Cloud | Notion

임시

2024 지방 Bastion server User data

#!/bin/bash

sudo yum update -y
sudo yum install curl --allowerasing -y
sudo yum install jq -y
sudo dnf install mariadb105 -y

sudo yum install unzip -y

curl "<https://awscli.amazonaws.com/awscli-exe-linux-aarch64.zip>" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

curl -LO "<https://dl.k8s.io/release/$>(curl -L -s <https://dl.k8s.io/release/stable.txt>)/bin/linux/arm64/kubectl"
sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl

# for ARM systems, set ARCH to: `arm64`, `armv6` or `armv7`
ARCH=arm64
PLATFORM=$(uname -s)_$ARCH

curl -sLO "<https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_$PLATFORM.tar.gz>"

# (Optional) Verify checksum
curl -sL "<https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_checksums.txt>" | grep $PLATFORM | sha256sum --check

tar -xzf eksctl_$PLATFORM.tar.gz -C /tmp && rm eksctl_$PLATFORM.tar.gz

sudo install -m 0755 /tmp/eksctl /usr/local/bin && rm /tmp/eksctl

#!/bin/bash
yum update -y
sudo yum install docker -y

sudo systemctl start docker
sudo systemctl enable docker

#ec2가 arm일 경우 newgrp docker
이거 관련해서 자세히 알아보기

sudo usermod -aG docker ec2-user

FROM public.ecr.aws/amazonlinux/amazonlinux:2023

RUN dnf install -y --allowerasing curl-full libcurl-full \\
    && dnf clean all

WORKDIR /app
COPY token /app/token

RUN chmod +x /app/token

EXPOSE 8080

CMD ["/app/token"]
~                                                                                                                                                                          
~                                                                                                                                                                          
~                                                                                                                                                                          
~                                                                                                                                                                          
~                                                                                                                                                                          
~

FROM public.ecr.aws/amazonlinux/amazonlinux:2023

RUN dnf install -y --allowerasing curl-full libcurl-full \\
    && dnf clean all

WORKDIR /app
COPY user /app/user

RUN chmod +x /app/user

EXPOSE 8080

CMD ["/app/user"]
~                                                                                                                                                                          
~                                                                                                                                                                          
~                                                                                                                                                                          
~                                                                                                                                                                          
~

apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig

metadata:
  name: skills-eks-cluster
  region: ap-northeast-2
  version: "1.35"

iam:
  withOIDC: true

cloudWatch:
  clusterLogging:
    enableTypes:
      - api
      - audit
      - authenticator
      - controllerManager
      - scheduler

secretsEncryption:
  keyARN: arn:aws:kms:ap-northeast-2:339712924586:key/336bcc30-11cd-43e8-8f9d-b92fe20a6c38

vpc:
  id: vpc-00b00e262d9bc7fe6
  subnets:
    public:
      ap-northeast-2a:
        id: subnet-0b933ab2ade03cdfa
      ap-northeast-2b:
        id: subnet-0486475085780bc6b
    private:
      ap-northeast-2a:
        id: subnet-09067777203fec15b
      ap-northeast-2b:
        id: subnet-00d492e965a2595b5
  clusterEndpoints:
    publicAccess: true
    privateAccess: true

managedNodeGroups:
  - name: skills-eks-addon-nodegroup
    instanceType: t4g.large
    amiFamily: AmazonLinux2023
    desiredCapacity: 2
    minSize: 2
    maxSize: 10
    privateNetworking: true
    volumeSize: 50
    labels:
      workload: addon
      node-role: addon
    taints:
      - key: dedicated
        value: addon
        effect: NoSchedule
    tags:
      Name: skills-eks-addon-node
      k8s.io/cluster-autoscaler/enabled: "true"
      k8s.io/cluster-autoscaler/skills-eks-cluster: "owned"

  - name: skills-eks-app-nodegroup
    instanceType: m6g.large
    amiFamily: AmazonLinux2023
    desiredCapacity: 2
    minSize: 2
    maxSize: 10
    privateNetworking: true
    volumeSize: 50
    labels:
      workload: user
      node-role: app
    taints:
      - key: dedicated
        value: user
        effect: NoSchedule
    tags:
      Name: skills-eks-app-node
      k8s.io/cluster-autoscaler/enabled: "true"
      k8s.io/cluster-autoscaler/skills-eks-cluster: "owned"

fargateProfiles:
  - name: skills-eks-app-profile
    selectors:
      - namespace: skills
        labels:
          app: token
    subnets:
      - subnet-09067777203fec15b
      - subnet-00d492e965a2595b5

addons:
  - name: vpc-cni
  - name: kube-proxy
  - name: coredns