🖥️ 02. 로컬 K8S 클러스터 생성

  brew install kind
  

  choco install kind
  

  curl.exe -Lo kind-windows-amd64.exe https://kind.sigs.k8s.io/dl/v0.15.0/kind-windows-amd64
Move-Item .\kind-windows-amd64.exe c:\some-dir-in-your-PATH\kind.exe
  

  choco install kubectx
choco install kubens
  

  kind create cluster # Default cluster context 이름은 'kind' 로 생성
kind create cluster --name dangtong # cluster context 이름을 'dangtong' 으로 지정
  

  kind get clusters
kubectl cluster-info --context dangtong
  

  kind delete cluster

kind delete clusters kind-local-cluster
  

  kind create cluster --config kind-example-config.yaml
  

  # three node (two workers) cluster config
kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
- role: control-plane
- role: worker
- role: worker
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
- role: control-plane
- role: control-plane
- role: control-plane
- role: worker
- role: worker
- role: worker
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
- role: control-plane
  image: kindest/node:v1.16.4@sha256:b91a2c2317a000f3a783489dfb755064177dbc3a0b2f4147d50f04825d016f55
- role: worker
  image: kindest/node:v1.16.4@sha256:b91a2c2317a000f3a783489dfb755064177dbc3a0b2f4147d50f04825d016f55
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
networking:
  podSubnet: "10.244.0.0/16"
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
networking:
  serviceSubnet: "10.96.0.0/12"
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
networking:
  # default CNI가 설치 되지 않습니다.
  disableDefaultCNI: true
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
networking:
  kubeProxyMode: "ipvs"
  

  kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
name: cwave-cluster
nodes:
- role: control-plane
  kubeadmConfigPatches:
  - |
    kind: InitConfiguration
    nodeRegistration:
      kubeletExtraArgs:
        node-labels: "ingress-ready=true"
  image: kindest/node:v1.32.5
  extraPortMappings:
  - containerPort: 80
    hostPort: 80
    protocol: TCP
  - containerPort: 443
    hostPort: 443
    protocol: TCP
- role: worker
  image: kindest/node:v1.32.5
- role: worker
  image: kindest/node:v1.32.5
networking:
  serviceSubnet: "10.120.0.0/16"
  podSubnet: "10.110.0.0/16"
  

  # 생성
kind create cluster  --config ./3-node-cluster.yml

# 삭제
kind delete cluster --name cwave-cluster
  

  kind get kubeconfig --internal --name cwave-cluster
  

  name: "aws-cicd-practice"
services:
  code-server:
    image: dangtong76/cicd-devops-ide:arm64-v2 
    container_name: "ide"
    networks: # 네트워크 항목 주석제거
      - kind_network 
    environment:
      AUTH: none
      #FILE__PASSWORD: /run/secrets/code-server-password
    env_file:
      - .env
    working_dir: /code
    ports:
      - "8080:8080" # istory-web
      - "1314:1314" # hugo port 1
      - "1315:1315" # hugo port 2
      - "8444:8443" # vscode service port
      - "5500:5500"
    # secrets:s
    #   - code-server-password
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - devops-cicd-apps:/code/devops-cicd-apps
      - devops-cicd-vscode:/config
networks: # 네트워크 항목 주석제거
  kind_network:
    name: kind
    external: true
volumes:
  devops-cicd-apps:
    external: true
    name: devops-cicd-apps
  devops-cicd-vscode:
    external: true
    name: devops-cicd-vscode
  

  services:
  code-server:
    image: dangtong76/cicd-devops-ide:arm64-v2
    container_name: ide
    networks:
      - kind_network
    environment:
      AUTH: none
    env_file:
      - .env
    working_dir: /code
    ports:
      - "8080:8080"
      - "8444:8443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - devops-cicd-apps:/code/devops-cicd-apps
      - devops-cicd-vscode:/config

  nfs-server:
    image: itsthenetwork/nfs-server-alpine:latest
    container_name: nfs-server
    networks:
      - kind_network
    privileged: true
    environment:
      - SHARED_DIRECTORY=/exports
      # 아래는 실습용(접근 쉬움). 운영에선 제한 필요
      - PERMITTED="172.21.0.0/16"
    volumes:
      - nfs-server-volume:/exports
    # NFS 포트 (같은 docker 네트워크면 없어도 되지만, 디버깅용으로 열어두면 편함)
    ports:
      - "2049:2049"
      - "111:111"
      - "20048:20048"
    restart: unless-stopped
    

networks:
  kind_network:
    name: kind
    external: true

volumes:
  nfs-server-volume:
    external: true
    name: nfs-server-volume
  

  docker network inspect kind # cwave-cluster-control-plane 의 IP주소 확인

vi ~/.kube/config
  

  apiVersion: v1
clusters:
- cluster:
    server: https://<cwave-cluster-control-plane 의 IP주소>:6443
  name: kind-cwave-cluster
  

  kubectl get no 

### 출력이 아래와 같은 형식으로 나오면 정상
root@85bed0161b08:~/.kube# kubectl get no
NAME                          STATUS   ROLES           AGE   VERSION
cwave-cluster-control-plane   Ready    control-plane   30m   v1.32.5
cwave-cluster-worker          Ready    <none>          30m   v1.32.5
cwave-cluster-worker2         Ready    <none>          30m   v1.32.5
  

  # kubectl 이용
kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.15.2/config/manifests/metallb-native.yaml

# helm 차트 이용
helm repo add metallb https://metallb.github.io/metallb
helm install metallb metallb/metallb
  

  docker network inspect kind --format '{{(index .IPAM.Config 0).Subnet}}'
  

  apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: cwave-pool
  namespace: metallb-system
spec:
  addresses:
  - 172.20.100.100-172.20.100.200 # Docker kind 네트워크의 IP 대역으로 구간 할당
---
apiVersion: metallb.io/v1beta1
kind: L2Advertisement
metadata:
  name: cwave-loadbalancer-advertisement
  namespace: metallb-system
spec:
  ipAddressPools:
  - cwave-pool
  

  apiVersion: apps/v1
kind: Deployment
metadata:
  name: lb-test
spec:
  replicas: 1
  selector:
    matchLabels:
      app: lb-test
  template:
    metadata:
      labels:
        app: lb-test
    spec:
      containers:
        - name: app
          image: hashicorp/http-echo:0.2.3
          args:
            - "-text=hello-metallb"
          ports:
            - containerPort: 5678
---
apiVersion: v1
kind: Service
metadata:
  name: lb-test
spec:
  type: LoadBalancer
  selector:
    app: lb-test
  ports:
    - port: 80
      targetPort: 5678
  

  curl http://172.21.100.100
  

  cat <<EOF | kind create cluster --config=-
kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
- role: control-plane
  kubeadmConfigPatches:
  - |
    kind: InitConfiguration
    nodeRegistration:
      kubeletExtraArgs:
        node-labels: "ingress-ready=true"
  extraPortMappings:
  - containerPort: 80
    hostPort: 80
    protocol: TCP
  - containerPort: 443
    hostPort: 443
    protocol: TCP
EOF
  

  kubectl apply -f https://projectcontour.io/quickstart/contour.yaml
  

  kubectl patch daemonsets -n projectcontour envoy -p '{"spec":{"template":{"spec":{"nodeSelector":{"ingress-ready":"true"},"tolerations":[{"key":"node-role.kubernetes.io/control-plane","operator":"Equal","effect":"NoSchedule"},{"key":"node-role.kubernetes.io/master","operator":"Equal","effect":"NoSchedule"}]}}}}'
  

  kubectl apply -f https://raw.githubusercontent.com/Kong/kubernetes-ingress-controller/master/deploy/single/all-in-one-dbless.yaml
  

  kubectl patch deployment -n kong ingress-kong -p '{"spec":{"template":{"spec":{"containers":[{"name":"proxy","ports":[{"containerPort":8000,"hostPort":80,"name":"proxy","protocol":"TCP"},{"containerPort":8443,"hostPort":443,"name":"proxy-ssl","protocol":"TCP"}]}],"nodeSelector":{"ingress-ready":"true"},"tolerations":[{"key":"node-role.kubernetes.io/control-plane","operator":"Equal","effect":"NoSchedule"},{"key":"node-role.kubernetes.io/master","operator":"Equal","effect":"NoSchedule"}]}}}}'
  

  kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
  

  kubectl wait --namespace ingress-nginx \
  --for=condition=ready pod \
  --selector=app.kubernetes.io/component=controller \
  --timeout=90s
  

  kind: Pod
apiVersion: v1
metadata:
  name: foo-app
  labels:
    app: foo
spec:
  containers:
  - name: foo-app
    image: hashicorp/http-echo:0.2.3
    args:
    - "-text=foo"
---
kind: Service
apiVersion: v1
metadata:
  name: foo-service
spec:
  selector:
    app: foo
  ports:
  # Default port used by the image
  - port: 5678
---
kind: Pod
apiVersion: v1
metadata:
  name: bar-app
  labels:
    app: bar
spec:
  containers:
  - name: bar-app
    image: hashicorp/http-echo:0.2.3
    args:
    - "-text=bar"
---
kind: Service
apiVersion: v1
metadata:
  name: bar-service
spec:
  selector:
    app: bar
  ports:
  # Default port used by the image
  - port: 5678
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: example-ingress
spec:
  rules:
  - http:
      paths:
      - pathType: Prefix
        path: "/foo"
        backend:
          service:
            name: foo-service
            port:
              number: 5678
      - pathType: Prefix
        path: "/bar"
        backend:
          service:
            name: bar-service
            port:
              number: 5678
---
  

  kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.1.0/standard-install.yaml
  

  kubectl apply -f https://projectcontour.io/quickstart/contour-gateway-provisioner.yaml
  

  kubectl get pod -n projectcontour -w
  

  apiVersion: v1
kind: Namespace
metadata:
  name: tcp-lab
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: redis
  namespace: tcp-lab
spec:
  replicas: 1
  selector:
    matchLabels:
      app: redis
  template:
    metadata:
      labels:
        app: redis
    spec:
      containers:
        - name: redis
          image: redis:7.2
          ports:
            - containerPort: 6379
---
apiVersion: v1
kind: Service
metadata:
  name: redis-svc
  namespace: tcp-lab
spec:
  selector:
    app: redis
  ports:
    - name: redis
      port: 6379
      targetPort: 6379
---
apiVersion: gateway.networking.k8s.io/v1
kind: GatewayClass
metadata:
  name: contour-gwclass
spec:
  controllerName: projectcontour.io/gateway-controller
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: tcp-gateway
  namespace: tcp-lab
spec:
  gatewayClassName: contour-gwclass
  listeners:
    - name: tcp-redis
      protocol: TCP
      port: 6379
      allowedRoutes:
        namespaces:
          from: Same
---
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: TCPRoute
metadata:
  name: redis-tcproute
  namespace: tcp-lab
spec:
  parentRefs:
    - name: tcp-gateway
      sectionName: tcp-redis
  rules:
    - backendRefs:
        - name: redis-svc
          port: 6379
  

  kubectl apply -f tcp-contour-lab.yaml
  

  kubectl get gateway -n tcp-lab
kubectl get svc -n tcp-lab
  

  redis-cli -h <GATEWAY-ADDRESS> -p 6379 ping
# PONG 나오면 성공
  

  docker inspect cwave-nfs-container --format '{{json .NetworkSettings.Networks.kind}}'
  

  docker exec -it cwave-nfs-container exportfs -v
  

  docker exec -it kind-control-plane bash -lc '
mkdir -p /mnt/test &&
mount -t nfs -o vers=4 cwave-nfs-container:/ /mnt/test &&
echo ok-$(date) > /mnt/test/ok.txt &&
cat /mnt/test/ok.txt
'
  

  apiVersion: v1
kind: Namespace
metadata:
  name: storage-lab
---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: nfs-pv
spec:
  capacity:
    storage: 5Gi
  accessModes:
    - ReadWriteMany
  persistentVolumeReclaimPolicy: Retain
  storageClassName: nfs-local
  nfs:
    # ✅ 핵심: docker network(kind) 안에서 컨테이너 이름으로 접근
    server: cwave-nfs-container
    path: /exports
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: nfs-pvc
  namespace: storage-lab
spec:
  accessModes:
    - ReadWriteMany
  storageClassName: nfs-local
  resources:
    requests:
      storage: 1Gi
---
apiVersion: v1
kind: Pod
metadata:
  name: pvc-test
  namespace: storage-lab
spec:
  containers:
    - name: app
      image: busybox:1.36
      command: ["sh","-c","echo $(date) from $(hostname) >> /data/out.txt; sleep 3600"]
      volumeMounts:
        - name: nfs-vol
          mountPath: /data
  volumes:
    - name: nfs-vol
      persistentVolumeClaim:
        claimName: nfs-pvc
  

  # kubernetes 내에서 확인
kubectl apply -f nfs-pvc-lab.yaml
kubectl get pv
kubectl get pvc -n storage-lab
kubectl get pod -n storage-lab
kubectl exec -n storage-lab -it pvc-test -- cat /data/out.txt
kubectl exec -n storage-lab -it pvc-test -- ls /data

# Desktop 환경의 nfs 컨테이너 서비스에서 확인
docker ps -a # nfs 컨테이너 컨테이너 ID 확인
docker exec -it 699a618f12ca ls /exports
docker exec -it rm -f /exports/out.txt
  

  {
  "$schema": "https://opencode.ai/config.json",
  "provider": {
    "lmstudio": {
      "npm": "@ai-sdk/openai-compatible",
      "name": "LM Studio (local)",
      "options": {
        "baseURL": "http://127.0.0.1:1234/v1"
      },
      "models": {
        "google/gemma-3-12b": {
          "name": "Gemma 3-12b (local)"
        },
        "qwen/qwen3-vl-4b": {
          "name": "Qwen3-VL-4b (local)"
        },
      }
    }
  }
}
  

  {
  agent: {
    custom-agent: {
      description: 전문가 Assistant,
      mode: primary,
      model: opencode/big-pickle,
      prompt: 당신은... 전문가입니다.
    }
  }
}