Skip to content

Latest commit

 

History

History
103 lines (75 loc) · 2.36 KB

README.md

File metadata and controls

103 lines (75 loc) · 2.36 KB
Raw

##GCU 2023 Summer

#prerequsite

  1. install python

  2. install ansible

  3. KiC Account & API KEY

  4. KiC Bastion Host with public ip

  5. KiC Bastoin Host key file for jumphost

  6. 공공클라우드 활용에 따른 변경 사항 https://account.kakaoicloud-kr-gov.com/domain

    gcu-master 키페어 생성 gcu-vm 보안그룹 생성 : bastion 보안그룹과의 통신 설정, lb 와의 통신 설정

    templates/clouds.yml
region_name: 'kr-gov-central-1'
auth_url: 'https://iam.kakaoicloud-kr-gov.com/identity/v3'

    ansible/playbooks/vms/vars.yml
subnet_id: bd6d7c3b-1784-4d9e-92d5-1fb939cb555c
VM_FLAVOR_NAME: m1i.xlarge

    ansible/playbooks/vms/create.yml
VM_KEY_NAME: "gcu-master"
VM_SG_NAMES: 
  - "gcu-vm"

#configuration

secrets/init_values.yml

BaseDirectory: 현재 디렉토리 절대경로
TeamName: 팀명

# Variables for ssh config

JumpHost:
Address: Bastion Host 퍼블릭 아이피
User: jumpuser
Port: 22
IdentityFile: "{{ BaseDirectory }}/secrets/{{ TeamName }}-jumpuser"
VPC_NW_Range: 10.0.\*

# Variables for non-ansible vm

DefaultUser: ubuntu
DefaultPrivateKeyFile: "{{ BaseDirectory }}/secrets/manager.pem"

# Variables for ansible config

AnsibleUser: ansible
AnsiblePrivateKeyFile: "{{ BaseDirectory }}/secrets/{{ TeamName }}-ansible"
VM_ANSIBLE_PUB_KEY_FILE: "{{ BaseDirectory }}/secrets/{{ TeamName }}-ansible.pub"

# Variables for kakao i cloud api call

APIAlias: kic
ApplicationCredentialID: KiC Account API Key
ApplicationCredentialSecret: KiC Account API Secret

#실행

기초 환경 설정 ansible-playbook playbooks/setup.yml

KiC API 연결 확인 ansible-inventory --list

VM 생성 ansible-playbook playbooks/vms/create.yml

VM 생성 완료 확인 ansible-playbook playbooks/vms/check.yml

Docker Swarm Cluster 구성 ansible-playbook -i playbooks/cluster_inventory.yml playbooks/swarm/playbook.yml

Docker Swarm Cluster 확인 ansible -i playbooks/cluster_inventory.yml -a 'sudo docker node ls' manager

서비스 배포 ansible-playbook -i playbooks/cluster_inventory.yml playbooks/deploy/playbook.yml

서비스 배포 확인 ansible -i playbooks/cluster_inventory.yml -a 'sudo docker service ls' manager

서비스 동작 확인 ansible -i playbooks/cluster_inventory.yml -a 'curl 127.0.0.1' manager

VM 접속 ssh -F ssh.cfg ansible@VM 아이피 -i ../secrets/team1-ansible