git clone https://github.com/chiwoo-samples/spring-lotto-router-handler.git

cd spring-lotto-router-handler; mvn clean package -DskipTests=true

docker build -t "lotto-service:1" -f ./docker/Dockerfile .

FROM amazoncorretto:11-alpine

ENV JAVA_OPTS="-server -Xverify:none"
ENV JAVA_OPTS="$JAVA_OPTS -Dsun.misc.URLClassPath.disableJarChecking=true"

WORKDIR /app

COPY ./target/*.jar /app/springApp.jar
COPY ./docker/entrypoint.sh /app/

RUN chmod +x /app/entrypoint.sh
EXPOSE 8080
ENTRYPOINT ["/app/entrypoint.sh"]

docker images | grep lotto-service

docker run -d --name lotto-service --publish "0.0.0.0:8080:8080" lotto-service:1

docker ps
CONTAINER ID   IMAGE             COMMAND                CREATED         STATUS         PORTS                    NAMES
79d6f647dae8   lotto-service:1   "/app/entrypoint.sh"   6 seconds ago   Up 7 seconds   0.0.0.0:8080->8080/tcp   lotto-service

curl -v -X GET 'http://localhost:8080/api/lotto/lucky' -H 'Content-Type: application/json'

Project : magiclub
Region  : ap-northeast-2
Environment: PoC
Team    : DevOps
Owner   : opsmaster@your.company.com
Apps    : lotto 

git clone https://github.com/chiwoo-cloud-native/aws-fargate-magiclub.git

cd aws-fargate-magiclub 

# aws-fargate-magiclub 폴더에서 아래 명령들을 한번에 실행하세요. 
terraform -chdir=vpc init && terraform -chdir=alb init && terraform -chdir=fargate init  && terraform -chdir=services/lotto \
terraform -chdir=vpc apply -auto-approve && \
terraform -chdir=alb apply -auto-approve && \
terraform -chdir=fargate apply -auto-approve && \
terraform -chdir=services/lotto apply -auto-approve

curl --location -X GET 'http://lotto.mystarcraft.ml/api/lotto/lucky' -H 'Content-Type: application/json'

terraform {
  required_version = ">= 1.0.0"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 3.75.1"
    }
  }
}

provider "aws" {
  region  = "ap-northeast-2"
  profile = "active-stack" # AWS 클라우드에 액세스할 프로파일 명
}

module "vpc" {
  source = "registry.terraform.io/terraform-aws-modules/vpc/aws"

}

locals {
  name_prefix = "magiclub-an2p"
}

module "vpc" {
  source = "registry.terraform.io/terraform-aws-modules/vpc/aws"

  name = local.name_prefix # VPC 및 VPC 관련 리소스의 이름
  cidr = "172.76.0.0/16"   # VPC 의 CIDR 블럭 

  azs                  = ["apne2-az1", "apne2-az3"] # 두개의 AvailAbility Zone 
  public_subnets       = ["172.76.11.0/24", "172.76.12.0/24"] # public 서브넷의 CIDR 
  public_subnet_suffix = "pub"

  private_subnets       = ["172.76.21.0/24", "172.76.22.0/24"] # Fargate 컨테이너를 위한 서브넷의 CIDR 
  private_subnet_suffix = "apps"

  enable_dns_hostnames = true

  # Fargate 컨테이너가 외부 인터넷 리소스에 액세스 하기위해선 NAT 게이트웨이를 설정 필요 
  enable_nat_gateway   = true
  single_nat_gateway   = true

  # VPC 및 관련 리소스의 태그 설정 정보
  tags = {
    Owner       = "opsmaster@your.company.com"
    Environment = "PoC"
    Team        = "DevOps"
  }

  vpc_tags         = { Name = format("%s-vpc", local.name_prefix) }
  igw_tags         = { Name = format("%s-igw", local.name_prefix) }
  nat_gateway_tags = { Name = format("%s-nat", local.name_prefix) }

}

locals {
  name_prefix = "magiclub-an2p"
}

module "alb" {
  source = "registry.terraform.io/terraform-aws-modules/alb/aws"

  name               = "magiclub-an2p-alb"          # 로드 밸런서 이름
  load_balancer_type = "application"                # 로드 밸런서 타입 - Application 
  vpc_id             = data.aws_vpc.this.id         # ALB 개 배치될 VPC 
  security_groups    = [aws_security_group.this.id] # ALB 의 보안 그룹 
  subnets            = data.aws_subnet_ids.pub.ids  # ALB 는 public 서브넷에 배포 하게 됩니다.  

  # HTTP 80 리스너를 정의 하며, 443 포트로 전달 합니다. 
  http_tcp_listeners = [
    {
      protocol    = "HTTP"
      port        = 80
      action_type = "redirect"
      redirect    = {
        port        = "443"
        protocol    = "HTTPS"
        status_code = "HTTP_301"
      }
    }
  ]

  # HTTPS 리스너를 정의 하며 기본은 200 OK 메시지를 반환 합니다.  
  https_listeners = [
    {
      protocol        = "HTTPS"
      port            = 443
      certificate_arn = data.aws_acm_certificate.this.arn
      action_type     = "fixed-response"
      fixed_response  = {
        content_type = "text/plain"
        message_body = "OK"
        status_code  = "200"
      }
    },
  ]

  tags = {
    Owner       = "opsmaster@your.company.com"
    Environment = "PoC"
    Team        = "DevOps"
  }

}

module "ecs" {
  source  = "registry.terraform.io/terraform-aws-modules/ecs/aws"
  version = "3.5.0"

  name               = format("%s-ecs", var.name_prefix)
  container_insights = false
  capacity_providers = ["FARGATE", "FARGATE_SPOT"]

  tags = merge(var.tags, {
    Name = format("%s-ecs", var.name_prefix)
  })
}

locals {
  region             = data.aws_region.current.name
  ecr_repository_url = format("%s", aws_ecr_repository.this.repository_url)
}

module "lotto" {
  source = "../ecs-service/"

  project         = var.project
  region          = local.region
  name_prefix     = var.name_prefix
  container_name  = var.container_name
  container_port  = var.container_port
  container_image = local.ecr_repository_url
  cpu             = 512
  memory          = 1024
  desired_count   = 1
  port_mappings   = [
    {
      "protocol" : "tcp",
      "containerPort" : 8080
    },
  ]

  vpc_id                 = data.aws_vpc.this.id
  cluster_id             = data.aws_ecs_cluster.this.id
  task_role_arn          = data.aws_iam_role.ecs_task_ssm_role.arn
  execution_role_arn     = data.aws_iam_role.ecs_task_execution_role.arn
  subnets                = data.aws_subnets.apps.ids
  security_group_ids     = [aws_security_group.container_sg.id]
  target_group_arn       = aws_lb_target_group.tg8080.arn
  cloud_map_namespace_id = data.aws_service_discovery_dns_namespace.this.id

  depends_on = [aws_ecr_repository.this]
}