donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.alt.md
+12 -10
View File
@@ -1,22 +1,24 @@
# 볼륨 없는 영속화와 유예 없는 회전
# 볼륨 없는 영속화와 replica별 키 회전
## Alternative text
Redis 의 데이터 디렉터리가 컨테이너 파일시스템일 때 영속화 설정이 무의미해지는 구성과, 새 kid 를 만난 검증기가 JWKS 를 재조회하는 구성.
운영 변경에서 Redis AOF는 볼륨 없는 데이터 디렉터리로 이어져 소멸하고, realm 키 회전은 replica별 JWKS cache 차이로 401과 200이 갈리는 두 경로.
## Long description
redis-cli config set appendonly yes 를 켜도 아무것도 달라지지 않았다. /data 가 컨테이너 파일시스템이라 컨테이너와 함께 죽기 때문이다. appendonlydir 이 만들어졌다가 그대로 버려진다. 볼륨 없는 영속화 설정은 장식이다. realm 키를 회전했을 때는 JWKS 캐시의 유예 구간을 기대했는데 없었다. NimbusJwtDecoder 는 모르는 kid 를 만나면 JWKS 를 다시 가져온다.
B-5에서는 appendonly yes 설정이 적용돼도 /data가 컨테이너 파일시스템이라 재시작 때 사라졌다. B-6에서는 옛 키를 지운 뒤 같은 토큰을 반복 요청하자 401과 200이 교대로 나왔다. echo replica 둘의 JWKS cache가 독립적이라 한쪽은 새 목록을 받아 옛 키를 잃었고 다른 쪽은 아직 들고 있었기 때문이다.
## Elements and evidence
- **appendonly yes** (process): 설정은 적용된다. Evidence: L406–L412.
- **/data** (datastore): 컨테이너 파일시스템이다. Evidence: L406–L412.
- **컨테이너** (component): 죽으면 /data 도 같이 사라진다. Evidence: L406–L412.
- **PersistentVolume** (datastore): 여기 있어야 설정이 뜻을 갖는다. Evidence: L406–L412.
- **운영 변경** (process): 저장 설정과 realm 키 회전을 각각 수행한다. Evidence: L861–L872.
- **Redis /data** (datastore): AOF가 기록되는 컨테이너 파일시스템이다. Evidence: L861–L863.
- **Redis 재시작** (component): 볼륨이 없어 데이터가 함께 사라진다. Evidence: L861–L863.
- **echo replica 2개** (service): JWKS cache를 인스턴스마다 따로 가진다. Evidence: L868–L872.
- **교차 응답** (component): 같은 옛 토큰의 검증 결과가 replica에 따라 갈린다. Evidence: L868–L877.
## Relationships
- **appendonly yes → /data:** AOF 기록. Evidence: L406–L412.
- **/data → 컨테이너:** 컨테이너와 함께 소멸. Evidence: L406–L412.
- **/data → PersistentVolume:** 볼륨 마운트. Evidence: L406–L412.
- **운영 변경 → Redis /data:** AOF 설정. Evidence: L861–L863.
- **운영 변경 → echo replica 2개:** 키 회전. Evidence: L865–L872.
- **Redis /data → Redis 재시작:** 볼륨 없음. Evidence: L861–L863.
- **echo replica 2개 → 교차 응답:** cache 상태. Evidence: L868–L877.
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.d2
+15 -11
View File
@@ -1,18 +1,22 @@
# 볼륨 없는 영속화와 유예 없는 회전
# Question: 설정만으로 영속화와 무중단 키 교체가 되는가
direction: down
n0: "appendonly yes" {
# 볼륨 없는 영속화와 replica별 키 회전
# Question: 설정을 켰다는 사실만으로 영속화와 일관된 키 회전을 기대할 수 있는가
direction: right
n0: "운영 변경" {
shape: rectangle
}
n1: "/data" {
n1: "Redis /data" {
shape: cylinder
}
n2: "컨테이너" {
n2: "Redis 재시작" {
shape: rectangle
}
n3: "PersistentVolume" {
shape: cylinder
n3: "echo replica 2개" {
shape: rectangle
}
n0 -> n1: "AOF 기록"
n1 -> n2: "컨테이너와 함께 소멸"
n1 -> n3: "볼륨 마운트"
n4: "교차 응답" {
shape: rectangle
}
n0 -> n1: "AOF 설정"
n1 -> n2: "볼륨 없음"
n0 -> n3: "키 회전"
n3 -> n4: "cache 상태"
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.dot
+10 -8
View File
@@ -1,12 +1,14 @@
digraph techviz {
graph [rankdir=TB, splines=ortho, nodesep=0.55, ranksep=0.85];
graph [rankdir=LR, splines=ortho, nodesep=0.55, ranksep=0.85];
node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
n0 [label="appendonly yes", shape=box, style="rounded,filled"];
n1 [label="/data", shape=cylinder, style="rounded,filled"];
n2 [label="컨테이너", shape=box, style="rounded,filled"];
n3 [label="PersistentVolume", shape=cylinder, style="rounded,filled"];
n0 -> n1 [label="AOF 기록", style=solid];
n1 -> n2 [label="컨테이너와 함께 소멸", style=solid];
n1 -> n3 [label="볼륨 마운트", style=solid];
n0 [label="운영 변경", shape=box, style="rounded,filled"];
n1 [label="Redis /data", shape=cylinder, style="rounded,filled"];
n2 [label="Redis 재시작", shape=box, style="rounded,filled"];
n3 [label="echo replica 2개", shape=box, style="rounded,filled"];
n4 [label="교차 응답", shape=box, style="rounded,filled"];
n0 -> n1 [label="AOF 설정", style=solid];
n1 -> n2 [label="볼륨 없음", style=solid];
n0 -> n3 [label="키 회전", style=solid];
n3 -> n4 [label="cache 상태", style=solid];
}
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.drawio
+24 -16
View File
@@ -1,35 +1,43 @@
<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" modified="2026-07-23T00:00:00.000Z" agent="techviz-harness" version="24.7.17" type="device">
<diagram id="b5-b6-storage-and-keys" name="볼륨 없는 영속화와 유예 없는 회전">
<mxGraphModel dx="680" dy="555" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="827" pageHeight="1169" math="0" shadow="0">
<diagram id="b5-b6-storage-and-keys" name="볼륨 없는 영속화와 replica별 키 회전">
<mxGraphModel dx="923" dy="319" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="923" pageHeight="1169" math="0" shadow="0">
<root>
<mxCell id="0"/>
<mxCell id="1" parent="0"/>
<mxCell id="n_config" value="appendonly yes&lt;br/&gt;redis-cli config set" tooltip="설정은 적용된다. | Evidence: L406-L412" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="163.0" y="60.0" width="174.0" height="71.0" as="geometry"/>
<mxCell id="n_change" value="운영 변경&lt;br/&gt;B-5 · B-6" tooltip="저장 설정과 realm 키 회전을 각각 수행한다. | Evidence: L861-L872" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="70.0" y="131.5" width="150.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_datadir" value="/data&lt;br/&gt;appendonlydir" tooltip="컨테이너 파일시스템이다. | Evidence: L406-L412" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;shape=cylinder3;boundedLbl=1;backgroundOutline=1;fillColor=#eef6fb;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="175.0" y="227.0" width="150.0" height="97.0" as="geometry"/>
<mxCell id="n_datadir" value="Redis /data&lt;br/&gt;appendonly yes · 볼륨 없음" tooltip="AOF가 기록되는 컨테이너 파일시스템이다. | Evidence: L861-L863" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;shape=cylinder3;boundedLbl=1;backgroundOutline=1;fillColor=#eef6fb;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="380.0" y="60.0" width="188.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_container" value="컨테이너&lt;br/&gt;볼륨 없음" tooltip="죽으면 /data 도 같이 사라진다. | Evidence: L406-L412" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="70.0" y="429.5" width="150.0" height="71.0" as="geometry"/>
<mxCell id="n_replicas" value="echo replica 2개&lt;br/&gt;replica별 cache" tooltip="JWKS cache를 인스턴스마다 따로 가진다. | Evidence: L868-L872" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="399.0" y="203.0" width="150.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_volume" value="PersistentVolume" tooltip="여기 있어야 설정이 뜻을 갖는다. | Evidence: L406-L412" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;shape=cylinder3;boundedLbl=1;backgroundOutline=1;fillColor=#eef6fb;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="280.0" y="420.0" width="150.0" height="90.0" as="geometry"/>
<mxCell id="n_lost" value="Redis 재시작&lt;br/&gt;영속화 실패" tooltip="볼륨이 없어 데이터가 함께 사라진다. | Evidence: L861-L863" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="728.0" y="60.0" width="150.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="e_c-d" value="AOF 기록" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_config" target="n_datadir">
<mxCell id="n_mixed" value="교차 응답&lt;br/&gt;401 · 200 · 반복" tooltip="같은 옛 토큰의 검증 결과가 replica에 따라 갈린다. | Evidence: L868-L877" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="728.0" y="203.0" width="150.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="e_c-d" value="AOF 설정" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_change" target="n_datadir">
<mxGeometry relative="1" as="geometry">
<mxPoint x="274.0" y="179.0" as="offset"/>
<mxPoint x="324.0" y="126.8" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_d-c" value="컨테이너와 함께 소멸" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_datadir" target="n_container">
<mxCell id="e_c-r" value="키 회전" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_change" target="n_replicas">
<mxGeometry relative="1" as="geometry">
<mxPoint x="193.0" y="348.8" as="offset"/>
<mxPoint x="333.5" y="207.2" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_d-v" value="볼륨 마운트" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_datadir" target="n_volume">
<mxCell id="e_d-l" value="볼륨 없음" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_datadir" target="n_lost">
<mxGeometry relative="1" as="geometry">
<mxPoint x="307.0" y="344.0" as="offset"/>
<mxPoint x="648.0" y="67.5" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_r-m" value="cache 상태" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_replicas" target="n_mixed">
<mxGeometry relative="1" as="geometry">
<mxPoint x="638.5" y="210.5" as="offset"/>
</mxGeometry>
</mxCell>
</root>
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.excalidraw
+282 -114
View File
@@ -6,10 +6,10 @@
{
"id": "edge-c-d",
"type": "arrow",
"x": 250.0,
"y": 131.0,
"width": 0.0,
"height": 96.0,
"x": 220.0,
"y": 95.5,
"width": 160.0,
"height": 62.5,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -33,24 +33,24 @@
"points": [
[
0.0,
62.5
],
[
80.0,
62.5
],
[
80.0,
0.0
],
[
0.0,
48.0
],
[
0.0,
48.0
],
[
0.0,
96.0
160.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-config",
"elementId": "node-change",
"focus": 0,
"gap": 4
},
@@ -66,8 +66,8 @@
{
"id": "edge-label-c-d",
"type": "text",
"x": 229.0,
"y": 167.0,
"x": 279.0,
"y": 114.75,
"width": 90,
"height": 24,
"angle": 0,
@@ -94,21 +94,21 @@
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "AOF 기록",
"text": "AOF 설정",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "AOF 기록",
"originalText": "AOF 설정",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-d-c",
"id": "edge-c-r",
"type": "arrow",
"x": 145.0,
"y": 324.0,
"width": 96.0,
"height": 105.5,
"x": 220.0,
"y": 176.0,
"width": 179.0,
"height": 62.5,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -121,9 +121,9 @@
"frameId": null,
"index": null,
"roundness": null,
"seed": 1710772655,
"seed": 1593849987,
"version": 1,
"versionNonce": 825890023,
"versionNonce": 148545859,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -131,30 +131,30 @@
"locked": false,
"points": [
[
96.0,
0.0,
0.0
],
[
96.0,
52.75
89.5,
0.0
],
[
0.0,
52.75
89.5,
62.5
],
[
0.0,
105.5
179.0,
62.5
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-datadir",
"elementId": "node-change",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-container",
"elementId": "node-replicas",
"focus": 0,
"gap": 4
},
@@ -163,10 +163,10 @@
"elbowed": true
},
{
"id": "edge-label-d-c",
"id": "edge-label-c-r",
"type": "text",
"x": 148.0,
"y": 336.75,
"x": 288.5,
"y": 195.25,
"width": 90,
"height": 24,
"angle": 0,
@@ -183,9 +183,9 @@
"roundness": {
"type": 3
},
"seed": 1795748316,
"seed": 1032385081,
"version": 1,
"versionNonce": 1772431002,
"versionNonce": 839461234,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -193,21 +193,21 @@
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "컨테이너와 함께 소멸",
"text": "키 회전",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "컨테이너와 함께 소멸",
"originalText": "키 회전",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-d-v",
"id": "edge-d-l",
"type": "arrow",
"x": 259.0,
"y": 324.0,
"width": 96.0,
"height": 96.0,
"x": 568.0,
"y": 95.5,
"width": 160.0,
"height": 0.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -220,9 +220,9 @@
"frameId": null,
"index": null,
"roundness": null,
"seed": 1778945409,
"seed": 1898062713,
"version": 1,
"versionNonce": 128234071,
"versionNonce": 349178508,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -234,16 +234,16 @@
0.0
],
[
0.0,
48.0
80.0,
0.0
],
[
96.0,
48.0
80.0,
0.0
],
[
96.0,
96.0
160.0,
0.0
]
],
"lastCommittedPoint": null,
@@ -253,7 +253,7 @@
"gap": 4
},
"endBinding": {
"elementId": "node-volume",
"elementId": "node-lost",
"focus": 0,
"gap": 4
},
@@ -262,10 +262,10 @@
"elbowed": true
},
{
"id": "edge-label-d-v",
"id": "edge-label-d-l",
"type": "text",
"x": 262.0,
"y": 332.0,
"x": 603.0,
"y": 55.5,
"width": 90,
"height": 24,
"angle": 0,
@@ -282,9 +282,9 @@
"roundness": {
"type": 3
},
"seed": 1825891785,
"seed": 160907104,
"version": 1,
"versionNonce": 120899807,
"versionNonce": 1439173985,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -292,20 +292,119 @@
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "볼륨 마운트",
"text": "볼륨 없음",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "볼륨 마운트",
"originalText": "볼륨 없음",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-config",
"id": "edge-r-m",
"type": "arrow",
"x": 549.0,
"y": 238.5,
"width": 179.0,
"height": 0.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 566697716,
"version": 1,
"versionNonce": 531785984,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
0.0
],
[
89.5,
0.0
],
[
89.5,
0.0
],
[
179.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-replicas",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-mixed",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-r-m",
"type": "text",
"x": 593.5,
"y": 198.5,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1733315186,
"version": 1,
"versionNonce": 1533067753,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "cache 상태",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "cache 상태",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-change",
"type": "rectangle",
"x": 163.0,
"y": 60.0,
"width": 174.0,
"x": 70.0,
"y": 131.5,
"width": 150.0,
"height": 71.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -321,9 +420,9 @@
"roundness": {
"type": 3
},
"seed": 736776605,
"seed": 262945989,
"version": 1,
"versionNonce": 1424542118,
"versionNonce": 1104944359,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -331,11 +430,11 @@
"locked": false
},
{
"id": "node-label-config",
"id": "node-label-change",
"type": "text",
"x": 173.0,
"y": 70.0,
"width": 154.0,
"x": 80.0,
"y": 141.5,
"width": 130.0,
"height": 51.0,
"angle": 0,
"strokeColor": "#1e1e1e",
@@ -351,9 +450,9 @@
"roundness": {
"type": 3
},
"seed": 802906507,
"seed": 193631094,
"version": 1,
"versionNonce": 72227637,
"versionNonce": 157184716,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -361,21 +460,21 @@
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "appendonly yes\nredis-cli config set",
"text": "운영 변경\nB-5 · B-6",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "appendonly yes\nredis-cli config set",
"originalText": "운영 변경\nB-5 · B-6",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-datadir",
"type": "rectangle",
"x": 175.0,
"y": 227.0,
"width": 150.0,
"height": 97.0,
"x": 380.0,
"y": 60.0,
"width": 188.0,
"height": 71.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#e7f5ff",
@@ -402,10 +501,10 @@
{
"id": "node-label-datadir",
"type": "text",
"x": 185.0,
"y": 237.0,
"width": 130.0,
"height": 77.0,
"x": 390.0,
"y": 70.0,
"width": 168.0,
"height": 51.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -430,19 +529,19 @@
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "/data\nappendonlydir",
"text": "Redis /data\nappendonly yes · 볼륨 없음",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "/data\nappendonlydir",
"originalText": "Redis /data\nappendonly yes · 볼륨 없음",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-container",
"id": "node-replicas",
"type": "rectangle",
"x": 70.0,
"y": 429.5,
"x": 399.0,
"y": 203.0,
"width": 150.0,
"height": 71.0,
"angle": 0,
@@ -459,9 +558,9 @@
"roundness": {
"type": 3
},
"seed": 899340409,
"seed": 1255192028,
"version": 1,
"versionNonce": 719103033,
"versionNonce": 1720096067,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -469,10 +568,10 @@
"locked": false
},
{
"id": "node-label-container",
"id": "node-label-replicas",
"type": "text",
"x": 80.0,
"y": 439.5,
"x": 409.0,
"y": 213.0,
"width": 130.0,
"height": 51.0,
"angle": 0,
@@ -489,9 +588,9 @@
"roundness": {
"type": 3
},
"seed": 625860718,
"seed": 471343967,
"version": 1,
"versionNonce": 292100911,
"versionNonce": 1781276630,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -499,24 +598,24 @@
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "컨테이너\n볼륨 없음",
"text": "echo replica 2개\nreplica별 cache",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "컨테이너\n볼륨 없음",
"originalText": "echo replica 2개\nreplica별 cache",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-volume",
"id": "node-lost",
"type": "rectangle",
"x": 280.0,
"y": 420.0,
"x": 728.0,
"y": 60.0,
"width": 150.0,
"height": 90.0,
"height": 71.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#e7f5ff",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
@@ -528,9 +627,9 @@
"roundness": {
"type": 3
},
"seed": 690472711,
"seed": 1036926306,
"version": 1,
"versionNonce": 62320937,
"versionNonce": 1013846721,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -538,12 +637,12 @@
"locked": false
},
{
"id": "node-label-volume",
"id": "node-label-lost",
"type": "text",
"x": 290.0,
"y": 430.0,
"x": 738.0,
"y": 70.0,
"width": 130.0,
"height": 70.0,
"height": 51.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
@@ -558,9 +657,9 @@
"roundness": {
"type": 3
},
"seed": 964975471,
"seed": 1899718311,
"version": 1,
"versionNonce": 313361807,
"versionNonce": 638763424,
"isDeleted": false,
"boundElements": [],
"updated": 0,
@@ -568,11 +667,80 @@
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "PersistentVolume",
"text": "Redis 재시작\n영속화 실패",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "PersistentVolume",
"originalText": "Redis 재시작\n영속화 실패",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-mixed",
"type": "rectangle",
"x": 728.0,
"y": 203.0,
"width": 150.0,
"height": 71.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1694771516,
"version": 1,
"versionNonce": 301343372,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-mixed",
"type": "text",
"x": 738.0,
"y": 213.0,
"width": 130.0,
"height": 51.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1468593009,
"version": 1,
"versionNonce": 77181802,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "교차 응답\n401 · 200 · 반복",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "교차 응답\n401 · 200 · 반복",
"autoResize": true,
"lineHeight": 1.25
}
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.manifest.json
+3 -3
View File
@@ -2,14 +2,14 @@
"harness_version": "0.2.0",
"spec_id": "b5-b6-storage-and-keys",
"spec_version": "1.1",
"spec_sha256": "6be204030cc95c5d9aec2ec4f07eae62bd88e7f344d00c2e014a20e18d6f8dba",
"spec_sha256": "84e25e1b1ee45fb426dc29ababf1e14f1898da8de253e5bfa2611fa92a6fa607",
"source_context": {
"document": "docs/keycloak-session-store/final/document.md",
"document_sha256": "1d44cba1905544d92f1d26ae36a8deb64a3db3914d6b488fd30d6ae7f8cfbabe",
"document_sha256": "28aef96a2bbb94fbb10ade26a71238fee62a5a4d9fa6e7749ae98cfd0a65e560",
"anchor": {
"kind": "heading",
"value": "B-5 · B-6 — 저장소 상실과 키 회전",
"line": 415
"line": 859
}
},
"outputs": [
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.mmd
+12 -10
View File
@@ -1,10 +1,12 @@
%% 볼륨 없는 영속화와 유예 없는 회전
%% question: 설정만으로 영속화와 무중단 키 교체가 되는가
flowchart TB
n0["appendonly yes"]
n1[("/data")]
n2["컨테이너"]
n3[("PersistentVolume")]
n0 -->|"AOF 기록"| n1
n1 -->|"컨테이너와 함께 소멸"| n2
n1 -->|"볼륨 마운트"| n3
%% 볼륨 없는 영속화와 replica별 키 회전
%% question: 설정을 켰다는 사실만으로 영속화와 일관된 키 회전을 기대할 수 있는가
flowchart LR
n0["운영 변경"]
n1[("Redis /data")]
n2["Redis 재시작"]
n3["echo replica 2개"]
n4["교차 응답"]
n0 -->|"AOF 설정"| n1
n1 -->|"볼륨 없음"| n2
n0 -->|"키 회전"| n3
n3 -->|"cache 상태"| n4
docs/keycloak-session-store/final/assets/b5-b6-storage-and-keys/b5-b6-storage-and-keys.svg
+42 -31
View File
@@ -1,8 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg" width="680" height="555" viewBox="0 0 680 555" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">볼륨 없는 영속화와 유예 없는 회전</title>
<desc id="diagram-description">redis-cli config set appendonly yes 를 켜도 아무것도 달라지지 않았다. /data 가 컨테이너 파일시스템이라 컨테이너와 함께 죽기 때문이다. appendonlydir 이 만들어졌다가 그대로 버려진다. 볼륨 없는 영속화 설정은 장식이다. realm 키를 회전했을 때는 JWKS 캐시의 유예 구간을 기대했는데 없었다. NimbusJwtDecoder 는 모르는 kid 를 만나면 JWKS 를 다시 가져온다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;b5-b6-storage-and-keys&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;docs/keycloak-session-store/final/document.md&quot;,&quot;document_sha256&quot;:&quot;1d44cba1905544d92f1d26ae36a8deb64a3db3914d6b488fd30d6ae7f8cfbabe&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;heading&quot;,&quot;value&quot;:&quot;B-5 · B-6 — 저장소 상실과 키 회전&quot;,&quot;line&quot;:415}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<svg xmlns="http://www.w3.org/2000/svg" width="923" height="319" viewBox="0 0 923 319" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">볼륨 없는 영속화와 replica별 키 회전</title>
<desc id="diagram-description">B-5에서는 appendonly yes 설정이 적용돼도 /data가 컨테이너 파일시스템이라 재시작 때 사라졌다. B-6에서는 옛 키를 지운 뒤 같은 토큰을 반복 요청하자 401과 200이 교대로 나왔다. echo replica 둘의 JWKS cache가 독립적이라 한쪽은 새 목록을 받아 옛 키를 잃었고 다른 쪽은 아직 들고 있었기 때문이다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;b5-b6-storage-and-keys&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;docs/keycloak-session-store/final/document.md&quot;,&quot;document_sha256&quot;:&quot;28aef96a2bbb94fbb10ade26a71238fee62a5a4d9fa6e7749ae98cfd0a65e560&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;heading&quot;,&quot;value&quot;:&quot;B-5 · B-6 — 저장소 상실과 키 회전&quot;,&quot;line&quot;:859}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<defs>
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
<path d="M 0 0 L 10 5 L 0 10 z" />
@@ -49,36 +49,47 @@
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
</style>
</defs>
<rect class="canvas" width="680" height="555" />
<polyline class="edge kind-write style-solid emphasis-normal" points="250.0,131.0 250.0,179.0 250.0,179.0 250.0,227.0" data-evidence="406-412" />
<rect class="edge-label-bg" x="244.9" y="165.0" width="58.2" height="22" rx="3" />
<text class="edge-label" x="274.0" y="180.0">AOF 기록</text>
<polyline class="edge kind-blocked style-solid emphasis-normal" points="241.0,324.0 241.0,376.8 145.0,376.8 145.0,429.5" data-evidence="406-412" />
<rect class="edge-label-bg" x="147.2" y="334.8" width="91.7" height="22" rx="3" />
<text class="edge-label" x="193.0" y="349.8">컨테이너와 함께 소멸</text>
<polyline class="edge kind-write style-solid emphasis-normal" points="259.0,324.0 259.0,372.0 355.0,372.0 355.0,420.0" data-evidence="406-412" />
<rect class="edge-label-bg" x="277.9" y="330.0" width="58.2" height="22" rx="3" />
<text class="edge-label" x="307.0" y="345.0">볼륨 마운트</text>
<g id="node-config">
<rect class="node-shape kind-process emphasis-warning role-source" data-evidence="406-412" x="163.0" y="60.0" width="174.0" height="71.0" rx="7" />
<text class="node-label" x="250.0" y="87.0">appendonly yes</text>
<line class="node-detail-divider" x1="177.0" y1="108.0" x2="323.0" y2="108.0" />
<text class="node-detail" x="179.0" y="125.0">redis-cli config set</text>
<rect class="canvas" width="923" height="319" />
<polyline class="edge kind-write style-solid emphasis-normal" points="220.0,158.0 300.0,158.0 300.0,95.5 380.0,95.5" data-evidence="861-863" />
<rect class="edge-label-bg" x="294.9" y="112.8" width="58.2" height="22" rx="3" />
<text class="edge-label" x="324.0" y="127.8">AOF 설정</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="220.0,176.0 309.5,176.0 309.5,238.5 399.0,238.5" data-evidence="865-872" />
<rect class="edge-label-bg" x="311.1" y="193.2" width="44.8" height="22" rx="3" />
<text class="edge-label" x="333.5" y="208.2">키 회전</text>
<polyline class="edge kind-blocked style-solid emphasis-normal" points="568.0,95.5 648.0,95.5 648.0,95.5 728.0,95.5" data-evidence="861-863" />
<rect class="edge-label-bg" x="622.2" y="53.5" width="51.5" height="22" rx="3" />
<text class="edge-label" x="648.0" y="68.5">볼륨 없음</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="549.0,238.5 638.5,238.5 638.5,238.5 728.0,238.5" data-evidence="868-877" />
<rect class="edge-label-bg" x="602.7" y="196.5" width="71.6" height="22" rx="3" />
<text class="edge-label" x="638.5" y="211.5">cache 상태</text>
<g id="node-change">
<rect class="node-shape kind-process emphasis-normal role-source" data-evidence="861-872" x="70.0" y="131.5" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="145.0" y="158.5">운영 변경</text>
<line class="node-detail-divider" x1="84.0" y1="179.5" x2="206.0" y2="179.5" />
<text class="node-detail" x="86.0" y="196.5">B-5 · B-6</text>
</g>
<g id="node-datadir">
<rect class="node-shape kind-datastore emphasis-warning role-control" data-evidence="406-412" x="175.0" y="240.0" width="150.0" height="71.0" /><ellipse class="node-shape kind-datastore emphasis-warning role-control" cx="250.0" cy="240.0" rx="75.0" ry="13.0" /><path class="storage-bottom" d="M 175.0 311.0 A 75.0 13.0 0 0 0 325.0 311.0" />
<text class="node-label" x="250.0" y="267.0">/data</text>
<line class="node-detail-divider" x1="189.0" y1="288.0" x2="311.0" y2="288.0" />
<text class="node-detail" x="191.0" y="305.0">appendonlydir</text>
<rect class="node-shape kind-datastore emphasis-warning role-control" data-evidence="861-863" x="380.0" y="71.8" width="188.0" height="47.3" /><ellipse class="node-shape kind-datastore emphasis-warning role-control" cx="474.0" cy="71.8" rx="94.0" ry="11.8" /><path class="storage-bottom" d="M 380.0 119.2 A 94.0 11.8 0 0 0 568.0 119.2" />
<text class="node-label" x="474.0" y="87.0">Redis /data</text>
<line class="node-detail-divider" x1="394.0" y1="108.0" x2="554.0" y2="108.0" />
<text class="node-detail" x="396.0" y="125.0">appendonly yes · 볼륨 없음</text>
</g>
<g id="node-container">
<rect class="node-shape kind-component emphasis-warning role-target" data-evidence="406-412" x="70.0" y="429.5" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="145.0" y="456.5">컨테이너</text>
<line class="node-detail-divider" x1="84.0" y1="477.5" x2="206.0" y2="477.5" />
<text class="node-detail" x="86.0" y="494.5">볼륨 없음</text>
<g id="node-replicas">
<rect class="node-shape kind-service emphasis-warning role-control" data-evidence="868-872" x="399.0" y="203.0" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="474.0" y="230.0">echo replica 2개</text>
<line class="node-detail-divider" x1="413.0" y1="251.0" x2="535.0" y2="251.0" />
<text class="node-detail" x="415.0" y="268.0">replica별 cache</text>
</g>
<g id="node-volume">
<rect class="node-shape kind-datastore emphasis-primary role-target" data-evidence="406-412" x="280.0" y="433.0" width="150.0" height="64.0" /><ellipse class="node-shape kind-datastore emphasis-primary role-target" cx="355.0" cy="433.0" rx="75.0" ry="13.0" /><path class="storage-bottom" d="M 280.0 497.0 A 75.0 13.0 0 0 0 430.0 497.0" />
<text class="node-label" x="355.0" y="463.0">PersistentVolume</text>
<g id="node-lost">
<rect class="node-shape kind-component emphasis-warning role-target" data-evidence="861-863" x="728.0" y="60.0" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="803.0" y="87.0">Redis 재시작</text>
<line class="node-detail-divider" x1="742.0" y1="108.0" x2="864.0" y2="108.0" />
<text class="node-detail" x="744.0" y="125.0">영속화 실패</text>
</g>
<g id="node-mixed">
<rect class="node-shape kind-component emphasis-primary role-target" data-evidence="868-877" x="728.0" y="203.0" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="803.0" y="230.0">교차 응답</text>
<line class="node-detail-divider" x1="742.0" y1="251.0" x2="864.0" y2="251.0" />
<text class="node-detail" x="744.0" y="268.0">401 · 200 · 반복</text>
</g>
</svg>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 7.1 KiB

After

Width:  |  Height:  |  Size: 7.7 KiB