![\"\"](\"https:\/\/www.skyer9.pe.kr\/wordpress\/wp-content\/uploads\/2022\/10\/2022-10-28-01.png\")
<\/p>\n\uc18c\uc2a4 \ubc30\ud3ec\ubd80\ud130 k8s \ud074\ub7ec\uc2a4\ud130 \ubc30\ud3ec\uae4c\uc9c0\uc758 \uc77c\ub828\uc758 \uacfc\uc815\uc744 \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n
. . . . . . . . . . . . . . . . . .<\/p>\n
<\/p>\n
\uc5ec\uae30<\/a>, \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130\ub97c \uad6c\uc131\ud569\ub2c8\ub2e4.<\/p>\n \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec Jenkins \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n \uc544\ub798 Jenkins Plugin \uc744 \uc124\uce58\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n \uc544\ub798 \uc544\uc774\ud53c\ub85c\uc758 \uc811\uadfc\uc744 \ubc29\ud654\ubcbd\uc5d0\uc11c \ud5c8\uc6a9\ud574\uc90d\ub2c8\ub2e4.(Github webhook) \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec Personal Access Token \uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4.<\/p>\n \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec Repository \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec ArgoCD \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n \ud504\ub85c\uc81d\ud2b8 \ub8e8\ud2b8\uc5d0 Dockerfile \uc744 \ucd94\uac00\ud558\uace0 \uc544\ub798 \ub0b4\uc6a9\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4.<\/p>\n Github private repo \ub85c \uc774\ub3d9 \ud6c4, \uc820\ud0a8\uc2a4 \uc544\uc774\ud15c\uc744 Pipeline \uc73c\ub85c \uc0dd\uc131\ud558\uace0 \uc544\ub798 script \ub97c \uc785\ub825\ud569\ub2c8\ub2e4. Build now(\uc9c0\uae08 \ube4c\ub4dc) \ub97c \ud074\ub9ad\ud574\uc11c \uc18c\uc2a4\ub97c \uac00\uc838\uc624\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.<\/p>\n \ube4c\ub4dc\uac00 \uc774\ub8e8\uc5b4\uc9c0\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.<\/p>\n \uc820\ud0a8\uc2a4 \uc544\uc774\ud15c\uc5d0 GitHub hook trigger for GITScm polling \uc744 \uccb4\ud06c\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n \uc18c\uc2a4\ub97c Github \uc5d0 push \ud574\uc11c \uc815\uc0c1\uc801\uc73c\ub85c \ube4c\ub4dc\uac00 \uc774\ub8e8\uc5b4\uc9c0\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.<\/p>\n \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec \ud50c\ub7ec\uadf8\uc778\uc744 \uc124\uc815\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n docker build \uc2dc \uc544\uc774\ud53c\ub294 docker-repository \uc758 \ud074\ub7ec\uc2a4\ud130 \uc544\uc774\ud53c\uc785\ub2c8\ub2e4.<\/p>\n push \ub294 https \ub9cc \ud5c8\uc6a9\ud558\ubbc0\ub85c \uc544\ub798 \uc124\uc815\ubcc0\uacbd\uc744 \ud1b5\ud574, \ub9c8\uc2a4\ud130 \ub178\ub4dc\uc5d0\uc11c \ud074\ub7ec\uc2a4\ud130 \uc544\uc774\ud53c\ub97c \ud655\uc778\ud55c\ub2e4.<\/p>\n \uc6cc\ucee4 \ub178\ub4dc\uc758 \ub3c4\ucee4 \uc11c\ube44\uc2a4\ub97c \uc218\uc815\ud55c\ub2e4.<\/p>\n \uc544\ub798 \uba85\ub839\uc73c\ub85c \uc5c5\ub85c\ub4dc\ub41c \uc774\ubbf8\uc9c0\ub97c \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec \uc0ac\uc124\uc778\uc99d\uc11c\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4.<\/p>\n \uc820\ud0a8\uc2a4 \uc124\uc815\ud30c\uc77c\uc740 \uc544\ub798\ucc98\ub7fc \uc218\uc815\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n \uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec Repo \ub97c \uc124\uc815\ud569\ub2c8\ub2e4.<\/p>\n \uc774\ubbf8\uc9c0 \uc8fc\uc18c\ub97c \uc124\uc815\ud574 \uc8fc\uba74 \ub429\ub2c8\ub2e4.<\/p>\n Worker \ub178\ub4dc\uc5d0\uc11c \uc774\ubbf8\uc9c0\ub97c \ub561\uaca8 \uc624\uae30\uc5d0, Kubernetes – CI\/CD \ud30c\uc774\ud504\ub77c\uc778 \uad6c\uc131 \uc18c\uc2a4 \ubc30\ud3ec\ubd80\ud130 k8s \ud074\ub7ec\uc2a4\ud130 \ubc30\ud3ec\uae4c\uc9c0\uc758 \uc77c\ub828\uc758 \uacfc\uc815\uc744 \uc124\uce58\ud569\ub2c8\ub2e4. . . . . . . . . . . . . . . . . . . \uae30\ubcf8\uad6c\uc870 \uc0ac\uc804 \uc900\ube44 k8s \ud074\ub7ec\uc2a4\ud130 \uad6c\uc131 \uc5ec\uae30, \uc5ec\uae30 \ub97c \ucc38\uc870\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130\ub97c \uad6c\uc131\ud569\ub2c8\ub2e4. Jenkins \uc124\uce58 \uc124\uce58 \uc5ec\uae30 \ub97c \ucc38\uc870\ud558\uc5ec Jenkins \ub97c \uc124\uce58\ud569\ub2c8\ub2e4. Jenkins \ucd94\uac00\uc124\uc815 \uc544\ub798\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[],"class_list":["post-6834","post","type-post","status-publish","format-standard","hentry","category-kubernetes"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6834","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6834"}],"version-history":[{"count":62,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6834\/revisions"}],"predecessor-version":[{"id":7451,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6834\/revisions\/7451"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6834"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6834"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6834"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Jenkins \uc124\uce58<\/h3>\n
\uc124\uce58<\/h4>\n
Jenkins \ucd94\uac00\uc124\uc815<\/h4>\n
kubernetes\ndocker<\/code><\/pre>\n
\n\uc811\uc18d\ud558\ub294 \ud3ec\ud2b8\ub294 30088 \uc785\ub2c8\ub2e4.<\/p>\n"192.30.252.0\/22",\n"185.199.108.0\/22",\n"140.82.112.0\/20"<\/code><\/pre>\nPrivate Docker Repository \uc124\uce58<\/h3>\n
ArgoCD \uc124\uce58<\/h3>\n
\uac1c\ubc1c\uc790\uac00 \uc18c\uc2a4 push<\/h2>\n
FROM openjdk:11.0.6-jre\nEXPOSE 8080\nARG JAR_FILE=build\/libs\/*.jar\nCOPY ${JAR_FILE} app.jar\nENTRYPOINT ["java", "-jar", "\/app.jar"]<\/code><\/pre>\nGithub \uac00 Jenkins \uc5d0 \ub178\ud2f0<\/h2>\n
Github Webhook \uc124\uc815<\/h3>\n
\nSettings > Webhooks \uc73c\ub85c \uc774\ub3d9\ud55c\ub2e4.<\/p>\n\n
Jenkins \uc544\uc774\ud15c \uc0dd\uc131<\/h3>\n
\n\uc704\uc5d0\uc11c \uc0dd\uc131\ud55c Personal Access Token \uc73c\ub85c \uc811\uadfc\ud569\ub2c8\ub2e4.<\/p>\nnode {\n stage("Get Source") {\n git url: "https:\/\/ghp_a16NFKcFmOXXXXXXXXXXXXXX@github.com\/skyer9\/TestPrivate.git",\n branch: "master"\n }\n}<\/code><\/pre>\n\uc18c\uc2a4 \ube4c\ub4dc<\/h3>\n
node {\n stage("Get Source") {\n git url: "https:\/\/ghp_a16NFKcFmOXXXXXXXXXXXXXX@github.com\/skyer9\/TestPrivate.git",\n branch: "master"\n }\n\n stage("Build") {\n sh "chmod 700 gradlew"\n sh ".\/gradlew clean"\n sh ".\/gradlew bootJar"\n }\n}<\/code><\/pre>\nwebhook \uccb4\ud06c<\/h3>\n
Jenkins \uac00 Docker image \uc0dd\uc131 \ud6c4 Private repo \uc5d0 \ubc30\ud3ec<\/h2>\n
Kubernetes \ud50c\ub7ec\uadf8\uc778 \uc124\uc815<\/h3>\n
Jenkins \uc544\uc774\ud15c \uc218\uc815<\/h3>\n
pipeline {\n agent {\n kubernetes {\n defaultContainer 'jnlp'\n yaml """\nspec:\n dnsPolicy: Default # \uc774\uac8c \uc65c \ud544\uc694\ud560\uae4c?\n containers:\n - name: docker\n image: docker:latest\n command:\n - cat\n tty: true\n privileged: true\n volumeMounts:\n - name: dockersock\n mountPath: \/var\/run\/docker.sock\n volumes:\n - name: dockersock\n hostPath:\n path: \/var\/run\/docker.sock\n - name: m2\n hostPath:\n path: \/root\/.m2\n """\n }\n }\n\n stages {\n stage("Get Source") {\n steps {\n git url: "https:\/\/ghp_a16NFKXXXXXXXXXXXXXXXXX@github.com\/skyer9\/TestPrivate.git",\n branch: "master"\n }\n }\n\n stage("Build") {\n steps {\n sh "chmod 700 gradlew"\n sh ".\/gradlew clean"\n sh ".\/gradlew bootJar"\n }\n }\n\n stage('Docker Build') {\n steps {\n container('docker') {\n sh "docker build -t 10.101.46.90\/skyer9\/testprivate:0.1.${build_number} ."\n sh "docker build -t 10.101.46.90\/skyer9\/testprivate:latest ."\n }\n }\n }\n }\n}<\/code><\/pre>\nPrivate Docker Repository \uc5d0 push<\/h3>\n
\nhttp push \ub97c \ud5c8\uc6a9\ud574 \uc900\ub2e4.<\/p>\nkubectl get svc -n repository\nNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE\ndocker-repository NodePort 10.105.115.134 <none> 80:30099\/TCP 10m<\/code><\/pre>\nsudo vi \/lib\/systemd\/system\/docker.service\nExecStart=\/usr\/bin\/dockerd ...... --insecure-registry 10.105.115.134<\/code><\/pre>\nsudo systemctl daemon-reload\nsudo systemctl restart docker\nsudo docker info<\/code><\/pre>\n stage('Docker Build') {\n steps {\n container('docker') {\n sh "docker build -t 10.105.115.134\/skyer9\/testprivate:0.1.${build_number} ."\n sh "docker build -t 10.105.115.134\/skyer9\/testprivate:latest ."\n sh "docker info"\n sh "docker push 10.105.115.134\/skyer9\/testprivate:0.1.${build_number}"\n sh "docker push 10.105.115.134\/skyer9\/testprivate:latest"\n }\n }\n }<\/code><\/pre>\ncurl http:\/\/localhost:30099\/v2\/_catalog<\/code><\/pre>\nPrivate Docker Repository \uc5d0 https \uc801\uc6a9<\/h3>\n
pipeline {\n agent {\n kubernetes {\n defaultContainer 'jnlp'\n yaml """\nspec:\n dnsPolicy: Default # \uc774\uac8c \uc65c \ud544\uc694\ud560\uae4c?\n containers:\n - name: docker\n image: docker:latest\n command:\n - cat\n tty: true\n privileged: true\n volumeMounts:\n - name: private-rootca-crt\n mountPath: \/etc\/docker\/certs.d\/docker-repository.repository.svc.cluster.local\/ca.crt\n subPath: rootCA.crt\n readOnly: true\n - name: dockersock\n mountPath: \/var\/run\/docker.sock\n volumes:\n - name: private-rootca-crt\n configMap:\n name: private-rootca.crt\n - name: dockersock\n hostPath:\n path: \/var\/run\/docker.sock\n - name: m2\n hostPath:\n path: \/root\/.m2\n """\n }\n }\n\n stages {\n stage("Get Source") {\n steps {\n git url: "https:\/\/ghp_ttA52XKpXXXXXXXXXXXXXXX@github.com\/skyer9\/TestPrivate.git",\n branch: "master"\n }\n }\n\n stage("Build") {\n steps {\n sh "chmod 700 gradlew"\n sh ".\/gradlew clean"\n sh ".\/gradlew bootJar"\n }\n }\n\n stage('Docker Build') {\n steps {\n container('docker') {\n sh "docker build -t docker-repository.repository.svc.cluster.local\/testprivate:0.1.${build_number} ."\n sh "docker build -t docker-repository.repository.svc.cluster.local\/testprivate:latest ."\n sh "docker info"\n \/\/ sh "apk update && apk add ca-certificates"\n \/\/ sh "cp \/etc\/docker\/certs.d\/repository.repository.svc.cluster.local\/ca.crt \/usr\/local\/share\/ca-certificates\/my-cert.crt"\n \/\/ sh "update-ca-certificates"\n \/\/ sh "wget https:\/\/repository.repository.svc.cluster.local\/v2\/"\n sh "docker push docker-repository.repository.svc.cluster.local\/testprivate:0.1.${build_number}"\n sh "docker push docker-repository.repository.svc.cluster.local\/testprivate:latest"\n }\n }\n }\n }\n}<\/code><\/pre>\n\uc6b4\uc601\uc790\uac00 \uc18c\uc2a4\ub97c Github \uc5d0 push<\/h2>\n
\nWorker \ub178\ub4dc\uc5d0 \ub8e8\ud2b8\uc778\uc99d\uc11c\uac00 \ub4f1\ub85d\ub418\uc5b4 \uc788\uc5b4\uc57c \ud569\ub2c8\ub2e4.<\/p>\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n name: testprivate\n namespace: default\n labels:\n app: testprivate\nspec:\n replicas: 1\n selector:\n matchLabels:\n app: testprivate\n template:\n metadata:\n labels:\n app: testprivate\n spec:\n containers:\n - name: testprivate\n image: docker-repository.repository.svc.cluster.local\/testprivate:0.1.16\n ports:\n - containerPort: 8080<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"