chore(memory-infra): add prod-onPromise setup Elasticsearch and Kibana configs

Author: YuSunjo

http/http-client.env.json

@@ -3,9 +3,9 @@
     "memory_api": "http://localhost:8080"
   },
   "development": {
-      "memory_api": "http://dev.api.mymemory.co.kr"
+      "memory_api": "https://dev.api.mymemory.co.kr"
   },
   "production": {
-    "memory_api": "http://api.mymemory.co.kr:8080"
+    "memory_api": "https://api.mymemory.co.kr"
   }
 }

memory-infra/docker/prod/ec2/.env.example

@@ -0,0 +1,13 @@
+DB_URL=
+DB_USERNAME=
+DB_PASSWORD=
+AWS_S3_ACCESS_KEY=
+AWS_S3_SECRET_KEY=
+AWS_S3_BUCKET=
+AWS_S3_REGION=
+AWS_S3_ENDPOINT=
+JWT_TOKEN_SECRET=
+ELASTIC_URIS=
+ELASTIC_PASSWORD=
+# KIBANA_PASSWOD는 추후 통합할 때 필요할듯
+# KIBANA_PASSWORD=

memory-infra/docker/prod/ec2/buildspec.yml

@@ -23,6 +23,9 @@ phases:
         AWS_S3_REGION=$(echo $SECRET_VALUES | jq -r '.AWS_S3_REGION')
         AWS_S3_ENDPOINT=$(echo $SECRET_VALUES | jq -r '.AWS_S3_ENDPOINT')
         JWT_TOKEN_SECRET=$(echo $SECRET_VALUES | jq -r '.JWT_TOKEN_SECRET')
+        ELASTIC_URIS=$(echo $SECRET_VALUES | jq -r '.ELASTIC_URIS')
+        ELASTIC_PASSWORD=$(echo $SECRET_VALUES | jq -r '.ELASTIC_PASSWORD')
+        KIBANA_PASSWORD=$(echo $SECRET_VALUES | jq -r '.KIBANA_PASSWORD')
         EOF
 
   build:

memory-infra/docker/prod/ec2/docker-compose.yml

@@ -1,61 +1,6 @@
 version: '3.8'
 
 services:
-  elasticsearch:
-    build:
-      context: .
-      dockerfile: ../../local/Dockerfile_Elastic
-    container_name: memory-elasticsearch-prod
-    ports:
-      - "9200:9200"
-      - "9300:9300"
-    environment:
-      - discovery.type=single-node
-      - xpack.security.enabled=false
-      - "ES_JAVA_OPTS=-Xms4g -Xmx4g"
-      - bootstrap.memory_lock=true
-      - cluster.name=memory-prod-cluster
-      - node.name=memory-prod-node
-    volumes:
-      - ./data/elasticsearch-data:/usr/share/elasticsearch/data
-    ulimits:
-      memlock:
-        soft: -1
-        hard: -1
-      nofile:
-        soft: 65536
-        hard: 65536
-    networks:
-      - memory-network
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "curl -f http://localhost:9200/_cluster/health || exit 1"]
-      interval: 30s
-      timeout: 10s
-      retries: 5
-
-  kibana:
-    image: docker.elastic.co/kibana/kibana:8.17.4
-    container_name: memory-kibana-prod
-    ports:
-      - "5601:5601"
-    environment:
-      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
-      - xpack.security.enabled=false
-      - SERVER_HOST=0.0.0.0
-      - SERVER_NAME=kibana-prod
-    depends_on:
-      elasticsearch:
-        condition: service_healthy
-    networks:
-      - memory-network
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "curl -f http://localhost:5601/api/status || exit 1"]
-      interval: 30s
-      timeout: 10s
-      retries: 5
-
   app:
     image: 228749872437.dkr.ecr.ap-northeast-2.amazonaws.com/my_memory/memory:latest
     container_name: my-memory
@@ -75,7 +20,9 @@ services:
       CLOUD_AWS_REGION_STATIC: ${AWS_S3_REGION}
       CLOUD_AWS_S3_ENDPOINT: ${AWS_S3_ENDPOINT}
       JWT_TOKEN_SECRET: ${JWT_TOKEN_SECRET}
-      SPRING_ELASTICSEARCH_URIS: http://elasticsearch:9200
+      SPRING_ELASTICSEARCH_URIS: ${ELASTIC_URIS}
+      SPRING_ELASTICSEARCH_USERNAME: elastic
+      SPRING_ELASTICSEARCH_PASSWORD: ${ELASTIC_PASSWORD}
     networks:
       - memory-network
     restart: always
@@ -86,4 +33,3 @@ networks:
 
 volumes:
   postgres-data:
-  elasticsearch-data:

memory-infra/docker/prod/onPromise/.env.example

@@ -0,0 +1,2 @@
+ELASTIC_PASSWORD=
+KIBANA_PASSWORD=

memory-infra/docker/prod/onPromise/Dockerfile_Elastic

@@ -0,0 +1,4 @@
+FROM docker.elastic.co/elasticsearch/elasticsearch:8.17.4
+
+# Nori Analyzer 플러그인 설치
+RUN bin/elasticsearch-plugin install analysis-nori

memory-infra/docker/prod/onPromise/docker-compose.yml

@@ -0,0 +1,63 @@
+version: '3.8'
+
+services:
+  elasticsearch:
+    build:
+      context: .
+      dockerfile: Dockerfile_Elastic
+    container_name: memory-elasticsearch-prod
+    ports:
+      - "9520:9200"
+      - "9350:9300"
+    environment:
+      - discovery.type=single-node
+      - xpack.security.enabled=true
+      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
+      - "ES_JAVA_OPTS=-Xms2g -Xmx2g"
+      - bootstrap.memory_lock=true
+    volumes:
+      - ./data/elasticsearch-data:/usr/share/elasticsearch/data
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+      nofile:
+        soft: 65536
+        hard: 65536
+    networks:
+      - memory-network-prod
+    restart: always
+    healthcheck:
+      test: ["CMD-SHELL", "curl -f http://localhost:9200/_cluster/health -u elastic:${ELASTIC_PASSWORD} --connect-timeout 10 --max-time 10 || exit 1"]
+      interval: 30s
+      timeout: 15s
+      retries: 10
+      start_period: 60s
+
+  kibana:
+    image: docker.elastic.co/kibana/kibana:8.17.4
+    container_name: memory-kibana-prod
+    ports:
+      - "9651:5601"
+    environment:
+      - ELASTICSEARCH_HOSTS=http://elasticsearch:9250
+      - ELASTICSEARCH_USERNAME=kibana_system
+      - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD}
+      - xpack.security.enabled=true
+    depends_on:
+      elasticsearch:
+        condition: service_healthy
+    networks:
+      - memory-network-prod
+    restart: always
+    healthcheck:
+      test: ["CMD-SHELL", "curl -f http://localhost:5601/api/status -u kibana_system:${KIBANA_PASSWORD} || curl -f http://localhost:5601/api/status || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+networks:
+  memory-network-prod:
+    driver: bridge
+
+volumes:
+  elasticsearch-data: