IT달공

1. ECR 생성 후 컨테이너 이미지 Push1) EC2에 docker 설치 및 buildvim DockerfileFROM nginx:1.21.1COPY ./index.html /usr/share/nginx/html/index.htmlEXPOSE 80*COPY 부분 뒤쪽 /usr/share/nginx/html/index.html 경로에 설치, ./경로에 index.html 생성 후 복사[root@ip-172-20-0-181 ec2-user]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEnginx testnginx d74a43f1873c 26 seconds ago 133MB2) ECR 레포지토리..

1. 서비스 등록 파일 설정vim /etc/systemd/system/tomcat.service[Unit]Description=Service DescriptionAfter=syslog.target network.target postgresql.service[Service]Environment=PATH=/usr/local/jdk-21/binExecStart=/bin/bash -c "exec java -jar /data/gradle/gradle-8.11.1/app/build/libs/tomcat.jar"Restart=on-failureRestartSec=10User=rootGroup=root[Install]WantedBy=multi-user.target2. 서비스 실행root@ip-10-100-0-182:/..

1. Error 확인CloudWatch metrics query failed: RequestError: send request failed caused by: Post "https://monitoring.ap-northeast-2.amazonaws.com/": dial tcp 10.100.19.62:443: i/o timeout 2. Successfully queried the CloudWatch logs API.2. 원인 분석로그 확인 시 monitoring 서비스에 대한 443 포트 접근 불가 로그이전에 해당 서비스에 대한 endpoint를 생성했었는데 그 endpoint에 할당된 보안 그룹에서 차단된 것으로 확인3. 해결 방안AWS ▶ VPC ▶ 엔드포인트에서 로그에 해당하는 서비스 검색해당 엔드포..

1. 환경 설명Project : Gradle-KotlinLanguage : KotilinSpring Boot : Spring CLI v3.3.4Packaging : JarJava : 212. log 설정/data/gradle/gradle-8.11.1/app/src/main/resources/application.propertiesserver.tomcat.accesslog.enabled=trueserver.tomcat.accesslog.directory=logsserver.tomcat.accesslog.prefix=access_logserver.tomcat.accesslog.suffix=.logserver.tomcat.accesslog.pattern=%h %l %u %t "%r" %s %b %Dserver..

1. 역할 생성AWS 콘솔 → IAM → 역할 → 역할 생성AWS 서비스서비스 또는 사용 사레 : Systems Manager다음권한 추가AmazonEventBridgeSchedulerFullAccess 로 설정다음역할 이름 설정 후 역할 생성방금 생성한 역할 검색 후 클릭권한 → 권한 추가 → 인라인 정책 생성stop policy{ "Version": "2012-10-17", "Statement": [ { "Sid": "ec2Stop", "Effect": "Allow", "Action": "ec2:StopInstances", "Resource": "*" } ]}저장권한 → 권한 추가 ..

1. 환경 설명Project : Gradle-KotlinLanguage : KotlinSpring Boot : Spring CLI v3.3.4Packaging : JarJava : 212. build.gradle.kts/data/gradle/gradle-8.11.1/app/* * This file was generated by the Gradle 'init' task. * * This generated file contains a sample Java application project to get you started. * For more details on building Java & JVM projects, please refer to https://docs.gradle.org/8.11.1/user..

1. apt update$ apt update -y$ apt upgrade -y2. JDK 설치 - OpenJDK 21OpenJDK 아카이브 - https://jdk.java.net/archive/ Archived OpenJDK GA ReleasesArchived OpenJDK General-Availability Releases This page is an archive of previously released builds of the JDK licensed under the GNU General Public License, version 2, with Classpath Exception. WARNING: These older versions of the JDK are provided to hejdk...

1. Error 확인[root@ip-10-100-0-148 .kube]# kubectl get svcE0113 01:40:24.478935 3570 memcache.go:265] couldn't get current server API group list: Get "https://90822DF3B148132966E184AFE2AAAAAA.gr7.ap-northeast-2.eks.amazonaws.com/api?timeout=32s": dial tcp 10.100.3.184:443: i/o timeout2. Error 원인EKS 보안 그룹에 EC2 -> EKS 로 443 포트 안열려있음3. 해결EKS 보안 그룹에 EC2 -> EKS 로 443 open

1. Error[root@ip-172-20-0-181 ~]# aws ecs execute-command --profile hlpark-ecr-user --cluster hlpark-ecs-test --task arn:aws:ecs:ap-northeast-2:859234351948:task/hlpark-ecs-test/70948fbf3e244606b46819138172189e --container hlpark-ecs-test --command "/bin/sh" --interactiveThe Session Manager plugin was installed successfully. Use the AWS CLI to start a session.An error occurred (TargetNotConnecte..

1. Error[root@ip-172-20-0-181 .aws]# aws ecs update-service --cluster hlpark-ecs-test --service hlpark-ecs-test-svc --enable-execute-command --profile hlpark-ecr-userAn error occurred (AccessDeniedException) when calling the UpdateService operation: User: arn:aws:iam::859234351948:user/hlpark-ecr-user is not authorized to perform: ecs:UpdateService on resource: arn:aws:ecs:ap-northeast-2:8592343..