<p><br></p><h5>도커허브가 너무 많이 받는다고 뭐라고 하면....</h5><p>public subnet에 NAT 게이트웨이를 만들고&nbsp;</p><p>Codebuild 환경에 VPC를 설정한 후 private subnet에서 동작하도록 하면 NAT에 할당된 IP로 접속을 시도하므로,</p><p>단독으로 6시간마다 200개 pull 할 수 있다.</p><p><br></p><p><br></p><p><br></p><hr><p><br></p><p><br></p><p>예시는 Codebuild에서 이미지를 생성 후 ECR에 push 후</p><p>kubectl로 deploy를 업데이트 한다&nbsp;</p><p><br></p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;"><div><span style="color: #569cd6;">version</span>: <span style="color: #b5cea8;">0.2</span></div><div><span style="color: #569cd6;">phases</span>:</div><div>&nbsp; <span style="color: #569cd6;">install</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">runtime-versions</span>:</div><div>&nbsp; &nbsp; &nbsp; <span style="color: #569cd6;">python</span>: <span style="color: #ce9178;">latest</span></div><div>&nbsp; <span style="color: #569cd6;">pre_build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Logging in to Amazon ECR...</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">aws --version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">$(aws ecr get-login --region $AWS_DEFAULT_REGION --no-include-email)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">REPOSITORY_URI=123456789.dkr.ecr.ap-northeast-2.amazonaws.com/myApp</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">COMMIT_HASH=$(echo $CODEBUILD_RESOLVED_SOURCE_VERSION | cut -c 1-7)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">IMAGE_TAG=${COMMIT_HASH:=latest}</span></div><div>&nbsp; &nbsp; &nbsp; <span style="color: #6a9955;"># 파일을 새로 생성할 때</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #c586c0;">|</span></div><div><span style="color: #ce9178;">&nbsp; &nbsp; &nbsp; &nbsp; cat &lt;&lt;EOF | tee .env</span></div><div><span style="color: #ce9178;">&nbsp; &nbsp; &nbsp; &nbsp; AWS_ACCESS_KEY=${AWS_ACCESS_KEY}</span></div><div><span style="color: #ce9178;">&nbsp; &nbsp; &nbsp; &nbsp; AWS_SECRET_KEY=${AWS_SECRET_KEY}</span></div><div><span style="color: #ce9178;">&nbsp; &nbsp; &nbsp; &nbsp; S3_BUCKET_NAME=${S3_BUCKET_NAME}</span></div><div><span style="color: #ce9178;">&nbsp; &nbsp; &nbsp; &nbsp; EOF</span></div><br><div>&nbsp; <span style="color: #569cd6;">build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Build started on `date`</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Docker Download limit check...</span></div><div>&nbsp; &nbsp; &nbsp; <span style="color: #6a9955;"># &nbsp;docker download limit가 걸렸다면서 빌드가 실패할 때가 있음</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">TOKEN=$(curl "https://auth.docker.io/token?service=registry.docker.io&amp;scope=repository:ratelimitpreview/test:pull" | jq -r .token)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo $TOKEN</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Building the Docker image...</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">"curl --head -H 'Authorization: Bearer $TOKEN' https://registry-1.docker.io/v2/ratelimitpreview/test/manifests/latest"</span></div><br><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Docker build...</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker build -t $REPOSITORY_URI:latest .</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker tag $REPOSITORY_URI:latest $REPOSITORY_URI:$IMAGE_TAG</span></div><div>&nbsp; <span style="color: #569cd6;">post_build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Build completed on `date`</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Pushing the Docker images...</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker push $REPOSITORY_URI:latest</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker push $REPOSITORY_URI:$IMAGE_TAG</span></div><br><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo get eks credentials</span></div><div>&nbsp; &nbsp; &nbsp; <span style="color: #6a9955;"># kubectl 명령을 실행하기 위해서 롤을 받아와서 셋팅함</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">CREDENTIALS=$(aws sts assume-role --role-arn arn:aws:iam::123456789:role/k8sAdmin --role-session-name codebuild-kubectl --duration-seconds 900)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_ACCESS_KEY_ID="$(echo ${CREDENTIALS} | jq -r '.Credentials.AccessKeyId')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_SECRET_ACCESS_KEY="$(echo ${CREDENTIALS} | jq -r '.Credentials.SecretAccessKey')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_SESSION_TOKEN="$(echo ${CREDENTIALS} | jq -r '.Credentials.SessionToken')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_EXPIRATION=$(echo ${CREDENTIALS} | jq -r '.Credentials.Expiration')</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">aws eks update-kubeconfig --name eks-platform</span></div><br><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo rollout deployment gms-django-api</span></div><div>&nbsp; &nbsp; &nbsp; <span style="color: #6a9955;"># deploy 업데이트</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">kubectl rollout restart deployment/gms-django-api</span></div></div><p><br></p><p><br></p><p><br></p><hr><p><br></p><h4>JDK17 버전으로 사용하여 빌드해야하는데 버전이 안맞을 때&nbsp;<br>자바 버전 다른걸로 바꾸고 싶을 때!</h4><p><br></p><p>출처 :&nbsp;<a href="https://stackoverflow.com/questions/69222577/how-to-install-different-java-openjdk-version-on-aws-codebuild-standard-image" target="_blank">https://stackoverflow.com/questions/69222577/how-to-install-different-java-openjdk-version-on-aws-codebuild-standard-image</a></p><p><br></p><h5>buildspec.yml</h5><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: D2Coding, Consolas, &quot;Courier New&quot;, monospace, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; line-height: 18px; white-space: pre;"><div><span style="color: #569cd6;">version</span>: <span style="color: #b5cea8;">0.2</span></div><div><span style="color: #569cd6;">phases</span>:</div><div>&nbsp; <span style="color: #569cd6;">install</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; <span style="color: #6a9955;"># jdk 17 버전으로 빌드하려면 아래처럼 새로 받아서 설정해야 한다</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">uname -a</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">yum update -y</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo list available openjdk packages</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">yum list *openjdk*</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo install openjdk packages</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">yum install -y java-latest-openjdk-devel java-latest-openjdk-jmods</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo show default java version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo $JAVA_HOME</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">java -version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">cd /usr/lib/jvm</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">ls</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export JAVA_HOME=/usr/lib/jvm/java-openjdk</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">cd $JAVA_HOME/bin</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">java -version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo configure java command</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">alternatives --install /usr/bin/java java /usr/lib/jvm/java-openjdk/bin/java 20000</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">alternatives --set java /usr/lib/jvm/java-openjdk/bin/java</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">alternatives --display java</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo configure javac command</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-openjdk/bin/javac 20000</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">alternatives --set javac /usr/lib/jvm/java-openjdk/bin/javac</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">alternatives --display javac</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo show updated java version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">java -version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">cd $CODEBUILD_SRC_DIR</span></div><br><div>&nbsp; <span style="color: #569cd6;">pre_build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">java --version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Logging in to Amazon ECR...</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">aws --version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">$(aws ecr get-login --region $AWS_DEFAULT_REGION --no-include-email)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">REPOSITORY_URI=</span><span style="color: rgb(206, 145, 120); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px;">123456789</span><span style="color: #ce9178;">.dkr.ecr.ap-northeast-2.amazonaws.com/fxtl-chat-server</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">COMMIT_HASH=$(echo $CODEBUILD_RESOLVED_SOURCE_VERSION | cut -c 1-7)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">IMAGE_TAG=${COMMIT_HASH:=latest}</span></div><br><div>&nbsp; <span style="color: #569cd6;">build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Maven Build started on `date`</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">chmod 775 ./mvnw</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">./mvnw package</span><span style="color: rgb(206, 145, 120);"> --batch-mode</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Docker Build started on `date`</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker build -t $REPOSITORY_URI -t $REPOSITORY_URI:$IMAGE_TAG .</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker push --all-tags $REPOSITORY_URI</span></div><br><div>&nbsp; <span style="color: #569cd6;">post_build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Get eks credentials</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export KUBECONFIG=$HOME/.kube/config</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">CREDENTIALS=$(aws sts assume-role --role-arn arn:aws:iam::</span><span style="color: rgb(206, 145, 120); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px;">123456789</span><span style="color: #ce9178;">:role/EksCodeBuildKubectlRole --role-session-name codebuild-kubectl --duration-seconds 900)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_ACCESS_KEY_ID="$(echo ${CREDENTIALS} | jq -r '.Credentials.AccessKeyId')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_SECRET_ACCESS_KEY="$(echo ${CREDENTIALS} | jq -r '.Credentials.SecretAccessKey')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_SESSION_TOKEN="$(echo ${CREDENTIALS} | jq -r '.Credentials.SessionToken')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_EXPIRATION=$(echo ${CREDENTIALS} | jq -r '.Credentials.Expiration')</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">aws eks update-kubeconfig --name eks-fxtl</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo rollout deployment fxtl-chat-server</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">kubectl rollout restart deployment/fxtl-chat-server</span></div><br></div><p><br></p><h5>Dockerfile</h5><pre style="background-color:#2b2b2b;color:#a9b7c6;font-family:'D2Coding',monospace;font-size:10.5pt;"><span style="color:#cc7832;">FROM </span>amazoncorretto:17-alpine-jdk<br><span style="color:#cc7832;">ARG </span><span style="color:#9876aa;font-style:italic;">JAR_FILE</span>=target<span style="color:#cc7832;">/*</span>.jar<br><span style="color:#cc7832;">COPY </span>${<span style="color:#9876aa;font-style:italic;">JAR_FILE</span>} app.jar<br><span style="color:#cc7832;">ENTRYPOINT </span>[<span style="color:#6a8759;">"java"</span><span style="color:#cc7832;">,</span><span style="color:#6a8759;">"-jar"</span><span style="color:#cc7832;">,</span><span style="color:#6a8759;">"/app.jar"</span>]<br><br></pre><p><br></p><p><br></p><hr><h4>JDK 11</h4><p><br></p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: D2Coding, Consolas, &quot;Courier New&quot;, monospace, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; line-height: 18px; white-space: pre;"><div><span style="color: #569cd6;">version</span>: <span style="color: #b5cea8;">0.2</span></div><div><span style="color: #569cd6;">phases</span>:</div><div>&nbsp; <span style="color: #569cd6;">install</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">runtime-versions</span>:</div><div>&nbsp; &nbsp; &nbsp; <span style="color: #569cd6;">java</span>: <span style="color: #ce9178;">corretto11</span></div><br><div>&nbsp; <span style="color: #569cd6;">pre_build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">java --version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Logging in to Amazon ECR...</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">aws --version</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">$(aws ecr get-login --region $AWS_DEFAULT_REGION --no-include-email)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">REPOSITORY_URI=1234567890.dkr.ecr.ap-northeast-2.amazonaws.com/fxtl-api</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">COMMIT_HASH=$(echo $CODEBUILD_RESOLVED_SOURCE_VERSION | cut -c 1-7)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">IMAGE_TAG=${COMMIT_HASH:=latest}</span></div><br><div>&nbsp; <span style="color: #569cd6;">build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Maven Build started on `date`</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">chmod 775 ./mvnw</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">./mvnw package --batch-mode</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Docker Build started on `date`</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker build -t $REPOSITORY_URI -t $REPOSITORY_URI:$IMAGE_TAG .</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">docker push --all-tags $REPOSITORY_URI</span></div><br><div>&nbsp; <span style="color: #569cd6;">post_build</span>:</div><div>&nbsp; &nbsp; <span style="color: #569cd6;">commands</span>:</div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo Get eks credentials</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export KUBECONFIG=$HOME/.kube/config</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">CREDENTIALS=$(aws sts assume-role --role-arn arn:aws:iam::</span><span style="color: rgb(206, 145, 120);">1234567890</span><span style="color: #ce9178;">:role/EksCodeBuildKubectlRole --role-session-name codebuild-kubectl --duration-seconds 900)</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_ACCESS_KEY_ID="$(echo ${CREDENTIALS} | jq -r '.Credentials.AccessKeyId')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_SECRET_ACCESS_KEY="$(echo ${CREDENTIALS} | jq -r '.Credentials.SecretAccessKey')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_SESSION_TOKEN="$(echo ${CREDENTIALS} | jq -r '.Credentials.SessionToken')"</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">export AWS_EXPIRATION=$(echo ${CREDENTIALS} | jq -r '.Credentials.Expiration')</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">aws eks update-kubeconfig --name eks-fxtl</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">echo rollout deployment fxtl-api</span></div><div>&nbsp; &nbsp; &nbsp; - <span style="color: #ce9178;">kubectl rollout restart deployment/fxtl-api</span></div><br></div><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p>

[AWS] CodeBuild 사용하기 buildspec.yml 작성하기(JDK 17)