go 버전업 && ory 설정파일들 자동 생성 스크립트 추가

2026-05-07 11:01:25 +09:00
parent 45a14163bf
commit 2cba9c9c1f
25 changed files with 504 additions and 144 deletions
--- a/deploy/templates/docker-compose.yaml
+++ b/deploy/templates/docker-compose.yaml
@@ -69,7 +69,7 @@ services:
      - KRATOS_SELFSERVICE_FLOWS_REGISTRATION_UI_URL=${KRATOS_UI_URL}/registration
      - KRATOS_SELFSERVICE_FLOWS_LOGOUT_AFTER_DEFAULT_BROWSER_RETURN_URL=${KRATOS_UI_URL}/login
    volumes:
-      - ./ory/kratos:/etc/config/kratos:ro
+      - ./config/.generated/ory/kratos:/etc/config/kratos:ro
    command: migrate sql up -e -c /etc/config/kratos/kratos.yml --yes
    networks: [app_net]
    depends_on:
@@ -94,7 +94,7 @@ services:
      - KRATOS_SELFSERVICE_FLOWS_REGISTRATION_UI_URL=${KRATOS_UI_URL}/registration
      - KRATOS_SELFSERVICE_FLOWS_LOGOUT_AFTER_DEFAULT_BROWSER_RETURN_URL=${KRATOS_UI_URL}/login
    volumes:
-      - ./ory/kratos:/etc/config/kratos:ro
+      - ./config/.generated/ory/kratos:/etc/config/kratos:ro
    command: serve -c /etc/config/kratos/kratos.yml --dev --watch-courier
    networks: [app_net]
    depends_on:
@@ -122,7 +122,7 @@ services:
      - URLS_ERROR=${HYDRA_ERROR_URL:-${USERFRONT_URL}/error}
      - SECRETS_SYSTEM=${ORY_POSTGRES_PASSWORD}
    volumes:
-      - ./ory/hydra:/etc/config/hydra:ro
+      - ./config/.generated/ory/hydra:/etc/config/hydra:ro
    command: serve -c /etc/config/hydra/hydra.yml all --dev
    networks: [app_net]
    depends_on:
@@ -134,7 +134,7 @@ services:
    environment:
      - DSN=postgres://${ORY_POSTGRES_USER:-ory}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
    volumes:
-      - ./ory/keto:/etc/config/keto:ro
+      - ./config/.generated/ory/keto:/etc/config/keto:ro
    command: ["migrate", "up", "-c", "/etc/config/keto/keto.yml", "--yes"]
    networks: [app_net]
    depends_on:
@@ -147,7 +147,7 @@ services:
    environment:
      - DSN=postgres://${ORY_POSTGRES_USER:-ory}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
    volumes:
-      - ./ory/keto:/etc/config/keto:ro
+      - ./config/.generated/ory/keto:/etc/config/keto:ro
    command: serve -c /etc/config/keto/keto.yml
    networks: [app_net]
    depends_on:
@@ -173,7 +173,7 @@ services:
      - OATHKEEPER_INTROSPECT_CLIENT_ID=${OATHKEEPER_INTROSPECT_CLIENT_ID:-oathkeeper-introspect}
      - OATHKEEPER_INTROSPECT_CLIENT_SECRET=${OATHKEEPER_INTROSPECT_CLIENT_SECRET:-oathkeeper-secret}
    volumes:
-      - ./ory/oathkeeper:/etc/config/oathkeeper:ro
+      - ./config/.generated/ory/oathkeeper:/etc/config/oathkeeper:ro
      - oathkeeper_logs:/var/log/oathkeeper
    entrypoint: ["/etc/config/oathkeeper/entrypoint.sh"]
    networks: [app_net]
@@ -189,9 +189,27 @@ services:
      /bin/sh -c "
        apk add --no-cache curl;
        echo 'Wait for Ory services...';
-        until curl -s http://kratos:4433/health/ready; do sleep 1; done;
-        until curl -s http://hydra:4444/health/ready; do sleep 1; done;
-        until curl -s http://keto:4466/health/ready; do sleep 1; done;
+        check_ready() {
+          name=\"$$1\";
+          url=\"$$2\";
+          max=\"$${ORY_STACK_CHECK_MAX_ATTEMPTS:-60}\";
+          i=1;
+          while [ \"$$i\" -le \"$$max\" ]; do
+            if curl --connect-timeout 2 --max-time 3 -fsS \"$$url\" >/dev/null; then
+              echo \"Ory service ready: $$name\";
+              return 0;
+            fi;
+            echo \"Waiting for Ory service: $$name ($$i/$$max)\";
+            i=$$((i + 1));
+            sleep 1;
+          done;
+          echo \"ERROR: Ory service not ready: $$name after $$max attempts ($$url)\" >&2;
+          echo \"ERROR: Check service logs: docker logs $${COMPOSE_PROJECT_NAME}_$$name\" >&2;
+          return 1;
+        };
+        check_ready kratos http://kratos:4433/health/ready || exit 1;
+        check_ready hydra http://hydra:4444/health/ready || exit 1;
+        check_ready keto http://keto:4466/health/ready || exit 1;
        echo 'Ory stack is ready.';"
    depends_on:
      - kratos
--- a/deploy/templates/ory/kratos/kratos.yml.template
+++ b/deploy/templates/ory/kratos/kratos.yml.template
@@ -1,20 +1,17 @@
 version: v26.2.0

-dsn: ${DSN}
+dsn: ${KRATOS_DSN}

 serve:
    public:
-        base_url: ${KRATOS_BROWSER_URL}
+        base_url: http://localhost:4433/
        cors:
            enabled: true
            allowed_origins:
                - http://backend:{{BACKEND_PORT}}
-                - ${USERFRONT_URL}
-                - ${ADMINFRONT_URL}
-                - ${DEVFRONT_URL}
-                - ${ORGFRONT_URL}
+                - http://localhost:{{USERFRONT_PORT}}
    admin:
-        base_url: ${KRATOS_ADMIN_URL}
+        base_url: http://localhost:4434/

 session:
    cookie:
@@ -23,22 +20,17 @@ session:
        path: /

 selfservice:
-    default_browser_return_url: ${KRATOS_UI_URL}
+    default_browser_return_url: http://localhost:{{USERFRONT_PORT}}/
    allowed_return_urls:
-        - ${KRATOS_UI_URL}
-        - ${KRATOS_UI_URL}/
-        - ${USERFRONT_URL}
-        - ${USERFRONT_URL}/
-        - ${USERFRONT_URL}/ko
-        - ${USERFRONT_URL}/ko/
-        - ${USERFRONT_URL}/en
-        - ${USERFRONT_URL}/en/
-        - ${USERFRONT_URL}/auth/callback
-        - ${USERFRONT_URL}/ko/auth/callback
-        - ${USERFRONT_URL}/en/auth/callback
-        - ${ADMINFRONT_URL}/auth/callback
-        - ${DEVFRONT_URL}/auth/callback
-        - ${ORGFRONT_URL}/auth/callback
+        - http://localhost:{{USERFRONT_PORT}}
+        - http://localhost:{{USERFRONT_PORT}}/
+        - http://localhost:{{USERFRONT_PORT}}/ko
+        - http://localhost:{{USERFRONT_PORT}}/ko/
+        - http://localhost:{{USERFRONT_PORT}}/en
+        - http://localhost:{{USERFRONT_PORT}}/en/
+        - http://localhost:{{USERFRONT_PORT}}/auth/callback
+        - http://localhost:{{USERFRONT_PORT}}/ko/auth/callback
+        - http://localhost:{{USERFRONT_PORT}}/en/auth/callback

    methods:
        password:
@@ -51,24 +43,24 @@ selfservice:

    flows:
        error:
-            ui_url: ${KRATOS_UI_URL}/error
+            ui_url: http://localhost:{{USERFRONT_PORT}}/error
        settings:
-            ui_url: ${KRATOS_UI_URL}/error?error=settings_disabled
+            ui_url: http://localhost:{{USERFRONT_PORT}}/error?error=settings_disabled
            privileged_session_max_age: 15m
        recovery:
-            ui_url: ${KRATOS_UI_URL}/recovery
+            ui_url: http://localhost:{{USERFRONT_PORT}}/recovery
            use: code
        verification:
-            ui_url: ${KRATOS_UI_URL}/verification
+            ui_url: http://localhost:{{USERFRONT_PORT}}/verification
            use: code
        logout:
            after:
-                default_browser_return_url: ${KRATOS_UI_URL}/login
+                default_browser_return_url: http://localhost:{{USERFRONT_PORT}}/login
        login:
-            ui_url: ${KRATOS_UI_URL}/login
+            ui_url: http://localhost:{{USERFRONT_PORT}}/login
            lifespan: 10m
        registration:
-            ui_url: ${KRATOS_UI_URL}/registration
+            ui_url: http://localhost:{{USERFRONT_PORT}}/registration
            lifespan: 10m

 log: