완료 (선택)
|
||||
- [ ] Kubernetes 컨텍스트 설정 완료
|
||||
|
||||
### 배포 전
|
||||
- [ ] 리소스 검증 스크립트 실행 완료
|
||||
- [ ] 환경별 설정 파일 확인 완료
|
||||
- [ ] Kustomize 빌드 테스트 완료
|
||||
|
||||
### 배포 후
|
||||
- [ ] Pod 상태 확인 (Running)
|
||||
- [ ] 서비스 엔드포인트 확인
|
||||
- [ ] Ingress 접근 테스트
|
||||
- [ ] 로그 이상 여부 확인
|
||||
|
||||
@@ -1,10 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-api-gateway
|
||||
name: api-gateway-config
|
||||
|
||||
labels:
|
||||
app: api-gateway
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
SERVER_PORT: "8080"
|
||||
BILL_SERVICE_URL: "http://bill-service"
|
||||
PRODUCT_SERVICE_URL: "http://product-service"
|
||||
USER_SERVICE_URL: "http://user-service"
|
||||
KOS_MOCK_URL: "http://kos-mock"
|
||||
USER_SERVICE_URL: "http://user-service:8081"
|
||||
BILL_SERVICE_URL: "http://bill-service:8082"
|
||||
PRODUCT_SERVICE_URL: "http://product-service:8083"
|
||||
KOS_MOCK_URL: "http://kos-mock:8084"
|
||||
|
||||
@@ -2,6 +2,10 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: api-gateway
|
||||
|
||||
labels:
|
||||
app: api-gateway
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
@@ -12,46 +16,40 @@ spec:
|
||||
labels:
|
||||
app: api-gateway
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: phonebill
|
||||
containers:
|
||||
- name: api-gateway
|
||||
image: acrdigitalgarage01.azurecr.io/phonebill/api-gateway:latest
|
||||
image: docker.io/hiondal/api-gateway:latest
|
||||
imagePullPolicy: Always
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
name: http
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- configMapRef:
|
||||
name: cm-api-gateway
|
||||
name: api-gateway-config
|
||||
- secretRef:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
resources:
|
||||
requests:
|
||||
cpu: 256m
|
||||
memory: 256Mi
|
||||
cpu: "256m"
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: 1024m
|
||||
memory: 1024Mi
|
||||
startupProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8080
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 6
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8080
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 5
|
||||
failureThreshold: 3
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
path: /actuator/health/liveness
|
||||
port: 8080
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8080
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 3
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
@@ -2,10 +2,16 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: api-gateway
|
||||
|
||||
labels:
|
||||
app: api-gateway
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
app: api-gateway
|
||||
ports:
|
||||
- port: 80
|
||||
- name: http
|
||||
port: 8080
|
||||
targetPort: 8080
|
||||
type: ClusterIP
|
||||
protocol: TCP
|
||||
|
||||
@@ -1,21 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-bill-service
|
||||
name: bill-service-config
|
||||
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
SERVER_PORT: "8082"
|
||||
DB_KIND: "postgresql"
|
||||
DB_HOST: "inquiry-postgresql"
|
||||
DB_PORT: "5432"
|
||||
DB_CONNECTION_TIMEOUT: "30000"
|
||||
DB_IDLE_TIMEOUT: "600000"
|
||||
DB_LEAK_DETECTION: "60000"
|
||||
DB_MAX_LIFETIME: "1800000"
|
||||
DB_MAX_POOL: "20"
|
||||
DB_MIN_IDLE: "5"
|
||||
KOS_BASE_URL: "http://kos-mock"
|
||||
DB_NAME: "inquirydb"
|
||||
REDIS_DATABASE: "1"
|
||||
REDIS_MAX_ACTIVE: "8"
|
||||
REDIS_MAX_IDLE: "8"
|
||||
REDIS_MAX_WAIT: "-1"
|
||||
REDIS_MIN_IDLE: "0"
|
||||
REDIS_TIMEOUT: "2000"
|
||||
KOS_BASE_URL: "http://kos-mock:8084"
|
||||
DDL_AUTO: "update"
|
||||
|
||||
@@ -2,6 +2,10 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: bill-service
|
||||
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
@@ -12,48 +16,42 @@ spec:
|
||||
labels:
|
||||
app: bill-service
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: phonebill
|
||||
containers:
|
||||
- name: bill-service
|
||||
image: acrdigitalgarage01.azurecr.io/phonebill/bill-service:latest
|
||||
image: docker.io/hiondal/bill-service:latest
|
||||
imagePullPolicy: Always
|
||||
ports:
|
||||
- containerPort: 8082
|
||||
name: http
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- configMapRef:
|
||||
name: cm-bill-service
|
||||
name: bill-service-config
|
||||
- secretRef:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
- secretRef:
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
resources:
|
||||
requests:
|
||||
cpu: 256m
|
||||
memory: 256Mi
|
||||
cpu: "256m"
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: 1024m
|
||||
memory: 1024Mi
|
||||
startupProbe:
|
||||
httpGet:
|
||||
path: /actuator/health
|
||||
port: 8082
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 6
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8082
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 5
|
||||
failureThreshold: 3
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/liveness
|
||||
port: 8082
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8082
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 3
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
@@ -1,10 +1,12 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
|
||||
DB_NAME: "bill_inquiry_db"
|
||||
DB_USERNAME: "bill_inquiry_user"
|
||||
DB_PASSWORD: "BillUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -2,10 +2,16 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: bill-service
|
||||
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
app: bill-service
|
||||
ports:
|
||||
- port: 80
|
||||
- name: http
|
||||
port: 8082
|
||||
targetPort: 8082
|
||||
type: ClusterIP
|
||||
protocol: TCP
|
||||
|
||||
@@ -1,11 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill-dg0500.20.214.196.128.nip.io"
|
||||
JWT_ACCESS_TOKEN_VALIDITY: "18000000"
|
||||
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
|
||||
SPRING_PROFILES_ACTIVE: "prod"
|
||||
REDIS_HOST: "cache-redis-master"
|
||||
REDIS_PORT: "6379"
|
||||
SPRING_PROFILES_ACTIVE: "dev"
|
||||
DDL_AUTO: "update"
|
||||
CORS_ALLOWED_ORIGINS: "http://localhost:3000,http://phonebill.72.155.72.236.nip.io"
|
||||
SHOW_SQL: "false"
|
||||
DDL_AUTO: "none"
|
||||
|
||||
@@ -1,49 +1,25 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: phonebill
|
||||
name: phonebill-ingress
|
||||
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: nginx
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||
nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
|
||||
spec:
|
||||
ingressClassName: nginx
|
||||
rules:
|
||||
- host: phonebill-dg0500-api.20.214.196.128.nip.io
|
||||
- host: phonebill-api.72.155.72.236.nip.io
|
||||
http:
|
||||
paths:
|
||||
- path: /api/v1/auth
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
name: api-gateway
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/users
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/bills
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: bill-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/products
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: product-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/kos
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: kos-mock
|
||||
port:
|
||||
number: 80
|
||||
|
||||
number: 8080
|
||||
|
||||
@@ -1,9 +1,13 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
|
||||
REDIS_HOST: "redis-cache-dev-master"
|
||||
REDIS_PASSWORD: "Redis2025Dev@"
|
||||
# JWT Secret (최소 256비트 이상, HS256 알고리즘용)
|
||||
JWT_SECRET: "EK1ZV7vROOXREXbYe/BCISdQq0Yklk9JtoA2v88ux1DBDc0bDGiRRxHeDSb7GHkDP9IUYHMVsBi4/1rS4OhfRg=="
|
||||
# Redis 비밀번호 (비밀번호 없는 경우 빈 값)
|
||||
REDIS_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -1,16 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: phonebill
|
||||
type: kubernetes.io/dockerconfigjson
|
||||
stringData:
|
||||
.dockerconfigjson: |
|
||||
{
|
||||
"auths": {
|
||||
"acrdigitalgarage01.azurecr.io": {
|
||||
"username": "acrdigitalgarage01",
|
||||
"password": "+OY+rmOagorjWvQe/tTk6oqvnZI8SmNbY/Y2o5EDcY+ACRDCDbYk",
|
||||
"auth": "YWNyZGlnaXRhbGdhcmFnZTAxOitPWStybU9hZ29yald2UWUvdFRrNm9xdm5aSThTbU5iWS9ZMm81RURjWStBQ1JEQ0RiWWs="
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,6 +1,10 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-kos-mock
|
||||
name: kos-mock-config
|
||||
|
||||
labels:
|
||||
app: kos-mock
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
SERVER_PORT: "8084"
|
||||
SERVER_PORT: "8084"
|
||||
|
||||
@@ -2,6 +2,10 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: kos-mock
|
||||
|
||||
labels:
|
||||
app: kos-mock
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
@@ -12,46 +16,40 @@ spec:
|
||||
labels:
|
||||
app: kos-mock
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: phonebill
|
||||
containers:
|
||||
- name: kos-mock
|
||||
image: acrdigitalgarage01.azurecr.io/phonebill/kos-mock:latest
|
||||
image: docker.io/hiondal/kos-mock:latest
|
||||
imagePullPolicy: Always
|
||||
ports:
|
||||
- containerPort: 8084
|
||||
name: http
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- configMapRef:
|
||||
name: cm-kos-mock
|
||||
name: kos-mock-config
|
||||
- secretRef:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
resources:
|
||||
requests:
|
||||
cpu: 256m
|
||||
memory: 256Mi
|
||||
cpu: "256m"
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: 1024m
|
||||
memory: 1024Mi
|
||||
startupProbe:
|
||||
httpGet:
|
||||
path: /actuator/health
|
||||
port: 8084
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 6
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8084
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 5
|
||||
failureThreshold: 3
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/liveness
|
||||
port: 8084
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8084
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 3
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
@@ -2,10 +2,16 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: kos-mock
|
||||
|
||||
labels:
|
||||
app: kos-mock
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
app: kos-mock
|
||||
ports:
|
||||
- port: 80
|
||||
- name: http
|
||||
port: 8084
|
||||
targetPort: 8084
|
||||
type: ClusterIP
|
||||
protocol: TCP
|
||||
|
||||
@@ -8,7 +8,6 @@ resources:
|
||||
# Common resources
|
||||
- common/cm-common.yaml
|
||||
- common/secret-common.yaml
|
||||
- common/secret-imagepull.yaml
|
||||
- common/ingress.yaml
|
||||
|
||||
# api-gateway
|
||||
@@ -44,13 +43,13 @@ commonLabels:
|
||||
version: v1
|
||||
|
||||
images:
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
|
||||
- name: docker.io/hiondal/api-gateway
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
|
||||
- name: docker.io/hiondal/user-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
|
||||
- name: docker.io/hiondal/bill-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
|
||||
- name: docker.io/hiondal/product-service
|
||||
newTag: latest
|
||||
- name: docker.io/hiondal/kos-mock
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
|
||||
newTag: latest
|
||||
@@ -1,10 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-product-service
|
||||
name: product-service-config
|
||||
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
SERVER_PORT: "8083"
|
||||
DB_KIND: "postgresql"
|
||||
DB_HOST: "change-postgresql"
|
||||
DB_PORT: "5432"
|
||||
KOS_BASE_URL: "http://kos-mock"
|
||||
REDIS_DATABASE: "2"
|
||||
DB_NAME: "changedb"
|
||||
REDIS_DATABASE: "2"
|
||||
KOS_BASE_URL: "http://kos-mock:8084"
|
||||
DDL_AUTO: "update"
|
||||
|
||||
@@ -2,6 +2,10 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: product-service
|
||||
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
@@ -12,48 +16,42 @@ spec:
|
||||
labels:
|
||||
app: product-service
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: phonebill
|
||||
containers:
|
||||
- name: product-service
|
||||
image: acrdigitalgarage01.azurecr.io/phonebill/product-service:latest
|
||||
image: docker.io/hiondal/product-service:latest
|
||||
imagePullPolicy: Always
|
||||
ports:
|
||||
- containerPort: 8083
|
||||
name: http
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- configMapRef:
|
||||
name: cm-product-service
|
||||
name: product-service-config
|
||||
- secretRef:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
- secretRef:
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
resources:
|
||||
requests:
|
||||
cpu: 256m
|
||||
memory: 256Mi
|
||||
cpu: "256m"
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: 1024m
|
||||
memory: 1024Mi
|
||||
startupProbe:
|
||||
httpGet:
|
||||
path: /actuator/health
|
||||
port: 8083
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 6
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8083
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 5
|
||||
failureThreshold: 3
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/liveness
|
||||
port: 8083
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8083
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 3
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
@@ -1,10 +1,12 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "product-change-postgres-dev-postgresql"
|
||||
DB_NAME: "product_change_db"
|
||||
DB_USERNAME: "product_change_user"
|
||||
DB_PASSWORD: "ProductUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -2,10 +2,16 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: product-service
|
||||
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
app: product-service
|
||||
ports:
|
||||
- port: 80
|
||||
- name: http
|
||||
port: 8083
|
||||
targetPort: 8083
|
||||
type: ClusterIP
|
||||
protocol: TCP
|
||||
|
||||
@@ -1,11 +1,15 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-user-service
|
||||
name: user-service-config
|
||||
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
SERVER_PORT: "8081"
|
||||
DB_KIND: "postgresql"
|
||||
DB_HOST: "auth-postgresql"
|
||||
DB_PORT: "5432"
|
||||
DDL_AUTO: "update"
|
||||
DB_NAME: "authdb"
|
||||
REDIS_DATABASE: "0"
|
||||
SHOW_SQL: "true"
|
||||
DDL_AUTO: "update"
|
||||
|
||||
@@ -2,6 +2,10 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: user-service
|
||||
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
@@ -12,48 +16,42 @@ spec:
|
||||
labels:
|
||||
app: user-service
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: phonebill
|
||||
containers:
|
||||
- name: user-service
|
||||
image: acrdigitalgarage01.azurecr.io/phonebill/user-service:latest
|
||||
image: docker.io/hiondal/user-service:latest
|
||||
imagePullPolicy: Always
|
||||
ports:
|
||||
- containerPort: 8081
|
||||
name: http
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- configMapRef:
|
||||
name: cm-user-service
|
||||
name: user-service-config
|
||||
- secretRef:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
- secretRef:
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
resources:
|
||||
requests:
|
||||
cpu: 256m
|
||||
memory: 256Mi
|
||||
cpu: "256m"
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: 1024m
|
||||
memory: 1024Mi
|
||||
startupProbe:
|
||||
httpGet:
|
||||
path: /actuator/health
|
||||
port: 8081
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 6
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8081
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 5
|
||||
failureThreshold: 3
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/liveness
|
||||
port: 8081
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /actuator/health/readiness
|
||||
port: 8081
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
failureThreshold: 3
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
@@ -1,10 +1,12 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "auth-postgres-dev-postgresql"
|
||||
DB_NAME: "phonebill_auth"
|
||||
DB_USERNAME: "auth_user"
|
||||
DB_PASSWORD: "AuthUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -2,10 +2,16 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: user-service
|
||||
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
app: user-service
|
||||
ports:
|
||||
- port: 80
|
||||
- name: http
|
||||
port: 8081
|
||||
targetPort: 8081
|
||||
type: ClusterIP
|
||||
protocol: TCP
|
||||
|
||||
@@ -1,11 +1,13 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill-dg0500.20.214.196.128.nip.io"
|
||||
JWT_ACCESS_TOKEN_VALIDITY: "18000000"
|
||||
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
|
||||
REDIS_PORT: "6379"
|
||||
SPRING_PROFILES_ACTIVE: "dev"
|
||||
DDL_AUTO: "update"
|
||||
REDIS_HOST: "cache-redis-master"
|
||||
REDIS_PORT: "6379"
|
||||
CORS_ALLOWED_ORIGINS: "http://localhost:3000,http://phonebill.72.155.72.236.nip.io"
|
||||
SHOW_SQL: "true"
|
||||
DDL_AUTO: "update"
|
||||
|
||||
@@ -14,4 +14,4 @@ spec:
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
memory: "1024Mi"
|
||||
|
||||
@@ -14,4 +14,4 @@ spec:
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
memory: "1024Mi"
|
||||
|
||||
@@ -14,4 +14,4 @@ spec:
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
memory: "1024Mi"
|
||||
|
||||
@@ -14,4 +14,4 @@ spec:
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
memory: "1024Mi"
|
||||
|
||||
@@ -14,4 +14,4 @@ spec:
|
||||
memory: "256Mi"
|
||||
limits:
|
||||
cpu: "1024m"
|
||||
memory: "1024Mi"
|
||||
memory: "1024Mi"
|
||||
|
||||
@@ -1,48 +1,25 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: phonebill
|
||||
name: phonebill-ingress
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: nginx
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||
nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
spec:
|
||||
ingressClassName: nginx
|
||||
rules:
|
||||
- host: phonebill-dg0500-api.20.214.196.128.nip.io
|
||||
- host: phonebill-api.72.155.72.236.nip.io
|
||||
http:
|
||||
paths:
|
||||
- path: /api/v1/auth
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
name: api-gateway
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/users
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/bills
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: bill-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/products
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: product-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/kos
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: kos-mock
|
||||
port:
|
||||
number: 80
|
||||
number: 8080
|
||||
|
||||
@@ -1,16 +1,27 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
|
||||
namespace: phonebill-dg0500
|
||||
namespace: phonebill
|
||||
|
||||
resources:
|
||||
- ../../base
|
||||
|
||||
patches:
|
||||
# Common patches
|
||||
- path: cm-common-patch.yaml
|
||||
target:
|
||||
kind: ConfigMap
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- path: secret-common-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: phonebill-common-secret
|
||||
- path: ingress-patch.yaml
|
||||
target:
|
||||
kind: Ingress
|
||||
name: phonebill-ingress
|
||||
|
||||
# Deployment patches
|
||||
- path: deployment-api-gateway-patch.yaml
|
||||
target:
|
||||
kind: Deployment
|
||||
@@ -31,35 +42,29 @@ patches:
|
||||
target:
|
||||
kind: Deployment
|
||||
name: kos-mock
|
||||
- path: ingress-patch.yaml
|
||||
target:
|
||||
kind: Ingress
|
||||
name: phonebill
|
||||
- path: secret-common-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-common
|
||||
|
||||
# Service Secret patches
|
||||
- path: secret-user-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
- path: secret-bill-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
- path: secret-product-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
|
||||
images:
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
|
||||
- name: docker.io/hiondal/api-gateway
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
|
||||
- name: docker.io/hiondal/user-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
|
||||
- name: docker.io/hiondal/bill-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
|
||||
- name: docker.io/hiondal/product-service
|
||||
newTag: latest
|
||||
- name: docker.io/hiondal/kos-mock
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
|
||||
newTag: latest
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
|
||||
DB_NAME: "bill_inquiry_db"
|
||||
DB_USERNAME: "bill_inquiry_user"
|
||||
DB_PASSWORD: "BillUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -1,9 +1,10 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
|
||||
REDIS_HOST: "redis-cache-dev-master"
|
||||
REDIS_PASSWORD: "Redis2025Dev@"
|
||||
JWT_SECRET: "EK1ZV7vROOXREXbYe/BCISdQq0Yklk9JtoA2v88ux1DBDc0bDGiRRxHeDSb7GHkDP9IUYHMVsBi4/1rS4OhfRg=="
|
||||
REDIS_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "product-change-postgres-dev-postgresql"
|
||||
DB_NAME: "product_change_db"
|
||||
DB_USERNAME: "product_change_user"
|
||||
DB_PASSWORD: "ProductUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "auth-postgres-dev-postgresql"
|
||||
DB_NAME: "phonebill_auth"
|
||||
DB_USERNAME: "auth_user"
|
||||
DB_PASSWORD: "AuthUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "P@ssw0rd$"
|
||||
|
||||
@@ -1,11 +1,13 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill-dg0500.20.214.196.128.nip.io"
|
||||
JWT_ACCESS_TOKEN_VALIDITY: "3600000"
|
||||
JWT_REFRESH_TOKEN_VALIDITY: "43200000"
|
||||
REDIS_PORT: "6379"
|
||||
SPRING_PROFILES_ACTIVE: "prod"
|
||||
DDL_AUTO: "validate"
|
||||
REDIS_HOST: "cache-redis-master"
|
||||
REDIS_PORT: "6379"
|
||||
CORS_ALLOWED_ORIGINS: "https://phonebill.example.com"
|
||||
SHOW_SQL: "false"
|
||||
DDL_AUTO: "validate"
|
||||
|
||||
@@ -1,9 +1,14 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: phonebill
|
||||
name: phonebill-ingress
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: nginx
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||
nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
spec:
|
||||
@@ -16,38 +21,10 @@ spec:
|
||||
- host: phonebill.example.com
|
||||
http:
|
||||
paths:
|
||||
- path: /api/v1/auth
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
name: api-gateway
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/users
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/bills
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: bill-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/products
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: product-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/kos
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: kos-mock
|
||||
port:
|
||||
number: 80
|
||||
number: 8080
|
||||
|
||||
@@ -1,16 +1,27 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
|
||||
namespace: phonebill-dg0500
|
||||
namespace: phonebill-prod
|
||||
|
||||
resources:
|
||||
- ../../base
|
||||
|
||||
patches:
|
||||
# Common patches
|
||||
- path: cm-common-patch.yaml
|
||||
target:
|
||||
kind: ConfigMap
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- path: secret-common-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: phonebill-common-secret
|
||||
- path: ingress-patch.yaml
|
||||
target:
|
||||
kind: Ingress
|
||||
name: phonebill-ingress
|
||||
|
||||
# Deployment patches
|
||||
- path: deployment-api-gateway-patch.yaml
|
||||
target:
|
||||
kind: Deployment
|
||||
@@ -31,35 +42,29 @@ patches:
|
||||
target:
|
||||
kind: Deployment
|
||||
name: kos-mock
|
||||
- path: ingress-patch.yaml
|
||||
target:
|
||||
kind: Ingress
|
||||
name: phonebill
|
||||
- path: secret-common-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-common
|
||||
|
||||
# Service Secret patches
|
||||
- path: secret-user-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
- path: secret-bill-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
- path: secret-product-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
|
||||
images:
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
|
||||
- name: docker.io/hiondal/api-gateway
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
|
||||
- name: docker.io/hiondal/user-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
|
||||
- name: docker.io/hiondal/bill-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
|
||||
- name: docker.io/hiondal/product-service
|
||||
newTag: latest
|
||||
- name: docker.io/hiondal/kos-mock
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
|
||||
newTag: latest
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
|
||||
DB_NAME: "bill_inquiry_db"
|
||||
DB_USERNAME: "bill_inquiry_user"
|
||||
DB_PASSWORD: "BillUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "PROD_DB_PASSWORD"
|
||||
|
||||
@@ -1,9 +1,10 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
|
||||
REDIS_HOST: "redis-cache-dev-master"
|
||||
REDIS_PASSWORD: "Redis2025Dev@"
|
||||
JWT_SECRET: "PROD_JWT_SECRET_REPLACE_WITH_SECURE_VALUE"
|
||||
REDIS_PASSWORD: "PROD_REDIS_PASSWORD"
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "product-change-postgres-dev-postgresql"
|
||||
DB_NAME: "product_change_db"
|
||||
DB_USERNAME: "product_change_user"
|
||||
DB_PASSWORD: "ProductUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "PROD_DB_PASSWORD"
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "auth-postgres-dev-postgresql"
|
||||
DB_NAME: "phonebill_auth"
|
||||
DB_USERNAME: "auth_user"
|
||||
DB_PASSWORD: "AuthUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "PROD_DB_PASSWORD"
|
||||
|
||||
@@ -1,11 +1,13 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
data:
|
||||
CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill-dg0500.20.214.196.128.nip.io"
|
||||
JWT_ACCESS_TOKEN_VALIDITY: "18000000"
|
||||
JWT_REFRESH_TOKEN_VALIDITY: "86400000"
|
||||
REDIS_PORT: "6379"
|
||||
SPRING_PROFILES_ACTIVE: "staging"
|
||||
DDL_AUTO: "validate"
|
||||
REDIS_HOST: "cache-redis-master"
|
||||
REDIS_PORT: "6379"
|
||||
CORS_ALLOWED_ORIGINS: "https://phonebill-staging.example.com"
|
||||
SHOW_SQL: "false"
|
||||
DDL_AUTO: "validate"
|
||||
|
||||
@@ -14,4 +14,4 @@ spec:
|
||||
memory: "512Mi"
|
||||
limits:
|
||||
cpu: "2048m"
|
||||
memory: "2048Mi"
|
||||
memory: "2048Mi"
|
||||
|
||||
@@ -1,11 +1,16 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: phonebill
|
||||
name: phonebill-ingress
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: nginx
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||
nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-staging"
|
||||
spec:
|
||||
ingressClassName: nginx
|
||||
tls:
|
||||
@@ -16,38 +21,10 @@ spec:
|
||||
- host: phonebill-staging.example.com
|
||||
http:
|
||||
paths:
|
||||
- path: /api/v1/auth
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
name: api-gateway
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/users
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: user-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/bills
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: bill-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/products
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: product-service
|
||||
port:
|
||||
number: 80
|
||||
- path: /api/v1/kos
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: kos-mock
|
||||
port:
|
||||
number: 80
|
||||
number: 8080
|
||||
|
||||
@@ -1,16 +1,27 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
|
||||
namespace: phonebill-dg0500
|
||||
namespace: phonebill-staging
|
||||
|
||||
resources:
|
||||
- ../../base
|
||||
|
||||
patches:
|
||||
# Common patches
|
||||
- path: cm-common-patch.yaml
|
||||
target:
|
||||
kind: ConfigMap
|
||||
name: cm-common
|
||||
name: phonebill-common-config
|
||||
- path: secret-common-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: phonebill-common-secret
|
||||
- path: ingress-patch.yaml
|
||||
target:
|
||||
kind: Ingress
|
||||
name: phonebill-ingress
|
||||
|
||||
# Deployment patches
|
||||
- path: deployment-api-gateway-patch.yaml
|
||||
target:
|
||||
kind: Deployment
|
||||
@@ -31,35 +42,29 @@ patches:
|
||||
target:
|
||||
kind: Deployment
|
||||
name: kos-mock
|
||||
- path: ingress-patch.yaml
|
||||
target:
|
||||
kind: Ingress
|
||||
name: phonebill
|
||||
- path: secret-common-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-common
|
||||
|
||||
# Service Secret patches
|
||||
- path: secret-user-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
- path: secret-bill-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
- path: secret-product-service-patch.yaml
|
||||
target:
|
||||
kind: Secret
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
|
||||
images:
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/api-gateway
|
||||
- name: docker.io/hiondal/api-gateway
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/user-service
|
||||
- name: docker.io/hiondal/user-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/bill-service
|
||||
- name: docker.io/hiondal/bill-service
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/product-service
|
||||
- name: docker.io/hiondal/product-service
|
||||
newTag: latest
|
||||
- name: docker.io/hiondal/kos-mock
|
||||
newTag: latest
|
||||
- name: acrdigitalgarage01.azurecr.io/phonebill/kos-mock
|
||||
newTag: latest
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-bill-service
|
||||
name: bill-service-db-secret
|
||||
labels:
|
||||
app: bill-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "bill-inquiry-postgres-dev-postgresql"
|
||||
DB_NAME: "bill_inquiry_db"
|
||||
DB_USERNAME: "bill_inquiry_user"
|
||||
DB_PASSWORD: "BillUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "STAGING_DB_PASSWORD"
|
||||
|
||||
@@ -1,9 +1,10 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-common
|
||||
name: phonebill-common-secret
|
||||
labels:
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
|
||||
REDIS_HOST: "redis-cache-dev-master"
|
||||
REDIS_PASSWORD: "Redis2025Dev@"
|
||||
JWT_SECRET: "STAGING_JWT_SECRET_REPLACE_WITH_SECURE_VALUE"
|
||||
REDIS_PASSWORD: "STAGING_REDIS_PASSWORD"
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-product-service
|
||||
name: product-service-db-secret
|
||||
labels:
|
||||
app: product-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "product-change-postgres-dev-postgresql"
|
||||
DB_NAME: "product_change_db"
|
||||
DB_USERNAME: "product_change_user"
|
||||
DB_PASSWORD: "ProductUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "STAGING_DB_PASSWORD"
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-user-service
|
||||
name: user-service-db-secret
|
||||
labels:
|
||||
app: user-service
|
||||
app.kubernetes.io/part-of: phonebill
|
||||
type: Opaque
|
||||
stringData:
|
||||
DB_HOST: "auth-postgres-dev-postgresql"
|
||||
DB_NAME: "phonebill_auth"
|
||||
DB_USERNAME: "auth_user"
|
||||
DB_PASSWORD: "AuthUser2025@"
|
||||
DB_USERNAME: "unicorn"
|
||||
DB_PASSWORD: "STAGING_DB_PASSWORD"
|
||||
|
||||
@@ -4,40 +4,35 @@ set -e
|
||||
ENVIRONMENT=${1:-dev}
|
||||
IMAGE_TAG=${2:-latest}
|
||||
|
||||
echo "🚀 Starting deployment for environment: $ENVIRONMENT with image tag: $IMAGE_TAG"
|
||||
echo "🚀 Deploying to ${ENVIRONMENT} environment with tag ${IMAGE_TAG}..."
|
||||
|
||||
# 환경별 설정 파일 로드
|
||||
source "$(dirname "$0")/../config/deploy_env_vars_${ENVIRONMENT}"
|
||||
|
||||
# 환경별 이미지 태그 업데이트
|
||||
cd deployment/cicd/kustomize/overlays/${ENVIRONMENT}
|
||||
cd "$(dirname "$0")/../kustomize/overlays/${ENVIRONMENT}"
|
||||
|
||||
# 서비스 목록 (공백으로 구분)
|
||||
# 서비스 목록
|
||||
services="api-gateway user-service bill-service product-service kos-mock"
|
||||
|
||||
echo "📦 Updating image tags for services: $services"
|
||||
|
||||
# 각 서비스 이미지 태그 업데이트
|
||||
for service in $services; do
|
||||
echo " - Updating $service to ${ENVIRONMENT}-${IMAGE_TAG}"
|
||||
kustomize edit set image acrdigitalgarage01.azurecr.io/phonebill/$service:${ENVIRONMENT}-${IMAGE_TAG}
|
||||
echo "📦 Updating image tag for ${service}..."
|
||||
kustomize edit set image docker.io/hiondal/$service:${ENVIRONMENT}-${IMAGE_TAG}
|
||||
done
|
||||
|
||||
echo "🔧 Applying Kubernetes manifests..."
|
||||
# 배포 실행
|
||||
echo "📋 Applying Kustomize manifests..."
|
||||
kubectl apply -k .
|
||||
|
||||
echo "⏳ Waiting for deployments to be ready..."
|
||||
# 배포 상태 확인
|
||||
echo "⏳ Waiting for deployments to be ready..."
|
||||
for service in $services; do
|
||||
echo " - Checking rollout status for $service"
|
||||
kubectl rollout status deployment/$service -n phonebill-dg0500 --timeout=300s
|
||||
echo " Checking ${service}..."
|
||||
kubectl rollout status deployment/$service -n ${namespace} --timeout=300s || echo " ⚠️ Timeout waiting for ${service}"
|
||||
done
|
||||
|
||||
echo "✅ Deployment completed successfully!"
|
||||
echo ""
|
||||
echo "📊 Current deployment status:"
|
||||
kubectl get pods -n phonebill-dg0500 -o wide
|
||||
echo ""
|
||||
echo "🌐 Service endpoints:"
|
||||
kubectl get services -n phonebill-dg0500
|
||||
echo ""
|
||||
echo "🔗 Ingress information:"
|
||||
kubectl get ingress -n phonebill-dg0500
|
||||
echo "📊 Current status:"
|
||||
kubectl get pods -n ${namespace}
|
||||
|
||||
@@ -1,14 +1,13 @@
|
||||
#!/bin/bash
|
||||
# Base 리소스 누락 검증 스크립트 (phonebill 전용)
|
||||
# Base 리소스 누락 검증 스크립트
|
||||
|
||||
echo "🔍 phonebill Base 리소스 누락 검증 시작..."
|
||||
echo "🔍 Phonebill Base 리소스 누락 검증 시작..."
|
||||
|
||||
BASE_DIR="deployment/cicd/kustomize/base"
|
||||
MISSING_RESOURCES=0
|
||||
REQUIRED_FILES=("deployment.yaml" "service.yaml")
|
||||
OPTIONAL_FILES=("cm-" "secret-")
|
||||
|
||||
# 1. 각 서비스 디렉토리의 파일 확인
|
||||
echo ""
|
||||
echo "1. 서비스 디렉토리별 파일 목록:"
|
||||
for dir in $BASE_DIR/*/; do
|
||||
if [ -d "$dir" ] && [[ $(basename "$dir") != "common" ]]; then
|
||||
@@ -16,24 +15,33 @@ for dir in $BASE_DIR/*/; do
|
||||
echo "=== $service ==="
|
||||
|
||||
# 필수 파일 확인
|
||||
for required in "${REQUIRED_FILES[@]}"; do
|
||||
if [ -f "$dir$required" ]; then
|
||||
echo " ✅ $required"
|
||||
else
|
||||
echo " ❌ MISSING REQUIRED: $required"
|
||||
((MISSING_RESOURCES++))
|
||||
fi
|
||||
done
|
||||
if [ -f "$dir/deployment.yaml" ]; then
|
||||
echo " ✅ deployment.yaml"
|
||||
else
|
||||
echo " ❌ MISSING REQUIRED: deployment.yaml"
|
||||
((MISSING_RESOURCES++))
|
||||
fi
|
||||
|
||||
# 선택적 파일 확인
|
||||
for optional in "${OPTIONAL_FILES[@]}"; do
|
||||
files=($(ls "$dir"$optional*".yaml" 2>/dev/null))
|
||||
if [ ${#files[@]} -gt 0 ]; then
|
||||
for file in "${files[@]}"; do
|
||||
echo " ✅ $(basename "$file")"
|
||||
done
|
||||
fi
|
||||
done
|
||||
if [ -f "$dir/service.yaml" ]; then
|
||||
echo " ✅ service.yaml"
|
||||
else
|
||||
echo " ❌ MISSING REQUIRED: service.yaml"
|
||||
((MISSING_RESOURCES++))
|
||||
fi
|
||||
|
||||
# ConfigMap 확인
|
||||
if ls "$dir"cm-*.yaml 1> /dev/null 2>&1; then
|
||||
for file in "$dir"cm-*.yaml; do
|
||||
echo " ✅ $(basename "$file")"
|
||||
done
|
||||
fi
|
||||
|
||||
# Secret 확인
|
||||
if ls "$dir"secret-*.yaml 1> /dev/null 2>&1; then
|
||||
for file in "$dir"secret-*.yaml; do
|
||||
echo " ✅ $(basename "$file")"
|
||||
done
|
||||
fi
|
||||
echo ""
|
||||
fi
|
||||
done
|
||||
@@ -42,15 +50,11 @@ done
|
||||
echo "2. Common 리소스 확인:"
|
||||
COMMON_DIR="$BASE_DIR/common"
|
||||
if [ -d "$COMMON_DIR" ]; then
|
||||
common_files=($(ls "$COMMON_DIR"/*.yaml 2>/dev/null))
|
||||
if [ ${#common_files[@]} -gt 0 ]; then
|
||||
for file in "${common_files[@]}"; do
|
||||
for file in "$COMMON_DIR"/*.yaml; do
|
||||
if [ -f "$file" ]; then
|
||||
echo " ✅ common/$(basename "$file")"
|
||||
done
|
||||
else
|
||||
echo " ❌ Common 디렉토리에 YAML 파일이 없습니다"
|
||||
((MISSING_RESOURCES++))
|
||||
fi
|
||||
fi
|
||||
done
|
||||
else
|
||||
echo " ❌ Common 디렉토리가 없습니다"
|
||||
((MISSING_RESOURCES++))
|
||||
@@ -61,9 +65,8 @@ echo ""
|
||||
echo "3. kustomization.yaml 리소스 검증:"
|
||||
if [ -f "$BASE_DIR/kustomization.yaml" ]; then
|
||||
while IFS= read -r line; do
|
||||
# resources 섹션의 YAML 파일 경로 추출
|
||||
if [[ $line =~ ^[[:space:]]*-[[:space:]]*([^#]+\.yaml)[[:space:]]*$ ]]; then
|
||||
resource_path=$(echo "${BASH_REMATCH[1]}" | xargs) # 공백 제거
|
||||
resource_path=$(echo "${BASH_REMATCH[1]}" | xargs)
|
||||
full_path="$BASE_DIR/$resource_path"
|
||||
if [ -f "$full_path" ]; then
|
||||
echo " ✅ $resource_path"
|
||||
@@ -125,4 +128,4 @@ else
|
||||
echo " - Secret: secret-{서비스명}.yaml"
|
||||
echo "4. 다시 검증: ./scripts/validate-resources.sh"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user