feat: 부하 테스트 DB EC2 전환 및 Bruno API 연동

Author: lsy1307

.gitattributes

@@ -0,0 +1,4 @@
+*.sh text eol=lf
+*.tftpl text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf

.github/workflows/load-test-run.yml

@@ -18,6 +18,19 @@ on:
         required: true
         default: "15m"
         type: string
+      test_mode:
+        description: "k6 test mode"
+        required: true
+        default: "bruno-all-apis"
+        type: choice
+        options:
+          - bruno-all-apis
+          - whole-user-flow
+      api_docs_ref:
+        description: "api-docs git ref used when test_mode is bruno-all-apis"
+        required: false
+        default: "main"
+        type: string
       target_base_url:
         description: "Target base URL. Empty uses Terraform default."
         required: false
@@ -60,6 +73,15 @@ jobs:
           token: ${{ secrets.GH_PAT }}
           persist-credentials: false
 
+      - uses: actions/checkout@v4
+        if: inputs.test_mode == 'bruno-all-apis'
+        with:
+          repository: solid-connection/api-docs
+          ref: ${{ inputs.api_docs_ref }}
+          path: api-docs
+          token: ${{ secrets.GH_PAT }}
+          persist-credentials: false
+
       - uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ vars.AWS_LOAD_TEST_ROLE_ARN }}
@@ -80,6 +102,7 @@ jobs:
           VUS: ${{ inputs.vus }}
           ITERATIONS: ${{ inputs.iterations }}
           MAX_DURATION: ${{ inputs.max_duration }}
+          TEST_MODE: ${{ inputs.test_mode }}
           TARGET_BASE_URL: ${{ inputs.target_base_url }}
           PROMETHEUS_REMOTE_WRITE_URL: ${{ inputs.prometheus_remote_write_url }}
         run: |
@@ -89,6 +112,23 @@ jobs:
             --max-duration "$MAX_DURATION"
           )
 
+          case "$TEST_MODE" in
+            bruno-all-apis)
+              args+=(
+                --script bruno-all-apis.js
+                --generate-bruno-script
+                --bruno-collection-dir "api-docs/Solid Connection"
+              )
+              ;;
+            whole-user-flow)
+              args+=(--script whole-user-flow.js)
+              ;;
+            *)
+              echo "::error::Invalid test_mode: $TEST_MODE"
+              exit 1
+              ;;
+          esac
+
           if [ -n "$TARGET_BASE_URL" ]; then
             args+=(--target-base-url "$TARGET_BASE_URL")
           fi

.github/workflows/load-test-stop.yml

@@ -8,7 +8,7 @@ on:
         required: true
         default: true
         type: boolean
-      destroy_rds:
+      destroy_infra:
         description: "Destroy load test Terraform stack"
         required: true
         default: true
@@ -58,7 +58,7 @@ jobs:
             args+=(--restore-stage-dev)
           fi
 
-          if [ "${{ inputs.destroy_rds }}" != "true" ]; then
+          if [ "${{ inputs.destroy_infra }}" != "true" ]; then
             args+=(--skip-terraform-destroy)
           fi
 

.gitignore

@@ -5,6 +5,8 @@
 *.tfvars
 .terraform.lock.hcl
 modules/shared_resources/dist/*.zip
+config/load-test/k6/bruno-all-apis.js
+__pycache__/
 
 # --- Secrets (보안상 절대 커밋 금지) ---
 *.pem
@@ -17,4 +19,4 @@ modules/shared_resources/dist/*.zip
 .DS_Store
 
 # --- AGENTS ---
-AGENTS.local.md
+AGENTS.local.md

environment/load_test/main.tf

@@ -22,15 +22,34 @@ data "aws_instance" "stage_api" {
   }
 }
 
+data "aws_instance" "prod_db" {
+  filter {
+    name   = "tag:Name"
+    values = [var.prod_db_instance_name]
+  }
+
+  filter {
+    name   = "instance-state-name"
+    values = ["running"]
+  }
+}
+
 data "aws_subnet" "stage_api" {
   id = data.aws_instance.stage_api.subnet_id
 }
 
-data "aws_subnets" "target" {
-  filter {
-    name   = "vpc-id"
-    values = [data.aws_subnet.stage_api.vpc_id]
-  }
+locals {
+  load_test_db_subnet_id = var.load_test_db_subnet_id != null ? var.load_test_db_subnet_id : data.aws_instance.stage_api.subnet_id
+  load_test_db_ami_id    = var.load_test_db_ami_id != null ? var.load_test_db_ami_id : data.aws_instance.prod_db.ami
+
+  source_security_group_ids = setunion(
+    data.aws_instance.prod_api.vpc_security_group_ids,
+    data.aws_instance.stage_api.vpc_security_group_ids
+  )
+}
+
+data "aws_subnet" "load_test_db" {
+  id = local.load_test_db_subnet_id
 }
 
 data "aws_ami" "ubuntu" {
@@ -48,27 +67,10 @@ data "aws_ami" "ubuntu" {
   }
 }
 
-data "aws_db_instance" "prod" {
-  db_instance_identifier = var.prod_rds_identifier
-}
-
-data "aws_db_snapshot" "latest_prod" {
-  db_instance_identifier = var.prod_rds_identifier
-  most_recent            = true
-  snapshot_type          = "automated"
-}
-
-locals {
-  source_security_group_ids = setunion(
-    data.aws_instance.prod_api.vpc_security_group_ids,
-    data.aws_instance.stage_api.vpc_security_group_ids
-  )
-}
-
 resource "aws_security_group" "load_test_db" {
   name        = "sc-load-test-db-sg"
-  description = "Security group for load test RDS"
-  vpc_id      = data.aws_subnet.stage_api.vpc_id
+  description = "Security group for load test MySQL EC2"
+  vpc_id      = data.aws_subnet.load_test_db.vpc_id
 
   egress {
     from_port   = 0
@@ -78,7 +80,9 @@ resource "aws_security_group" "load_test_db" {
   }
 
   tags = {
-    Name = "solid-connection-load-test-db-sg"
+    Name    = "solid-connection-load-test-db-sg"
+    Project = "solid-connection"
+    Env     = "load_test"
   }
 }
 
@@ -94,6 +98,65 @@ resource "aws_security_group_rule" "load_test_db_mysql" {
   source_security_group_id = each.value
 }
 
+resource "aws_ebs_volume" "load_test_db_data" {
+  availability_zone = data.aws_subnet.load_test_db.availability_zone
+  size              = var.allocated_storage
+  type              = "gp3"
+  encrypted         = true
+
+  tags = {
+    Name    = "${var.load_test_db_instance_name}-data"
+    Project = "solid-connection"
+    Env     = "load_test"
+  }
+}
+
+resource "aws_instance" "load_test_db" {
+  ami                         = local.load_test_db_ami_id
+  instance_type               = var.load_test_db_instance_type
+  subnet_id                   = local.load_test_db_subnet_id
+  vpc_security_group_ids      = [aws_security_group.load_test_db.id]
+  associate_public_ip_address = var.load_test_db_associate_public_ip
+  iam_instance_profile        = var.load_test_db_instance_profile_name
+
+  metadata_options {
+    http_endpoint               = "enabled"
+    http_tokens                 = "required"
+    http_put_response_hop_limit = 1
+  }
+
+  root_block_device {
+    volume_size           = 8
+    volume_type           = "gp3"
+    encrypted             = true
+    delete_on_termination = true
+  }
+
+  user_data = templatefile("${path.module}/templates/load_test_mysql_setup.sh.tftpl", {
+    aws_region                 = "ap-northeast-2"
+    data_volume_id             = aws_ebs_volume.load_test_db_data.id
+    db_name                    = var.db_name
+    load_test_parameter_prefix = var.load_test_parameter_prefix
+    mysql_backup_bucket_name   = var.mysql_backup_bucket_name
+    mysql_config_content       = file("${path.module}/../../modules/app_stack/templates/mysql_tuning.cnf")
+  })
+
+  user_data_replace_on_change = true
+
+  tags = {
+    Name    = var.load_test_db_instance_name
+    Project = "solid-connection"
+    Env     = "load_test"
+  }
+}
+
+resource "aws_volume_attachment" "load_test_db_data" {
+  device_name                    = "/dev/sdf"
+  volume_id                      = aws_ebs_volume.load_test_db_data.id
+  instance_id                    = aws_instance.load_test_db.id
+  stop_instance_before_detaching = true
+}
+
 resource "aws_security_group" "load_generator" {
   count = var.create_load_generator ? 1 : 0
 
@@ -152,39 +215,9 @@ resource "aws_instance" "load_generator" {
   }
 }
 
-resource "aws_db_subnet_group" "load_test" {
-  name       = "sc-load-test-db-subnet-group"
-  subnet_ids = data.aws_subnets.target.ids
-
-  tags = {
-    Name = "solid-connection-load-test-db-subnet-group"
-  }
-}
-
-resource "aws_db_instance" "load_test" {
-  identifier              = var.rds_identifier
-  instance_class          = var.db_instance_class
-  parameter_group_name    = var.db_parameter_group_name
-  snapshot_identifier     = data.aws_db_snapshot.latest_prod.id
-  db_subnet_group_name    = aws_db_subnet_group.load_test.name
-  vpc_security_group_ids  = [aws_security_group.load_test_db.id]
-  publicly_accessible     = false
-  skip_final_snapshot     = true
-  copy_tags_to_snapshot   = true
-  deletion_protection     = false
-  backup_retention_period = 0
-  apply_immediately       = true
-  storage_encrypted       = true
-  kms_key_id              = var.kms_key_arn
-
-  tags = {
-    Name = var.rds_identifier
-  }
-}
-
 resource "aws_ssm_parameter" "load_test_datasource_url" {
   name      = "${var.load_test_parameter_prefix}/spring.datasource.url"
   type      = "String"
-  value     = "jdbc:mysql://${aws_db_instance.load_test.address}:${aws_db_instance.load_test.port}/${var.db_name}?serverTimezone=Asia/Seoul&characterEncoding=UTF-8"
+  value     = "jdbc:mysql://${aws_instance.load_test_db.private_ip}:3306/${var.db_name}?serverTimezone=Asia/Seoul&characterEncoding=UTF-8"
   overwrite = true
 }

environment/load_test/output.tf

@@ -1,35 +1,45 @@
-output "load_test_rds_endpoint" {
-  description = "Load test RDS endpoint"
-  value       = aws_db_instance.load_test.address
+output "load_test_db_endpoint" {
+  description = "Load-test MySQL EC2 private endpoint"
+  value       = aws_instance.load_test_db.private_ip
 }
 
-output "load_test_rds_port" {
-  description = "Load test RDS port"
-  value       = aws_db_instance.load_test.port
+output "load_test_db_port" {
+  description = "Load-test MySQL EC2 port"
+  value       = 3306
 }
 
-output "load_test_rds_identifier" {
-  description = "Load test RDS identifier"
-  value       = aws_db_instance.load_test.identifier
+output "load_test_db_instance_id" {
+  description = "Load-test MySQL EC2 instance ID"
+  value       = aws_instance.load_test_db.id
+}
+
+output "load_test_db_private_ip" {
+  description = "Load-test MySQL EC2 private IP"
+  value       = aws_instance.load_test_db.private_ip
+}
+
+output "load_test_db_data_volume_id" {
+  description = "Load-test MySQL EC2 data EBS volume ID"
+  value       = aws_ebs_volume.load_test_db_data.id
 }
 
 output "load_test_db_name" {
   description = "Load test database name"
   value       = var.db_name
 }
 
-output "prod_rds_endpoint" {
-  description = "Prod RDS endpoint used as dump source"
-  value       = data.aws_db_instance.prod.address
+output "prod_db_instance_id" {
+  description = "Prod MySQL EC2 instance ID used as the default AMI source"
+  value       = data.aws_instance.prod_db.id
 }
 
-output "prod_rds_port" {
-  description = "Prod RDS port"
-  value       = data.aws_db_instance.prod.port
+output "prod_db_private_ip" {
+  description = "Prod MySQL EC2 private IP"
+  value       = data.aws_instance.prod_db.private_ip
 }
 
 output "prod_api_instance_id" {
-  description = "Prod API EC2 instance ID whose security group can access load-test RDS"
+  description = "Prod API EC2 instance ID whose security group can access load-test MySQL EC2"
   value       = data.aws_instance.prod_api.id
 }