FLOWSHIP

노드 라벨링

# 노드 라벨링
kubectl label node kube-node1 role=web
kubectl label node kube-node2 role=web
kubectl label node kube-node3 role=db

Dockerfile

FROM python:3.10-slim

RUN apt-get update && apt-get install -y \
    default-libmysqlclient-dev \
    build-essential \
    pkg-config \
 && rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY requirements.txt /app/
RUN pip install --no-cache-dir -r requirements.txt
COPY . /app/
EXPOSE 8000
CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]

settings.py DB 설정

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.mysql',
        'NAME': 'pybo',
        'USER': 'pybo',
        'PASSWORD': 'pybo1234',
        'HOST': 'pybo-mysql',
        'PORT': '3306',
    }
}

django-deploy.yaml 핵심

spec:
  replicas: 2
  template:
    spec:
      nodeSelector:
        role: web
      containers:
        - name: django
          image: jeegle16/django-pybo:v5
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8000

mysql-deploy.yaml 핵심

      nodeSelector:
        role: db
      containers:
        - name: mysql
          image: quay.io/sclorg/mysql-80-c9s
          env:
            - name: MYSQL_ROOT_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: mysql-secret
                  key: mysql-root-password
          volumeMounts:
            - name: mysql-data
              mountPath: /var/lib/mysql/data

ingress.yaml 핵심

spec:
  ingressClassName: nginx
  rules:
    - host: pybo.mysite.local
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: pybo-web-svc
                port:
                  number: 8000

Jenkinsfile 트리거 + Update Ops Repo stage

triggers {
    pollSCM('H/1 * * * *')
}

stage('Update Ops Repo') {
    steps {
        script {
            withCredentials([usernamePassword(
                credentialsId: 'github-token',
                usernameVariable: 'GIT_USER',
                passwordVariable: 'GIT_TOKEN'
            )]) {
                sh """
                rm -rf ops-repo
                git clone https://${GIT_USER}:${GIT_TOKEN}@github.com/\
jeegle16-alt/minipro2_opsrepo.git ops-repo
                cd ops-repo
                sed -i 's#image: .*/django-pybo:.*#image: \
${DOCKER_IMAGE}:${VERSION}#' k8s/mysite/django-deploy.yaml
                git config user.name "jenkins"
                git config user.email "jenkins@example.com"
                git add k8s/mysite/django-deploy.yaml
                git commit -m "Update image tag to ${VERSION}"
                git push origin main
                """
            }
        }
    }
}

ArgoCD Application syncPolicy

syncPolicy:
  automated:
    prune: true
    selfHeal: true
syncOptions:
  - CreateNamespace=true