Jenkins 기반 CI/CD 파이프라인 구성

- Kustomize 기반 환경별(dev/staging/prod) 매니페스트 관리
- Jenkins 파이프라인 스크립트 작성 (Podman, Gradle, kubectl 컨테이너)
- SonarQube 코드 품질 분석 및 Quality Gate 연동
- 수동 배포 및 리소스 검증 스크립트 추가
- k8s 매니페스트 구조 재정리 (configmaps, secrets, deployments, services 분리)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

deployment/cicd/kustomize/base/bill-service/cm-bill-service.yaml

@@ -1,21 +1,16 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: cm-bill-service
+  name: bill-service-config
+  
+  labels:
+    app: bill-service
+    app.kubernetes.io/part-of: phonebill
 data:
   SERVER_PORT: "8082"
-  DB_KIND: "postgresql"
+  DB_HOST: "inquiry-postgresql"
   DB_PORT: "5432"
-  DB_CONNECTION_TIMEOUT: "30000"
-  DB_IDLE_TIMEOUT: "600000"
-  DB_LEAK_DETECTION: "60000"
-  DB_MAX_LIFETIME: "1800000"
-  DB_MAX_POOL: "20"
-  DB_MIN_IDLE: "5"
-  KOS_BASE_URL: "http://kos-mock"
+  DB_NAME: "inquirydb"
   REDIS_DATABASE: "1"
-  REDIS_MAX_ACTIVE: "8"
-  REDIS_MAX_IDLE: "8"
-  REDIS_MAX_WAIT: "-1"
-  REDIS_MIN_IDLE: "0"
-  REDIS_TIMEOUT: "2000"
+  KOS_BASE_URL: "http://kos-mock:8084"
+  DDL_AUTO: "update"

deployment/cicd/kustomize/base/bill-service/deployment.yaml

@@ -2,6 +2,10 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: bill-service
+  
+  labels:
+    app: bill-service
+    app.kubernetes.io/part-of: phonebill
 spec:
   replicas: 1
   selector:
@@ -12,48 +16,42 @@ spec:
       labels:
         app: bill-service
     spec:
-      imagePullSecrets:
-      - name: phonebill
       containers:
       - name: bill-service
-        image: acrdigitalgarage01.azurecr.io/phonebill/bill-service:latest
+        image: docker.io/hiondal/bill-service:latest
         imagePullPolicy: Always
         ports:
         - containerPort: 8082
+          name: http
         envFrom:
         - configMapRef:
-            name: cm-common
+            name: phonebill-common-config
         - configMapRef:
-            name: cm-bill-service
+            name: bill-service-config
         - secretRef:
-            name: secret-common
+            name: phonebill-common-secret
         - secretRef:
-            name: secret-bill-service
+            name: bill-service-db-secret
         resources:
           requests:
-            cpu: 256m
-            memory: 256Mi
+            cpu: "256m"
+            memory: "256Mi"
           limits:
-            cpu: 1024m
-            memory: 1024Mi
-        startupProbe:
-          httpGet:
-            path: /actuator/health
-            port: 8082
-          initialDelaySeconds: 30
-          periodSeconds: 10
-          failureThreshold: 6
-        readinessProbe:
-          httpGet:
-            path: /actuator/health/readiness
-            port: 8082
-          initialDelaySeconds: 10
-          periodSeconds: 5
-          failureThreshold: 3
+            cpu: "1024m"
+            memory: "1024Mi"
         livenessProbe:
           httpGet:
             path: /actuator/health/liveness
             port: 8082
+          initialDelaySeconds: 60
+          periodSeconds: 10
+          timeoutSeconds: 5
+          failureThreshold: 3
+        readinessProbe:
+          httpGet:
+            path: /actuator/health/readiness
+            port: 8082
           initialDelaySeconds: 30
           periodSeconds: 10
-          failureThreshold: 3
+          timeoutSeconds: 5
+          failureThreshold: 3

deployment/cicd/kustomize/base/bill-service/secret-bill-service.yaml

@@ -1,10 +1,12 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: secret-bill-service
+  name: bill-service-db-secret
+  
+  labels:
+    app: bill-service
+    app.kubernetes.io/part-of: phonebill
 type: Opaque
 stringData:
-  DB_HOST: "bill-inquiry-postgres-dev-postgresql"
-  DB_NAME: "bill_inquiry_db"
-  DB_USERNAME: "bill_inquiry_user"
-  DB_PASSWORD: "BillUser2025@"
+  DB_USERNAME: "unicorn"
+  DB_PASSWORD: "P@ssw0rd$"

deployment/cicd/kustomize/base/bill-service/service.yaml

@@ -2,10 +2,16 @@ apiVersion: v1
 kind: Service
 metadata:
   name: bill-service
+  
+  labels:
+    app: bill-service
+    app.kubernetes.io/part-of: phonebill
 spec:
+  type: ClusterIP
   selector:
     app: bill-service
   ports:
-  - port: 80
+  - name: http
+    port: 8082
     targetPort: 8082
-  type: ClusterIP
+    protocol: TCP