initial import to main branch

.github/workflows/build-and-push.yml

@@ -0,0 +1,58 @@
+name: Build And Deploy
+on:
+  push:
+    branches:
+      - main
+      - develop
+env:
+  SERVICE: tks-api
+  TAG: ${{github.sha}}
+
+jobs:
+  build-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v1
+        with:
+          username: ${{secrets.DOCKERHUB_USERNAME}}
+          password: ${{secrets.DOCKERHUB_TOKEN}}
+
+      - name: Build and Push
+        id: docker_build
+        uses: docker/build-push-action@v2
+        with:
+          push: true
+          tags: |
+            sktcloud/${{env.SERVICE}}:${{env.TAG}}
+
+      - name: Setup Kustomize
+        uses: imranismail/setup-kustomize@v1
+        with:
+          kustomize-version: "3.6.1"
+      - run: |
+          git config --global user.email "tks@github.com"
+          git config --global user.name "tks"
+
+          git clone "https://${{secrets.BOT_GITHUB_TOKEN}}@github.com/openinfradev/cicd-manifests.git"
+
+
+          TARGET='cicd'
+          if [[ ${{github.ref}} == *"develop"* ]]; then
+            TARGET='development'
+          elif [[ ${{github.ref}} == *"ft"* ]]; then
+            TARGET='ft'
+          fi
+          cd cicd-manifests/${SERVICE}/overlay/${TARGET}
+
+          kustomize edit set image docker.io/sktcloud/${SERVICE}:${TAG}
+          git add kustomization.yaml
+          git commit --allow-empty -m "Set image tag to ${SERVICE} ${TAG}"
+          git pull --rebase origin main
+          git push origin main --force

.github/workflows/build.yml

@@ -0,0 +1,33 @@
+name: Build image
+on:
+  pull_request:
+    branches:
+      - main
+      - develop
+env:
+  SERVICE: tks-api
+  TAG: ${{github.sha}}
+
+jobs:
+  build-and-push-image:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: build image
+        id: docker_build
+        uses: docker/build-push-action@v2
+        with:
+          push: false
+          tags: |
+            sktcloud/${{env.SERVICE}}:${{env.TAG}}

.gitignore

@@ -0,0 +1,15 @@
+.DS_Store
+
+# Editor directories and files
+.idea
+.vscode
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+
+web
+main
+output
+vendor

Dockerfile

@@ -0,0 +1,18 @@
+# Build - backend
+FROM --platform=linux/amd64 docker.io/library/golang:1.18-buster AS backend-build
+RUN DEBIAN_FRONTEND="noninteractive" apt-get -y install tzdata
+RUN wget https://github.com/swaggo/swag/releases/download/v1.7.1/swag_linux_amd64.tar.gz -O - | tar -xz -C /tmp && cp /tmp/swag_linux_amd64/swag /usr/local/bin
+
+WORKDIR /app/backend
+COPY ./ .
+RUN go mod tidy
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o ./bin/server ./cmd/server/main.go
+
+ENV TZ=Asia/Seoul
+
+EXPOSE 8080
+
+WORKDIR /app/backend/bin
+
+ENTRYPOINT ["./server"]
+CMD ["-webroot","/app/backend/web"]

Makefile

@@ -0,0 +1,22 @@
+.PHONY: docs
+docs:
+	swag init -g ./cmd/server/main.go -o ./api/swagger
+
+.PHONY: build
+build:
+	go build -o output/tks-api ./cmd/server/main.go
+	go build -o output/tks ./cmd/client/main.go
+
+.PHONY: run
+run:
+	output/tks-api
+
+.PHONY: test
+test:
+	go test -v ./...
+
+.PHONY: dev_run
+dev_run: 
+	swag init -g ./cmd/server/main.go -o ./api/swagger
+	go build ./cmd/server/main.go
+	./main

README.md

@@ -1,2 +1,69 @@
-# tks-api
-tks-api
+# TKS-API backend
+
+### Run
+
+```
+$ go build -o server cmd/server/main.go
+$ ./server
+```
+
+### Generate swagger files
+
+```
+$ make docs
+```
+
+### Dev run
+
+```
+# swagger build & build & run
+$ make dev_run
+```
+
+### Configuration kubernetes config
+
+kubernetes client 설정은 2가지 방식이 가능하다.
+아래와 같이 kubeconfig path 를 parameter 로 넘기는 방식 ( 주로 local debugging 목적 )
+
+```
+$ ./sever --kubeconfig /kube/config ...
+```
+
+incluster 의 serviceAccount 를 활용한 방식 ( recommended ).
+단 이 방식을 사용하기 위해서는 반드시 클러스터에서 tks::default serviceAccount에 대한 clusterrolebinding 설정이 필요하다.
+
+```
+in-cluster. 기본 view 권한 설정 ( 여기에 nodes, secrets 등은 빠져있음 )
+$ kubectl create clusterrolebinding default-view --clusterrole=view --serviceaccount=default:tks
+```
+
+아래는 node 정보를 가져오기 위한 추가 rbac 설정
+
+```
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: tks-api-test
+  namespace: tks
+rules:
+# Just an example, feel free to change it
+- apiGroups: [""]
+  resources: ["nodes", "secrets","services","pods","namespaces","events"]
+  verbs: ["get", "watch", "list"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: tks-api-test
+  namespace: tks
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: tks
+roleRef:
+  kind: ClusterRole
+  name: tks-api-test
+  apiGroup: rbac.authorization.k8s.io
+```