Jenkins 기반 CI/CD 파이프라인 구성

- Kustomize 기반 환경별(dev/staging/prod) 매니페스트 관리
- Jenkins 파이프라인 스크립트 작성 (Podman, Gradle, kubectl 컨테이너)
- SonarQube 코드 품질 분석 및 Quality Gate 연동
- 수동 배포 및 리소스 검증 스크립트 추가
- k8s 매니페스트 구조 재정리 (configmaps, secrets, deployments, services 분리)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

deployment/cicd/kustomize/base/common/cm-common.yaml

@@ -1,11 +1,14 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: cm-common
+  name: phonebill-common-config
+  
+  labels:
+    app.kubernetes.io/part-of: phonebill
 data:
-  CORS_ALLOWED_ORIGINS: "http://localhost:8081,http://localhost:8082,http://localhost:8083,http://localhost:8084,http://phonebill-dg0500.20.214.196.128.nip.io"
-  JWT_ACCESS_TOKEN_VALIDITY: "18000000"
-  JWT_REFRESH_TOKEN_VALIDITY: "86400000"
+  SPRING_PROFILES_ACTIVE: "prod"
+  REDIS_HOST: "cache-redis-master"
   REDIS_PORT: "6379"
-  SPRING_PROFILES_ACTIVE: "dev"
-  DDL_AUTO: "update"
+  CORS_ALLOWED_ORIGINS: "http://localhost:3000,http://phonebill.72.155.72.236.nip.io"
+  SHOW_SQL: "false"
+  DDL_AUTO: "none"

deployment/cicd/kustomize/base/common/ingress.yaml

@@ -1,49 +1,25 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: phonebill
+  name: phonebill-ingress
+  
+  labels:
+    app.kubernetes.io/part-of: phonebill
   annotations:
-    kubernetes.io/ingress.class: nginx
-    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.ingress.kubernetes.io/proxy-body-size: "50m"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
 spec:
   ingressClassName: nginx
   rules:
-  - host: phonebill-dg0500-api.20.214.196.128.nip.io
+  - host: phonebill-api.72.155.72.236.nip.io
     http:
       paths:
-      - path: /api/v1/auth
+      - path: /
         pathType: Prefix
         backend:
           service:
-            name: user-service
+            name: api-gateway
             port:
-              number: 80
-      - path: /api/v1/users
-        pathType: Prefix
-        backend:
-          service:
-            name: user-service
-            port:
-              number: 80
-      - path: /api/v1/bills
-        pathType: Prefix
-        backend:
-          service:
-            name: bill-service
-            port:
-              number: 80
-      - path: /api/v1/products
-        pathType: Prefix
-        backend:
-          service:
-            name: product-service
-            port:
-              number: 80
-      - path: /api/v1/kos
-        pathType: Prefix
-        backend:
-          service:
-            name: kos-mock
-            port:
-              number: 80
-
+              number: 8080

deployment/cicd/kustomize/base/common/secret-common.yaml

@@ -1,9 +1,13 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: secret-common
+  name: phonebill-common-secret
+  
+  labels:
+    app.kubernetes.io/part-of: phonebill
 type: Opaque
 stringData:
-  JWT_SECRET: "nwe5Yo9qaJ6FBD/Thl2/j6/SFAfNwUorAY1ZcWO2KI7uA4bmVLOCPxE9hYuUpRCOkgV2UF2DdHXtqHi3+BU/ecbz2zpHyf/720h48UbA3XOMYOX1sdM+dQ=="
-  REDIS_HOST: "redis-cache-dev-master"
-  REDIS_PASSWORD: "Redis2025Dev@"
+  # JWT Secret (최소 256비트 이상, HS256 알고리즘용)
+  JWT_SECRET: "EK1ZV7vROOXREXbYe/BCISdQq0Yklk9JtoA2v88ux1DBDc0bDGiRRxHeDSb7GHkDP9IUYHMVsBi4/1rS4OhfRg=="
+  # Redis 비밀번호 (비밀번호 없는 경우 빈 값)
+  REDIS_PASSWORD: "P@ssw0rd$"

deployment/cicd/kustomize/base/common/secret-imagepull.yaml

@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: phonebill
-type: kubernetes.io/dockerconfigjson
-stringData:
-  .dockerconfigjson: |
-    {
-      "auths": {
-        "acrdigitalgarage01.azurecr.io": {
-          "username": "acrdigitalgarage01",
-          "password": "+OY+rmOagorjWvQe/tTk6oqvnZI8SmNbY/Y2o5EDcY+ACRDCDbYk",
-          "auth": "YWNyZGlnaXRhbGdhcmFnZTAxOitPWStybU9hZ29yald2UWUvdFRrNm9xdm5aSThTbU5iWS9ZMm81RURjWStBQ1JEQ0RiWWs="
-        }
-      }
-    }