From a48e96534152dcd025dbec4595454a522bb0b6a8 Mon Sep 17 00:00:00 2001 From: Doogie Min Date: Tue, 27 Aug 2024 00:42:18 +0900 Subject: [PATCH] add firebase secret --- app-server/gradle.properties | 2 +- .../scc_server/build.gradle.kts | 11 +++---- .../scc-server/files/dev/firebase-key.json | 32 +++++++++++++++++++ .../scc-server/files/prod/firebase-key.json | 32 +++++++++++++++++++ .../helm/scc-server/templates/configmap.yaml | 2 ++ .../templates/deploy-secret-job.yaml | 1 + 6 files changed, 73 insertions(+), 7 deletions(-) create mode 100644 infra/helm/scc-server/files/dev/firebase-key.json create mode 100644 infra/helm/scc-server/files/prod/firebase-key.json diff --git a/app-server/gradle.properties b/app-server/gradle.properties index eeca2d270..1057e3c2b 100644 --- a/app-server/gradle.properties +++ b/app-server/gradle.properties @@ -17,7 +17,7 @@ flywayVersion=9.4.0 kspVersion=1.8.20-1.0.10 kopyKatVersion=1.0.4 detektVersion=1.21.0 -jibVersion=3.3.0 +jibVersion=3.4.1 jacksonModuleKotlinVersion=2.12.3 awsSdkVersion=2.17.292 guavaVersion=31.1-jre diff --git a/app-server/subprojects/deploying_apps/scc_server/build.gradle.kts b/app-server/subprojects/deploying_apps/scc_server/build.gradle.kts index 094e3a3cd..512539117 100644 --- a/app-server/subprojects/deploying_apps/scc_server/build.gradle.kts +++ b/app-server/subprojects/deploying_apps/scc_server/build.gradle.kts @@ -33,6 +33,7 @@ dependencies { } jib { + containerizingMode = "packaged" extraDirectories { paths { path { @@ -56,18 +57,16 @@ jib { } } to { - image = "public.ecr.aws/i6n1n6v2/scc-server" credHelper.helper = "ecr-login" val version = property("version") as? String ?: throw IllegalArgumentException("No property `version` exists!") - tags = setOf(version) + image = "public.ecr.aws/i6n1n6v2/scc-server:$version" } container { - entrypoint = listOf("./app/run-java.sh") + entrypoint = listOf("/app/run-java.sh") environment = mapOf( - "JAVA_MAIN_CLASS" to "club.staircrusher.scc_server.SccServerApplicationKt", - "JAVA_LIB_DIR" to "/app/libs/*:/app/classes:/app/resources", + "JAVA_MAIN_CLASS" to "@/app/jib-main-class-file", + "JAVA_CLASSPATH" to "@/app/jib-classpath-file", ) - mainClass = "club.staircrusher.scc_server.SccServerApplicationKt" ports = listOf("8080", "18080") format = Docker } diff --git a/infra/helm/scc-server/files/dev/firebase-key.json b/infra/helm/scc-server/files/dev/firebase-key.json new file mode 100644 index 000000000..5c29e02f1 --- /dev/null +++ b/infra/helm/scc-server/files/dev/firebase-key.json @@ -0,0 +1,32 @@ +{ + "type": "ENC[AES256_GCM,data:YfjczZU9LgP1XL/iWDL7,iv:SqsbAmoaHXP2P4Z3DyQM025V3JhJ4sUek2u0Dp1ijUU=,tag:jSGipl/z3Qr47fiUR/uJQg==,type:str]", + "project_id": "ENC[AES256_GCM,data:VClYeUgybI2RAsHuS8l60g==,iv:r+b71qzSU+9pa+STnRaaUyH1sC7sLcoihZq3wrmRlE8=,tag:x/B0ZXH2b6oppXcv5JeRyA==,type:str]", + "private_key_id": "ENC[AES256_GCM,data:563a/UbaXs5zU1B/+RyGz9pMoJGRUqaI5cuD6Qq8OMPw60MUzh5qPw==,iv:NAy2Ux32u1tVQkxis3l1/P5EisQ2azjQA4MQ9Nc8qmI=,tag:7OdlW6Ai0Bnqf2Sm1Jwu2w==,type:str]", + "private_key": "ENC[AES256_GCM,data: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,iv:xeEM9TR6ZN6+CBLMoM+9/JZM8cbi1yG5q6cKg+Q+Xzg=,tag:MqIt+JpJmM+vttS17CqVWw==,type:str]", + "client_email": "ENC[AES256_GCM,data:WG/2qe/TmocqlES0DQbXypjFXrFhex3FwnwZTgC1/fVCtSfUG+9dF7lw1jL91vZYHQnraPCPFp3GRPZzmC1OVw==,iv:NmeZjJAmT9mVNngB8Hb8D4jjwfmdpcYrGqPQmA80rTc=,tag:txw0OB751ZGmIkKGmq+53Q==,type:str]", + "client_id": "ENC[AES256_GCM,data:YxZWVEQ3WXJbQPJaUoiyOReRYcip,iv:HTLe91mxPudBwKq4b328N5hQ0a9FtJKN3KZgvr9905k=,tag:zx8sOVJwvdSoEi6wIzzTSw==,type:str]", + "auth_uri": "ENC[AES256_GCM,data:Df76XF0IhMmsl85ORQl4PVcRyqdOXJaFIfdGKudJ7np7+GIUMh9OAe0=,iv:6rpbme+zAziBpHtTAZdaW5sHk58pRVfYnr/T4KNsoMs=,tag:iOCG371pMJra1STMMPu14g==,type:str]", + "token_uri": "ENC[AES256_GCM,data:LfoWubXsazZ6sEhCgo8uZL2XYiiqha6H44OjZe83YZ57+KQ=,iv:dNhltiE/6tJ7QJWagqnUEb2tRatYY3AuV7h2NayAr1U=,tag:9BHFu3uoNSAnlYMtc8RnDg==,type:str]", + "auth_provider_x509_cert_url": "ENC[AES256_GCM,data:PYhAynbsbYbwdMzZeVDaBEp0TbTLBeDVg70Fo+Tb0q66ZOxmTohcEO9Z,iv:pbb9Hn7tm+Q8bHYxGASqCq+LZc05zVBi4tHTUOgfviw=,tag:r73safinTUEB/b3qSFstWg==,type:str]", + "client_x509_cert_url": "ENC[AES256_GCM,data:/Xh9gPLKCKctxgoFxqc38MiQoy7l/MRuac9ofoPZ+A9zleSv8gDYbfdB93COmVtHfwDE/4CR4C6JbYmtFac9DQ6DAlUQIAyDGJiK0tEZM+ERSiRlBDo2Bbrf+t7YHu2Nst0/Gq/Y3TeDChekuW4RunEiA5A=,iv:5kf3J/PE0Bl+mPwUWvr+B/ibTJJAxsB8+NZfFqLH91M=,tag:JS4stnjwD53deSCxRiZwyg==,type:str]", + "universe_domain": "ENC[AES256_GCM,data:7cqd/1GYDr8iuCiPF+g=,iv:3pVeECM8cBdX0tubUXRC5FuY9ysEUFI4clN136H030g=,tag:H/llmNiHmjgxWlOMMFbnzQ==,type:str]", + "sops": { + "kms": [ + { + "arn": "arn:aws:kms:ap-northeast-2:291889421067:alias/sops", + "created_at": "2024-08-26T15:03:55Z", + "enc": "AQICAHhU9Jm6sQcs4UC3B/Bokv4VdWkAgcMCecRElj3SPrSR1AGS7gun8lMLPdyDzqW+4ShXAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM60AYOPilinioHO07AgEQgDtem2TCR/gZpMEUnMgpxLDrN4Q9XYXuh0CPeNs150UC1MI4il/SwZfjYa/Jjt1vRn4WDaeP0cdat+82LA==", + "aws_profile": "" + } + ], + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": null, + "lastmodified": "2024-08-26T15:03:56Z", + "mac": "ENC[AES256_GCM,data:KpH+bhst35EDSt/16QuMpKiK4U33t129WHFGLXQn6Mj+4TXqbIMudARX6e3rHvb4F8oZ8hrOQ87jpU13OT46i0LIjrsJD/wdW6M0QHyA02duV7kFeFfeHYi1u85IlU1KFzfOq07ynppo+ApVwLktqX35HvufTEKZ0PiH9i4YsFU=,iv:mPUrdKEOP9hIQd87D/iU80vXzuiP+w5nwTaJIOJmah8=,tag:QMOAETT3GfXSV5FoMTRi0A==,type:str]", + "pgp": null, + "unencrypted_suffix": "_unencrypted", + "version": "3.9.0" + } +} \ No newline at end of file diff --git a/infra/helm/scc-server/files/prod/firebase-key.json b/infra/helm/scc-server/files/prod/firebase-key.json new file mode 100644 index 000000000..5c29e02f1 --- /dev/null +++ b/infra/helm/scc-server/files/prod/firebase-key.json @@ -0,0 +1,32 @@ +{ + "type": "ENC[AES256_GCM,data:YfjczZU9LgP1XL/iWDL7,iv:SqsbAmoaHXP2P4Z3DyQM025V3JhJ4sUek2u0Dp1ijUU=,tag:jSGipl/z3Qr47fiUR/uJQg==,type:str]", + "project_id": "ENC[AES256_GCM,data:VClYeUgybI2RAsHuS8l60g==,iv:r+b71qzSU+9pa+STnRaaUyH1sC7sLcoihZq3wrmRlE8=,tag:x/B0ZXH2b6oppXcv5JeRyA==,type:str]", + "private_key_id": "ENC[AES256_GCM,data:563a/UbaXs5zU1B/+RyGz9pMoJGRUqaI5cuD6Qq8OMPw60MUzh5qPw==,iv:NAy2Ux32u1tVQkxis3l1/P5EisQ2azjQA4MQ9Nc8qmI=,tag:7OdlW6Ai0Bnqf2Sm1Jwu2w==,type:str]", + "private_key": "ENC[AES256_GCM,data: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,iv:xeEM9TR6ZN6+CBLMoM+9/JZM8cbi1yG5q6cKg+Q+Xzg=,tag:MqIt+JpJmM+vttS17CqVWw==,type:str]", + "client_email": "ENC[AES256_GCM,data:WG/2qe/TmocqlES0DQbXypjFXrFhex3FwnwZTgC1/fVCtSfUG+9dF7lw1jL91vZYHQnraPCPFp3GRPZzmC1OVw==,iv:NmeZjJAmT9mVNngB8Hb8D4jjwfmdpcYrGqPQmA80rTc=,tag:txw0OB751ZGmIkKGmq+53Q==,type:str]", + "client_id": "ENC[AES256_GCM,data:YxZWVEQ3WXJbQPJaUoiyOReRYcip,iv:HTLe91mxPudBwKq4b328N5hQ0a9FtJKN3KZgvr9905k=,tag:zx8sOVJwvdSoEi6wIzzTSw==,type:str]", + "auth_uri": "ENC[AES256_GCM,data:Df76XF0IhMmsl85ORQl4PVcRyqdOXJaFIfdGKudJ7np7+GIUMh9OAe0=,iv:6rpbme+zAziBpHtTAZdaW5sHk58pRVfYnr/T4KNsoMs=,tag:iOCG371pMJra1STMMPu14g==,type:str]", + "token_uri": "ENC[AES256_GCM,data:LfoWubXsazZ6sEhCgo8uZL2XYiiqha6H44OjZe83YZ57+KQ=,iv:dNhltiE/6tJ7QJWagqnUEb2tRatYY3AuV7h2NayAr1U=,tag:9BHFu3uoNSAnlYMtc8RnDg==,type:str]", + "auth_provider_x509_cert_url": "ENC[AES256_GCM,data:PYhAynbsbYbwdMzZeVDaBEp0TbTLBeDVg70Fo+Tb0q66ZOxmTohcEO9Z,iv:pbb9Hn7tm+Q8bHYxGASqCq+LZc05zVBi4tHTUOgfviw=,tag:r73safinTUEB/b3qSFstWg==,type:str]", + "client_x509_cert_url": "ENC[AES256_GCM,data:/Xh9gPLKCKctxgoFxqc38MiQoy7l/MRuac9ofoPZ+A9zleSv8gDYbfdB93COmVtHfwDE/4CR4C6JbYmtFac9DQ6DAlUQIAyDGJiK0tEZM+ERSiRlBDo2Bbrf+t7YHu2Nst0/Gq/Y3TeDChekuW4RunEiA5A=,iv:5kf3J/PE0Bl+mPwUWvr+B/ibTJJAxsB8+NZfFqLH91M=,tag:JS4stnjwD53deSCxRiZwyg==,type:str]", + "universe_domain": "ENC[AES256_GCM,data:7cqd/1GYDr8iuCiPF+g=,iv:3pVeECM8cBdX0tubUXRC5FuY9ysEUFI4clN136H030g=,tag:H/llmNiHmjgxWlOMMFbnzQ==,type:str]", + "sops": { + "kms": [ + { + "arn": "arn:aws:kms:ap-northeast-2:291889421067:alias/sops", + "created_at": "2024-08-26T15:03:55Z", + "enc": "AQICAHhU9Jm6sQcs4UC3B/Bokv4VdWkAgcMCecRElj3SPrSR1AGS7gun8lMLPdyDzqW+4ShXAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM60AYOPilinioHO07AgEQgDtem2TCR/gZpMEUnMgpxLDrN4Q9XYXuh0CPeNs150UC1MI4il/SwZfjYa/Jjt1vRn4WDaeP0cdat+82LA==", + "aws_profile": "" + } + ], + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": null, + "lastmodified": "2024-08-26T15:03:56Z", + "mac": "ENC[AES256_GCM,data:KpH+bhst35EDSt/16QuMpKiK4U33t129WHFGLXQn6Mj+4TXqbIMudARX6e3rHvb4F8oZ8hrOQ87jpU13OT46i0LIjrsJD/wdW6M0QHyA02duV7kFeFfeHYi1u85IlU1KFzfOq07ynppo+ApVwLktqX35HvufTEKZ0PiH9i4YsFU=,iv:mPUrdKEOP9hIQd87D/iU80vXzuiP+w5nwTaJIOJmah8=,tag:QMOAETT3GfXSV5FoMTRi0A==,type:str]", + "pgp": null, + "unencrypted_suffix": "_unencrypted", + "version": "3.9.0" + } +} \ No newline at end of file diff --git a/infra/helm/scc-server/templates/configmap.yaml b/infra/helm/scc-server/templates/configmap.yaml index 835054872..1e0abdb72 100644 --- a/infra/helm/scc-server/templates/configmap.yaml +++ b/infra/helm/scc-server/templates/configmap.yaml @@ -12,3 +12,5 @@ data: {{ printf "%s/application.yaml" .Values.filesDir | .Files.Get | indent 4 }} secret-raw.yaml: |- {{ printf "%s/secret.yaml" .Values.filesDir | .Files.Get | indent 4 }} + firebase-key.json: |- +{{ printf "%s/firebase-key.json" .Values.filesDir | .Files.Get | indent 4 }} diff --git a/infra/helm/scc-server/templates/deploy-secret-job.yaml b/infra/helm/scc-server/templates/deploy-secret-job.yaml index f50938af5..2b5c43baf 100644 --- a/infra/helm/scc-server/templates/deploy-secret-job.yaml +++ b/infra/helm/scc-server/templates/deploy-secret-job.yaml @@ -23,6 +23,7 @@ spec: chmod u+x kubectl && mkdir secret && sops -d /app/conf/secret-raw.yaml > secret/secret.yaml && + sops -d /app/conf/firebase-key.json > secret/firebase-key.json && ./kubectl create secret generic {{ include "scc-server.fullname" . }} --from-file=secret --dry-run=client -o yaml | ./kubectl apply -f - # TODO: kubectl을 이미지에 미리 깔아놓기 env: