IBM Cloud Code Engineでアプリケーションを動かす

FROM icr.io/codeengine/nginx

# call-ngninx is just a script that'll replace "NS" in the config file with
# the proper project ID
COPY call-nginx /

# htpasswd contains the user/password info - for auth
COPY htpasswd /etc/apache2/.htpasswd

# Use our custom nginx config file
COPY nginx.conf /etc/nginx/conf.d/default.conf

# At runtime, call the wrapper script to do the "NS" substitutions
CMD ["/call-nginx"]

-snip-
    listen 8080 ;
    server_name *.codeengine.appdomain.cloud ;
-snip-
        proxy_pass http://auth-app.NS.svc.cluster.local ;
-snip-

#!/bin/bash

set -ex

# Replace all "NS" in the config file with the Code Engine subdomain (k8s ns)
sed -i "s/NS/$CE_SUBDOMAIN/g" /etc/nginx/conf.d/default.conf

# Now run nginx
nginx-debug -g "daemon off;"

FROM icr.io/codeengine/golang:alpine
COPY app.go /
RUN go build -o /app /app.go

# Copy the exe into a smaller base image
FROM icr.io/codeengine/alpine
COPY --from=0 /app /app
CMD /app

-snip-
Hello World
-snip-

$ ibmcloud login

$ ibmcloud target -g [リソースグループ名]

$ ibmcloud plugin install container-registry
$ ibmcloud cr login

$ docker build -t auth-app -f Dockerfile.app .
$ docker tag auth-app jp.icr.io/my-container-registory/auth-app
$ docker push jp.icr.io/my-container-registory/auth-app


$ docker build -t auth-nginx -f Dockerfile.nginx .
$ docker tag auth-nginx jp.icr.io/my-container-registory/auth-nginx
$ docker push jp.icr.io/my-container-registory/auth-nginx

$ ibmcloud plugin install code-engine

$ project_name='myProject'
$ ibmcloud ce project create --name ${project_name}
$ ibmcloud ce project select -n ${project_name}

$ ibmcloud iam api-key-create myApiKey -d "code engine"
$ apikey='xxx'
$ registrysecret='myregistrysecret'
$ ibmcloud ce registry create --name ${registrysecret} --server jp.icr.io --password ${apikey}

# Applicationサーバ
$ image='jp.icr.io/my-container-registory/auth-app'
$ ibmcloud ce app create --name auth-app --image ${image} --registry-secret ${registrysecret} --cluster-local

$ NS=`ibmcloud ce app get -n auth-app -o url | cut -d '.' -f 2`
1234abcd
# 例）http://auth-app.1234abcd.svc.cluster.local

# Webサーバ
$ image='jp.icr.io/my-container-registory/auth-nginx'

$ ibmcloud ce app create --name auth-proxy --image ${image} --registry-secret ${registrysecret} --env NS=${NS}

$ ibmcloud ce application get -n auth-proxy
https://auth-proxy.1234abcd.jp-tok.codeengine.appdomain.cloud

$ ibmcloud ce application events -n auth-proxy
$ ibmcloud ce application events -n auth-app

$ ibmcloud ce application logs -f -n auth-proxy
$ ibmcloud ce application logs -f -n auth-app

$ ibmcloud ce app delete -n auth-app -f
$ ibmcloud ce app delete -n auth-proxy -f