Antigravity Agent
145 lines
4.9 KiB
Markdown
145 lines
4.9 KiB
Markdown
---
|
|
id: wiki-20260508-ci-cd-pipeline-redir
|
|
title: CI/CD Pipeline
|
|
category: 10_Wiki/Topics
|
|
status: verified
|
|
canonical_id: self
|
|
aliases: [CI/CD, CI CD Pipeline, 파이프라인, Continuous Delivery]
|
|
duplicate_of: none
|
|
source_trust_level: A
|
|
confidence_score: 0.92
|
|
verification_status: applied
|
|
tags: [cicd, devops, automation, deployment]
|
|
raw_sources: []
|
|
last_reinforced: 2026-05-10
|
|
github_commit: pending
|
|
tech_stack:
|
|
language: yaml
|
|
framework: GitHub Actions, GitLab CI, ArgoCD
|
|
---
|
|
|
|
# CI/CD Pipeline
|
|
|
|
## 매 한 줄
|
|
> **"매 commit 의 production 의 automated path"**. 매 Continuous Integration (build+test on every push) + Continuous Delivery/Deployment (artifact → staging → prod 의 자동) 의 결합 — 매 2026 의 GitHub Actions 의 dominant 의 + GitLab CI / Jenkins / CircleCI / ArgoCD (GitOps) 의 ecosystem. 매 trunk-based dev + feature flag 의 pair.
|
|
|
|
## 매 핵심
|
|
|
|
### 매 Stages
|
|
1. **Source**: trigger (push, PR, schedule, manual).
|
|
2. **Build**: compile, package (Docker image, JAR, npm).
|
|
3. **Test**: unit → integration → e2e → security scan.
|
|
4. **Artifact**: registry push (ECR, GHCR, Artifactory).
|
|
5. **Deploy**: staging → smoke test → prod (canary / blue-green / rolling).
|
|
6. **Observe**: metrics, alerts, rollback trigger.
|
|
|
|
### 매 CI vs CD
|
|
- **CI**: 매 main branch 의 always-green — fast feedback (<10 min).
|
|
- **CD (delivery)**: 매 always-deployable artifact — manual prod gate.
|
|
- **CD (deployment)**: 매 fully automated — canary + auto-rollback.
|
|
|
|
### 매 응용
|
|
1. SaaS web app: GitHub Actions → Docker → ECS/K8s.
|
|
2. Mobile: Fastlane + TestFlight/Play Console.
|
|
3. Library: tag → npm/PyPI/Maven publish.
|
|
4. Infrastructure: Terraform plan/apply via CI.
|
|
|
|
## 💻 패턴
|
|
|
|
### GitHub Actions (Node + Docker)
|
|
```yaml
|
|
name: ci
|
|
on: { push: { branches: [main] }, pull_request: {} }
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with: { node-version: 20, cache: pnpm }
|
|
- run: pnpm install --frozen-lockfile
|
|
- run: pnpm lint && pnpm test --coverage
|
|
- uses: codecov/codecov-action@v4
|
|
build-deploy:
|
|
needs: test
|
|
if: github.ref == 'refs/heads/main'
|
|
runs-on: ubuntu-latest
|
|
permissions: { id-token: write, contents: read }
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: aws-actions/configure-aws-credentials@v4
|
|
with: { role-to-assume: arn:aws:iam::123:role/ci, aws-region: us-east-1 }
|
|
- run: docker build -t $ECR/app:${{ github.sha }} . && docker push $ECR/app:${{ github.sha }}
|
|
- run: aws ecs update-service --cluster prod --service app --force-new-deployment
|
|
```
|
|
|
|
### GitLab CI (matrix + cache)
|
|
```yaml
|
|
stages: [test, build, deploy]
|
|
test:
|
|
stage: test
|
|
image: node:20
|
|
cache: { paths: [node_modules/] }
|
|
script: [npm ci, npm test]
|
|
parallel:
|
|
matrix: [{ NODE_VERSION: ["18", "20", "22"] }]
|
|
```
|
|
|
|
### ArgoCD (GitOps)
|
|
```yaml
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata: { name: app, namespace: argocd }
|
|
spec:
|
|
source: { repoURL: https://git.../infra, path: k8s/prod, targetRevision: HEAD }
|
|
destination: { server: https://kubernetes.default.svc, namespace: prod }
|
|
syncPolicy: { automated: { prune: true, selfHeal: true } }
|
|
```
|
|
|
|
### Canary deploy (Argo Rollouts)
|
|
```yaml
|
|
strategy:
|
|
canary:
|
|
steps: [{ setWeight: 10 }, { pause: { duration: 10m } }, { setWeight: 50 }, { pause: {} }]
|
|
analysis: { templates: [{ templateName: success-rate }] }
|
|
```
|
|
|
|
## 매 결정 기준
|
|
| 상황 | Approach |
|
|
|---|---|
|
|
| GitHub-hosted repo | GitHub Actions |
|
|
| Self-hosted, full DevOps suite | GitLab CI |
|
|
| Java-heavy enterprise | Jenkins |
|
|
| K8s native, declarative | ArgoCD / Flux |
|
|
| Mobile | Fastlane + Bitrise |
|
|
| Monorepo | Nx Cloud / Turborepo Remote Cache |
|
|
|
|
**기본값**: GitHub Actions + Docker + ArgoCD (cloud-native) or ECS/Cloud Run (PaaS).
|
|
|
|
## 🔗 Graph
|
|
- 부모: [[DevOps]] · [[Software Delivery]]
|
|
- 변형: [[Continuous Integration (CI)]] · [[Continuous Delivery]] · [[GitOps]]
|
|
- 응용: [[Blue-Green Deployment]] · [[Canary Deployment]] · [[Feature Flag]]
|
|
- Adjacent: [[Docker]] · [[Kubernetes]] · [[Terraform]] · [[TeamCity]]
|
|
|
|
## 🤖 LLM 활용
|
|
**언제**: 매 workflow YAML 의 generation, matrix 의 expansion, action 의 lookup.
|
|
**언제 X**: 매 production 의 deploy script — 매 review + canary + rollback 의 always.
|
|
|
|
## ❌ 안티패턴
|
|
- **No rollback path**: 매 deploy 의 forward-only — 매 disaster.
|
|
- **Secrets in YAML**: 매 GitHub Secrets / OIDC 의 사용.
|
|
- **Slow CI** (>15 min): 매 dev 의 PR 의 stack — 매 cache + parallelize.
|
|
- **Deploy on every push**: 매 manual gate or canary 의 사용 — 매 prod 의 break.
|
|
- **No artifact pinning** (`:latest`): 매 reproducibility 의 lose.
|
|
|
|
## 🧪 검증 / 중복
|
|
- Verified (GitHub Actions docs, GitLab CI docs, ArgoCD docs).
|
|
- 신뢰도 A.
|
|
|
|
## 🕓 Changelog
|
|
| 날짜 | 변경 |
|
|
|---|---|
|
|
| 2026-05-08 | Phase 1 |
|
|
| 2026-05-10 | Manual cleanup — full CI/CD treatment with Actions/ArgoCD examples |
|