Feat/#7

.dockerignore

@@ -0,0 +1,51 @@
+# Git
+.git
+.gitignore
+.gitattributes
+.github
+
+# Gradle
+.gradle
+build/
+!build/libs/*.jar
+!gradle/wrapper/gradle-wrapper.jar
+!gradle/wrapper/gradle-wrapper.properties
+
+# IDE
+.idea
+*.iml
+*.iws
+*.ipr
+.vscode
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+
+# Local data
+postgres_data/
+localstack_data/
+
+# Docker
+Dockerfile
+.dockerignore
+docker-compose.yaml
+
+# Documentation
+README.md
+*.md
+
+# Kotlin
+.kotlin
+
+# Test
+src/test/
+
+# Misc
+Makefile

.github/workflows/deploy-staging.yml

@@ -0,0 +1,222 @@
+name: Deploy to Staging (K3s)
+
+on:
+  push:
+    branches:
+      - staging
+  workflow_dispatch:  # 수동 실행 가능
+
+jobs:
+  build-and-deploy:
+    name: Build, Test and Deploy to K3s
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: 21
+          distribution: 'temurin'
+          cache: 'gradle'
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Run tests
+        run: ./gradlew test --no-daemon
+
+      - name: Build with Gradle
+        run: ./gradlew bootJar --no-daemon -x test
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Docker Registry
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Extract version
+        id: version
+        run: |
+          VERSION=$(./gradlew properties --no-daemon --console=plain -q | grep "^version:" | awk '{print $2}')
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "short_sha=${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: |
+            ${{ secrets.DOCKER_USERNAME }}/yapp-dev:${{ steps.version.outputs.version }}-${{ steps.version.outputs.short_sha }}
+            ${{ secrets.DOCKER_USERNAME }}/yapp-dev:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Discord notification - Deployment started
+        if: success()
+        run: |
+          curl -H "Content-Type: application/json" \
+               -d '{
+                 "embeds": [{
+                   "title": "🚀 Staging 배포 시작",
+                   "description": "K3s 배포를 시작합니다",
+                   "color": 3447003,
+                   "fields": [
+                     {
+                       "name": "브랜치",
+                       "value": "'"${{ github.ref_name }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "커밋",
+                       "value": "'"${{ steps.version.outputs.short_sha }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "작성자",
+                       "value": "'"${{ github.actor }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "버전",
+                       "value": "'"${{ steps.version.outputs.version }}-${{ steps.version.outputs.short_sha }}"'",
+                       "inline": false
+                     },
+                     {
+                       "name": "커밋 메시지",
+                       "value": "'"$(git log -1 --pretty=%B | head -n 1)"'",
+                       "inline": false
+                     }
+                   ],
+                   "timestamp": "'"$(date -u +%Y-%m-%dT%H:%M:%S.000Z)"'"
+                 }]
+               }' \
+               ${{ secrets.DISCORD_WEBHOOK_URL }}
+
+      - name: Deploy to K3s (On-premise) with Zero-Downtime
+        id: deploy
+        uses: appleboy/[email protected]
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          password: ${{ secrets.SSH_PASSWORD }}
+          port: ${{ secrets.SSH_PORT }}
+          script: |
+            echo "🚀 Starting Zero-Downtime deployment to K3s..."
+
+            # K3s deployment 디렉토리로 이동
+            cd /home/yapp/k3s/staging
+
+            # 현재 실행 중인 이미지 확인
+            CURRENT_IMAGE=$(kubectl get deployment yapp-app-staging -n staging -o jsonpath='{.spec.template.spec.containers[0].image}' 2>/dev/null || echo "none")
+            echo "📌 Current image: $CURRENT_IMAGE"
+
+            # 이미지 태그 업데이트
+            NEW_IMAGE="${{ secrets.DOCKER_USERNAME }}/yapp-dev:${{ steps.version.outputs.version }}-${{ steps.version.outputs.short_sha }}"
+            echo "📦 New image: $NEW_IMAGE"
+            sed -i "s|image: .*yapp-dev:.*|image: $NEW_IMAGE|g" deployment.yaml
+
+            # K3s에 배포 적용 (Rolling Update 자동 실행)
+            echo "🔄 Applying deployment... Rolling update will start automatically"
+            kubectl apply -f deployment.yaml
+
+            # 배포 상태 확인 (새 파드가 완전히 준비될 때까지 대기)
+            echo "⏳ Waiting for new pods to be ready..."
+            if kubectl rollout status deployment/yapp-app-staging -n staging --timeout=10m; then
+              echo "✅ Rollout completed successfully!"
+
+              # 배포된 파드 정보 확인
+              echo "📊 Pod status:"
+              kubectl get pods -n staging -l app=yapp-app-staging
+
+              # 최종 이미지 확인
+              DEPLOYED_IMAGE=$(kubectl get deployment yapp-app-staging -n staging -o jsonpath='{.spec.template.spec.containers[0].image}')
+              echo "✅ Deployment completed! Deployed image: $DEPLOYED_IMAGE"
+            else
+              echo "❌ Rollout failed or timed out!"
+              kubectl get pods -n staging -l app=yapp-app-staging
+              exit 1
+            fi
+
+      - name: Discord notification - Deployment success
+        if: success()
+        run: |
+          curl -H "Content-Type: application/json" \
+               -d '{
+                 "embeds": [{
+                   "title": "✅ Staging 배포 성공",
+                   "description": "K3s 배포가 성공적으로 완료되었습니다",
+                   "color": 5763719,
+                   "fields": [
+                     {
+                       "name": "브랜치",
+                       "value": "'"${{ github.ref_name }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "커밋",
+                       "value": "'"${{ steps.version.outputs.short_sha }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "작성자",
+                       "value": "'"${{ github.actor }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "배포 버전",
+                       "value": "'"${{ steps.version.outputs.version }}-${{ steps.version.outputs.short_sha }}"'",
+                       "inline": false
+                     },
+                     {
+                       "name": "배포 링크",
+                       "value": "[GitHub Actions](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})",
+                       "inline": false
+                     }
+                   ],
+                   "timestamp": "'"$(date -u +%Y-%m-%dT%H:%M:%S.000Z)"'"
+                 }]
+               }' \
+               ${{ secrets.DISCORD_WEBHOOK_URL }}
+
+      - name: Discord notification - Deployment failed
+        if: failure()
+        run: |
+          curl -H "Content-Type: application/json" \
+               -d '{
+                 "embeds": [{
+                   "title": "❌ Staging 배포 실패",
+                   "description": "K3s 배포 중 오류가 발생했습니다",
+                   "color": 15158332,
+                   "fields": [
+                     {
+                       "name": "브랜치",
+                       "value": "'"${{ github.ref_name }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "커밋",
+                       "value": "'"${{ steps.version.outputs.short_sha }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "작성자",
+                       "value": "'"${{ github.actor }}"'",
+                       "inline": true
+                     },
+                     {
+                       "name": "실패 로그",
+                       "value": "[GitHub Actions 확인](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})",
+                       "inline": false
+                     }
+                   ],
+                   "timestamp": "'"$(date -u +%Y-%m-%dT%H:%M:%S.000Z)"'"
+                 }]
+               }' \
+               ${{ secrets.DISCORD_WEBHOOK_URL }}

Dockerfile

@@ -0,0 +1,42 @@
+# Layer extraction stage
+FROM eclipse-temurin:21-jre-alpine AS builder
+
+WORKDIR /app
+
+# GitHub Actions에서 빌드된 JAR 파일 복사
+COPY build/libs/*.jar app.jar
+
+# Spring Boot Layered JAR에서 레이어 추출
+RUN java -Djarmode=layertools -jar app.jar extract
+
+# Runtime stage
+FROM eclipse-temurin:21-jre-alpine
+
+WORKDIR /app
+
+# 보안을 위해 non-root 사용자 생성
+RUN addgroup -S spring && adduser -S spring -G spring
+
+# 레이어별로 복사 (변경 빈도가 낮은 순서대로)
+# 1. dependencies: 외부 라이브러리 (거의 변경 안 됨)
+COPY --from=builder --chown=spring:spring /app/dependencies/ ./
+
+# 2. spring-boot-loader: Spring Boot 로더
+COPY --from=builder --chown=spring:spring /app/spring-boot-loader/ ./
+
+# 3. snapshot-dependencies: SNAPSHOT 의존성
+COPY --from=builder --chown=spring:spring /app/snapshot-dependencies/ ./
+
+# 4. application: 애플리케이션 코드 (자주 변경됨)
+COPY --from=builder --chown=spring:spring /app/application/ ./
+
+# non-root 사용자로 전환
+USER spring:spring
+
+# 환경변수 설정 (기본값, 런타임에 오버라이드 가능)
+ENV SPRING_PROFILES_ACTIVE=staging
+ENV JASYPT_PASSWORD=""
+
+# 애플리케이션 실행
+# Layered JAR는 org.springframework.boot.loader.launch.JarLauncher를 사용
+ENTRYPOINT ["java", "org.springframework.boot.loader.launch.JarLauncher"]

build.gradle.kts

@@ -45,6 +45,7 @@ dependencies {
     // Spring Boot
     implementation("org.springframework.boot:spring-boot-starter-web")
     implementation("org.springframework.boot:spring-boot-starter-validation")
+    implementation("org.springframework.boot:spring-boot-starter-actuator")
 
     // Kotlin
     implementation("com.fasterxml.jackson.module:jackson-module-kotlin")
@@ -137,3 +138,10 @@ tasks.withType<Test> {
 tasks.jar {
     enabled = false
 }
+
+tasks.bootJar {
+    // Spring Boot Layered JAR 활성화 (Docker 캐싱 최적화)
+    layered {
+        enabled = true
+    }
+}