Merge branch 'feat/#15-mariadb-migration' into develop

Author: mrangjw

.github/workflows/create-secret.yml

@@ -0,0 +1,32 @@
+name: Create Harbor Secret
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+
+jobs:
+  create-secret:
+    runs-on: ubuntu-latest
+    steps:
+      - name: AWS 자격증명 설정
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ap-northeast-2
+
+      - name: kubeconfig 설정
+        run: |
+          aws eks update-kubeconfig \
+            --name skala3-cloud1-team8 \
+            --region ap-northeast-2
+
+      - name: harbor-secret 생성
+        run: |
+          kubectl create secret docker-registry harbor-secret \
+            -n opentraum \
+            --docker-server=${{ secrets.HARBOR_REGISTRY }} \
+            --docker-username=${{ secrets.HARBOR_USERNAME }} \
+            --docker-password=${{ secrets.HARBOR_PASSWORD }} \
+            --dry-run=client -o yaml | kubectl apply --validate=false -f -

.gitignore

@@ -42,6 +42,7 @@ docker-compose.override.yml
 k8s/*-secret.yml
 k8s/**/secret.yml
 k8s/secrets/
+k8s/secrets.yml
 
 # =========================
 # Terraform (future)

docker-compose.yml

@@ -149,7 +149,7 @@ services:
       SPRING_CLOUD_GATEWAY_ROUTES_1_PREDICATES_0: Path=/api/v1/users/**,/api/v1/tenants/**
       SPRING_CLOUD_GATEWAY_ROUTES_2_ID: event-service
       SPRING_CLOUD_GATEWAY_ROUTES_2_URI: http://event-service:8083
-      SPRING_CLOUD_GATEWAY_ROUTES_2_PREDICATES_0: Path=/api/v1/concerts/**,/api/v1/schedules/**,/api/v1/admin/seats/**
+      SPRING_CLOUD_GATEWAY_ROUTES_2_PREDICATES_0: Path=/api/v1/concerts/**,/api/v1/schedules/**,/api/v1/admin/seats/**,/api/v1/admin/events/**,/api/v1/admin/venues/**
       SPRING_CLOUD_GATEWAY_ROUTES_3_ID: reservation-service
       SPRING_CLOUD_GATEWAY_ROUTES_3_URI: http://reservation-service:8084
       SPRING_CLOUD_GATEWAY_ROUTES_3_PREDICATES_0: Path=/api/v1/reservations/**,/api/v1/queue/**,/api/v1/live/**,/api/v1/lottery/**
@@ -271,6 +271,8 @@ services:
       REDIS_HOST: redis
       REDIS_PORT: 6379
       KAFKA_BOOTSTRAP_SERVERS: kafka:29092
+      # OpenAI (AI 이벤트 생성)
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
     depends_on:
       postgres:
         condition: service_healthy

docker/Dockerfile.web

@@ -17,25 +17,25 @@ FROM nginx:alpine
 
 COPY --from=builder /app/dist /usr/share/nginx/html
 
-# nginx.conf는 docker-compose volume mount 또는 별도 COPY로 제공
-# 기본 설정: SPA fallback + API 프록시
-RUN echo 'server { \n\
-    listen 3000; \n\
-    server_name localhost; \n\
-    root /usr/share/nginx/html; \n\
-    index index.html; \n\
-    location / { try_files $uri $uri/ /index.html; } \n\
-    location /api/ { \n\
-        proxy_pass http://gateway:8080; \n\
-        proxy_set_header Host $host; \n\
-        proxy_set_header X-Real-IP $remote_addr; \n\
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; \n\
-        proxy_http_version 1.1; \n\
-        proxy_read_timeout 300s; \n\
-    } \n\
-    gzip on; \n\
-    gzip_types text/plain text/css application/json application/javascript text/xml; \n\
-}' > /etc/nginx/conf.d/default.conf
+# SPA fallback + API 프록시
+RUN printf 'server {\n\
+    listen 3000;\n\
+    server_name localhost;\n\
+    root /usr/share/nginx/html;\n\
+    index index.html;\n\
+    location / { try_files $uri $uri/ /index.html; }\n\
+    location = /index.html { add_header Cache-Control "no-cache, no-store, must-revalidate"; }\n\
+    location /api/ {\n\
+        proxy_pass http://gateway:8080;\n\
+        proxy_set_header Host $host;\n\
+        proxy_set_header X-Real-IP $remote_addr;\n\
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n\
+        proxy_http_version 1.1;\n\
+        proxy_read_timeout 300s;\n\
+    }\n\
+    gzip on;\n\
+    gzip_types text/plain text/css application/json application/javascript text/xml;\n\
+}\n' > /etc/nginx/conf.d/default.conf
 
 EXPOSE 3000
 

k8s/argocd/auth-service-app.yml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: opentraum-auth-service
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: git@github.com:OpenTraum/OpenTraum-auth-service.git
+    targetRevision: main
+    path: k8s
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: opentraum
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PruneLast=true
+    retry:
+      limit: 3
+      backoff:
+        duration: 10s
+        maxDuration: 3m
+        factor: 2

k8s/argocd/event-service-app.yml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: opentraum-event-service
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: git@github.com:OpenTraum/OpenTraum-event-service.git
+    targetRevision: main
+    path: k8s
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: opentraum
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PruneLast=true
+    retry:
+      limit: 3
+      backoff:
+        duration: 10s
+        maxDuration: 3m
+        factor: 2

k8s/argocd/gateway-app.yml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: opentraum-gateway
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: git@github.com:OpenTraum/OpenTraum-gateway.git
+    targetRevision: main
+    path: k8s
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: opentraum
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PruneLast=true
+    retry:
+      limit: 3
+      backoff:
+        duration: 10s
+        maxDuration: 3m
+        factor: 2

k8s/argocd/infra-app.yml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: opentraum-infra
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: git@github.com:OpenTraum/OpenTraum-Infra.git
+    targetRevision: main
+    path: k8s
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: opentraum
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PruneLast=true
+    retry:
+      limit: 3
+      backoff:
+        duration: 10s
+        maxDuration: 3m
+        factor: 2

k8s/argocd/payment-service-app.yml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: opentraum-payment-service
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: git@github.com:OpenTraum/OpenTraum-payment-service.git
+    targetRevision: main
+    path: k8s
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: opentraum
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PruneLast=true
+    retry:
+      limit: 3
+      backoff:
+        duration: 10s
+        maxDuration: 3m
+        factor: 2

k8s/argocd/reservation-service-app.yml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: opentraum-reservation-service
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: git@github.com:OpenTraum/OpenTraum-reservation-service.git
+    targetRevision: main
+    path: k8s
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: opentraum
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PruneLast=true
+    retry:
+      limit: 3
+      backoff:
+        duration: 10s
+        maxDuration: 3m
+        factor: 2