NCP와 함께하는 쿠버네티스 구축

11. VPC 준비
22. Subnet 생성
33. NKS클러스터 생성
44. 노드풀 생성
55. 도메인 및 LB 설정
66. 관리용 시스템 생성
77. Bastion Host 구축
88. KubeCtl 설치 

1## ~/.ncloud/configure
2
3[DEFAULT]
4ncloud_access_key_id = AK_XXX
5ncloud_secret_access_key = SK_XXX
6ncloud_api_url = https://ncloud.apigw.gov-ntruss.com

1ncloud@vstl-wm-kubectl:~$ cat watchmile-api-ingress.yaml 
2apiVersion: networking.k8s.io/v1
3kind: Ingress
4metadata:
5  name: ansan-gov-ingress
6  annotations:
7    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP":80}, {"HTTPS":443}]'
8    alb.ingress.kubernetes.io/ssl-certificate-no: "26109"
9    alb.ingress.kubernetes.io/ssl-redirect: "443"
10    alb.ingress.kubernetes.io/load-balancer-name: ansan-kube-alb
11    alb.ingress.kubernetes.io/load-balancer-type: "alb"
12    alb.ingress.kubernetes.io/network-type: public
13    alb.ingress.kubernetes.io/load-balancer-size: small
14    alb.ingress.kubernetes.io/healthcheck-path: /actuator/health
15spec:
16  ingressClassName: alb
17  tls:
18    - hosts:
19        - parkingapi.ansanuc.net
20      secretName: dummy-tls
21  rules:
22    - host: parking-api.ansanuc.net
23      http:
24        paths:
25          - path: /
26            pathType: Prefix
27            backend:
28              service:
29                name: ansan-daemin-api
30                port:
31                  number: 80
32    - host: parkingm-api.ansanuc.net
33      http:
34        paths:
35          - path: /
36            pathType: Prefix
37            backend:
38              service:
39                name: ansan-admin-api
40                port:
41                  number: 80

1apiVersion: v1
2kind: Service
3metadata:
4  name: ansan-daemin-api
5spec:
6  selector:
7    app: ansan-daemin-api
8  type: ClusterIP
9  ports:
10    - port: 80
11      targetPort: 7070
12---
13apiVersion: apps/v1
14kind: Deployment
15metadata:
16  name: ansan-daemin-api
17spec:
18  replicas: 1
19  selector:
20    matchLabels:
21      app: ansan-daemin-api
22  template:
23    metadata:
24      labels:
25        app: ansan-daemin-api
26    spec:
27      imagePullSecrets:
28        - name: registry
29      containers:
30        - name: ansan-daemin-api
31          image: {{image}}
32          ports:
33            - containerPort: 7070

1image: atlassian/default-image:4
2
3options:
4  docker: true
5  size: 2x
6
7definitions:
8  services:
9    docker:
10      memory: 2048
11
12pipelines:
13  branches:
14    main:
15      - step:
16          name: Docker build & push
17          size: 2x
18          script:
19            - export IMAGE_NAME=$NCLOUD_CR_URL/$APPLICATION_NAME:$BITBUCKET_COMMIT
20            - docker build -t $APPLICATION_NAME .
21            - docker tag $APPLICATION_NAME $IMAGE_NAME
22            - echo "$NCLOUD_KEY" | docker login -u $NCLOUD_ID $NCLOUD_CR_URL --password-stdin
23            - docker push $IMAGE_NAME
24          services:
25            - docker
26          caches:
27            - docker
28      - step:
29          name: Deploy to NKS via Bastion (GitOps style)
30          deployment: production
31          script:
32            - export IMAGE_NAME=$NCLOUD_CR_URL/$APPLICATION_NAME:$BITBUCKET_COMMIT
33            - apt-get update && apt-get install -y sshpass openssh-client
34            - ssh-keyscan -H $DEV_SERVER_HOST >> ~/.ssh/known_hosts
35
36            # YAML에 이미지 치환
37            - sed -i "s|{{image}}|$IMAGE_NAME|g" kube-deployment.yml
38
39            # Bastion에 접속해서 apply
40            - cat kube-deployment.yml | sshpass -p "$SERVER_PASS" ssh -o StrictHostKeyChecking=no $SERVER_USER@$BASTION_HOST "
41              export PATH=\$PATH:/home1/ncloud/bin &&
42              kubectl --kubeconfig /home1/ncloud/kubeconfig-ansan.yaml apply -f -
43              "
44
45    ## Develop
46    develop:
47      - step:
48          name: Docker build & push
49          size: 2x
50          script:
51            - export IMAGE_NAME=$NCLOUD_CR_URL/$APPLICATION_NAME:latest
52            - docker build -t $APPLICATION_NAME .
53            - docker tag $APPLICATION_NAME $IMAGE_NAME
54            - echo "$NCLOUD_KEY" | docker login -u $NCLOUD_ID $NCLOUD_CR_URL --password-stdin
55            - docker push $IMAGE_NAME
56          services:
57            - docker
58          caches:
59            - docker
60
61      - step:
62          name: Deploy to Server
63          deployment: test
64          script:
65            - export IMAGE_NAME=$NCLOUD_CR_URL/$APPLICATION_NAME:latest
66            - apt-get update && apt-get install -y sshpass openssh-client
67            - ssh-keyscan $DEV_SERVER_HOST >> ~/.ssh/known_hosts
68
69            - echo "$SERVER_PASS" | sshpass -p "$SERVER_PASS" ssh -o StrictHostKeyChecking=no $SERVER_USER@$BASTION_HOST "
70              cd $DOCKER_COMPOSE_PATH &&
71              
72              echo -n \"$NCLOUD_KEY\" | docker login -u \"$NCLOUD_ID\" --password-stdin \"$NCLOUD_CR_URL\" &&
73              
74              docker-compose stop ansan-daemin-api || true &&
75              docker-compose rm -f ansan-daemin-api || true &&
76              
77              docker-compose pull ansan-daemin-api &&
78              docker-compose up -d ansan-daemin-api &&
79              
80              docker image prune -f --filter=\"until=24h\"
81              "