AWS EKS에 Next.js application 무중단 배포 적용

{
    "Version": "2012-10-17",
    "Id": "VpcSourceIp",
    "Statement": [
        {
            "Sid": "VpcSourceIp",
						... 이미 설정이 되어있는 부분 밑에 추가
        },
        {
            "Sid": "AllowCloudFrontServicePrincipal",
            ... 여기다가 추가해준다.
        }
    ]
}

# -----------------------------------
ENABLE_S3_UPLOAD_YN         = Y
ENABLE_S3_CACHE_YN          = N
ENABLE_BUILD_YN             = N
ENABLE_DOCKER_YN            = N
ENABLE_DOCKER_NODE_YN       = N
ENABLE_DOCKER_NUXT_YN       = N
ENABLE_DOCKER_NODE_PNPM_YN  = Y
ENABLE_DEPLOY_YN            = Y
# -----------------------------------

    } else if (ENABLE_DOCKER_NODE_PNPM_YN == "Y") {
        this.buildDockerNext()

def buildDockerNext() {
    stage('Docker Image') {
        dir("project") {
            retry(3) {
                def img = docker.build(
                    "${DOCKER_IMAGE_NAME}:latest",
                    "-f \"Dockerfile\" . \
                    --build-arg NEXT_BUILD_NUM=${env.BUILD_NUMBER} \
                    --build-arg BUILD_PROFILE=${BUILD_PROFILE} \
                    --build-arg START_PROFILE=${START_PROFILE} \
                    "
                )
                docker.withRegistry("${DOCKER_REPO_URL}", "${DOCKER_REPO_CREDENTIALS_ID}") {
                    retry(5) {
                        try{
                            img.push("latest")
                        } catch (e) {
                            sleep(10)
                            throw e
                        }
                    }
                }
            }
        }
    }
}

		--build-arg NEXT_BUILD_NUM=${env.BUILD_NUMBER} \

const cdnUrlforStatic = 'cdn-fo.x2bee.com'

const contentSecurityPolicy = `
  default-src 'self';
  script-src 'self' ${cdnUrlforStatic} 'unsafe-inline' 'unsafe-eval' blob: repo.whatap-browser-agent.io/rum/prod/ static.nid.naver.com developers.kakao.com  appleid.cdn-apple.com t1.daumcdn.net t1.kakaocdn.net stdpay.inicis.com stdux.inicis.com nice.checkplus.co.kr umami.x2bee.com js.tosspayments.com;
  connect-src 'self' rum-ap-northeast-2.whatap-browser-agent.io nice.checkplus.co.kr umami.x2bee.com event.tosspayments.com apigw-sandbox.tosspayments.com apigw.tosspayments.com google-analytics.com overbridgenet.com;
  style-src 'self' ${cdnUrlforStatic} 'unsafe-inline' stdpay.inicis.com;
  font-src ${cdnUrlforStatic} 'self' data:;
  worker-src 'self' ${cdnUrlforStatic} blob:;
  img-src ${cdnUrlforStatic} ${imgSrcPolicy}
  media-src ${cdnUrlforStatic} ${mediaSrcPolicy}
  frame-src ${cdnUrlforStatic} ${frameSrcPolicy}
  frame-ancestors ${cdnUrlforStatic} ${frameAncestorsPolicy}
  form-action 'self' stdpay.inicis.com nice.checkplus.co.kr mobile.inicis.com inilite.inicis.com  sharer.kakao.com accounts.kakao.com;
`

  },
  assetPrefix: (() => {
    switch (process.env.APP_ENV) {
      case 'development':
        if (process.env.CI === 'true') {
          return process.env.NEXT_ASSET_PREFIX || ''
        }
        return ''
      default:
        return ''
    }
  })()
}
 
module.exports = withNextIntl(nextConfig)

    } else if (ENABLE_DOCKER_NODE_PNPM_YN == "Y") {
        sh """#!/bin/bash
        cp -r scm/docker/DockerfileForNodePnpm project/Dockerfile &> /dev/null
        cp -r scm/license/ project/ &> /dev/null
        """

FROM node:lts-alpine3.21

ARG BUILD_PROFILE=build:dev
ENV BUILD_PROFILE ${BUILD_PROFILE}
ARG START_PROFILE=start:dev
ENV START_PROFILE ${START_PROFILE}
ARG NEXT_BUILD_NUM
ENV NEXT_BUILD_NUM ${NEXT_BUILD_NUM}
ARG NEXT_ASSET_PREFIX
ENV NEXT_ASSET_PREFIX ${NEXT_ASSET_PREFIX}
ENV CI=true
ENV NODE_OPTIONS="--max-old-space-size=8192"

USER root
WORKDIR /app
ADD . /app/

# Install dependencies
RUN corepack enable && \
    corepack prepare pnpm@latest --activate

# Set npm to use the private registry
RUN npm config set registry http://10.0.2.208:8081/repository/npm-proxy/

RUN pnpm install

# Build the application
RUN NEXT_ASSET_PREFIX=https://cdn-fo.x2bee.com/${NEXT_BUILD_NUM} npm run ${BUILD_PROFILE}

# Expose application port
EXPOSE 3000

# Start the application
CMD npm run ${START_PROFILE}

    if (ENABLE_S3_UPLOAD_YN == "Y") {
        this.extractNext()
        this.uploadToS3()
        this.cleanupOldStaticFiles()
    }

def extractNext(){
    stage('Extract .next Folder') {
        script {
            sh """#!/bin/bash
                rm -rf /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}
                rm -rf /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}@tmp
                mkdir -p /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static
                chmod -R 777 /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}
            """
 
            sh """
                if docker ps -a --format '{{.Names}}' | grep -q '^${APP_NAME}-temp-container-${PRJ_TARGET}\$'; then
                    echo "Removing existing container '${APP_NAME}-temp-container-${PRJ_TARGET}'"
                    docker rm -f ${APP_NAME}-temp-container-${PRJ_TARGET}
                fi
 
                docker create --name ${APP_NAME}-temp-container-${PRJ_TARGET} ${DOCKER_IMAGE_NAME}:latest
                # docker cp ${APP_NAME}-temp-container-${PRJ_TARGET}:/app/public /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/
                docker cp ${APP_NAME}-temp-container-${PRJ_TARGET}:/app/.next/static /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/
 
                if [ -d "/var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static" ]; then
                    echo "Copy completed, checking files..."
                    until [ \$(ls -1 /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static | wc -l) -gt 0 ]; do
                        echo "Waiting for files to be available in /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static..."
                        sleep 1
                    done
                    echo "Files are now available in /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static"
                else
                    echo "Directory /var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static does not exist!"
                    exit 1
                fi
            """
        }
    }
}

# Object Storage Repository Setting
S3_SOURCE_DIRS          = ./static
S3_BUCKET_NAME_DEV      = static-s3-bucket
S3_KEY_DEV              = /_next/static

        stage('Prepare') {
            steps{
                script {
                    switch("${PRJ_TARGET}"){
                        case "dev":
                            JAVA_OPS                = "${JAVA_OPS_DEV}"
                            GIT_BRANCH              = "${params.BRANCH}"
                            S3_BUCKET_NAME          = "${S3_BUCKET_NAME_DEV}"
                            S3_PROFILE              = "${S3_PROFILE_DEV}"
                            S3_KEY                  = "${S3_KEY_DEV}"

 
def uploadToS3() {
    stage('Upload Static Files To S3') {
        script {
            // Create a deployment-specific folder using the Jenkins BUILD_NUMBER
            def deploymentFolder = "static/${env.BUILD_NUMBER}${S3_KEY}"  
            s3Upload(
                bucket: "${S3_BUCKET_NAME}",
                path: deploymentFolder,
                workingDir: "/var/jenkins_home/mnt/${APP_NAME}-next-${PRJ_TARGET}/_next/static",
                includePathPattern: '**/*' 
            ) 
        }
    }
}

def cleanupOldStaticFiles() {
    stage('Cleanup Old Static Files') {
        script {
            // Step 1: List objects in the S3 bucket to find deployment folders
            def s3Objects = s3FindFiles(
                bucket: "${S3_BUCKET_NAME}",
                path: "static/",
                onlyDirectories: true
            )
            
            // Step 2: Extract folder names and sort them
            def folders = []
            s3Objects.each { item ->
                // Extract the folder name (build number) from the path
                def folderName = item.name.replaceAll('static/', '').replaceAll('/', '')
                if (folderName) {
                    folders.add(folderName)
                }
            }
            
            // Step 3: Sort folders numerically (assuming they are build numbers)
            folders.sort { a, b -> 
                try {
                    return Integer.parseInt(a) <=> Integer.parseInt(b)
                } catch (NumberFormatException e) {
                    // Fallback to string comparison if not numeric
                    return a <=> b
                }
            }
            
            // Step 4: Keep only the oldest folders (all except the 2 most recent)
            def foldersToDelete = []
            if (folders.size() > 2) {
                foldersToDelete = folders[0..(folders.size() - 3)]
            }
            
            echo "Found deployment folders: ${folders.join(', ')}"
            echo "Folders to delete: ${foldersToDelete.join(', ')}"
            
            // Step 5: Delete each old folder
            foldersToDelete.each { folder ->
                echo "Deleting static/${folder}/"
                s3Delete(
                    bucket: "${S3_BUCKET_NAME}",
                    path: "static/${folder}/",
                    recursive: true
                )
            }
        }
    }
}

            {{ if eq .Values.application.name "moonstore-next-fo-vanilla" }}
            - name: NEXT_ASSET_PREFIX
              value: "https://cdn-fo.x2bee.com/{{ .Values.application.build_number }}"
            {{ end }}