fix: K8s 워커 노드 서브넷 이동 (#7)

[doup2001]

📌 작업한 내용

• K8s 워커 노드 서브넷 배치 문제를 수정하여 올바른 서브넷으로 이동시킴.

🔍 참고 사항

• Issue chore: 핀하우스 운영용 테라폼 작성 #7 관련 워커 노드 구성 오류를 해결함.
• 서브넷 설정 변경으로 K8s 클러스터 네트워크 안정성 개선.
• 배포 후 클러스터 상태 및 네트워크 연결 확인 필요.

🖼️ 스크린샷

(해당 사항 없음)

🔗 관련 이슈

#7

✅ 체크리스트

• 로컬에서 빌드 및 테스트 완료
• 코드 리뷰 반영 완료
• 문서화 필요 여부 확인

[github-actions]

Terraform Plan - prod 환경

State 버킷 변수 확인 📦 ✅

초기화 결과 ⚙️ ✅

tfvars 복원 결과 🔐 ✅

포맷 검사 결과 🖌 ✅

유효성 검사 결과 🤖 ✅

Plan 결과 📖 ✅

Plan 상세 보기

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.k8s_worker_nodes.google_compute_instance_group_manager.instance_group[0] will be updated in-place
  ~ resource "google_compute_instance_group_manager" "instance_group" {
        id                             = "projects/prod-pinhouse/zones/asia-northeast3-a/instanceGroupManagers/pinhouse-prod-k8s-worker-ig"
        name                           = "pinhouse-prod-k8s-worker-ig"
        # (13 unchanged attributes hidden)

      ~ version {
          ~ instance_template = "https://www.googleapis.com/compute/v1/projects/prod-pinhouse/global/instanceTemplates/pinhouse-prod-k8s-worker-template-20260404101038829700000001" -> (known after apply)
        }

        # (2 unchanged blocks hidden)
    }

  # module.k8s_worker_nodes.google_compute_instance_template.template[0] must be replaced
+/- resource "google_compute_instance_template" "template" {
      ~ id                   = "projects/prod-pinhouse/global/instanceTemplates/pinhouse-prod-k8s-worker-template-20260404101038829700000001" -> (known after apply)
      ~ metadata_fingerprint = "-jJkhg6FJzE=" -> (known after apply)
      ~ name                 = "pinhouse-prod-k8s-worker-template-20260404101038829700000001" -> (known after apply)
      ~ region               = "asia-northeast3" -> (known after apply)
      ~ self_link            = "https://www.googleapis.com/compute/v1/projects/prod-pinhouse/global/instanceTemplates/pinhouse-prod-k8s-worker-template-20260404101038829700000001" -> (known after apply)
      ~ self_link_unique     = "https://www.googleapis.com/compute/v1/projects/prod-pinhouse/global/instanceTemplates/pinhouse-prod-k8s-worker-template-20260404101038829700000001?uniqueId=5562834815859645809" -> (known after apply)
        tags                 = [
            "k8s-worker",
            "prod",
        ]
      + tags_fingerprint     = (known after apply)
        # (9 unchanged attributes hidden)

      ~ disk {
          ~ device_name           = "persistent-disk-0" -> (known after apply)
          ~ interface             = "SCSI" -> (known after apply)
          - labels                = {} -> null
          ~ mode                  = "READ_WRITE" -> (known after apply)
          ~ provisioned_iops      = 0 -> (known after apply)
          - resource_manager_tags = {} -> null
          - resource_policies     = [] -> null
          ~ source_image          = "projects/ubuntu-os-cloud/global/images/family/ubuntu-2204-lts" -> "ubuntu-os-cloud/ubuntu-2204-lts"
          ~ type                  = "PERSISTENT" -> (known after apply)
            # (4 unchanged attributes hidden)
        }

      ~ network_interface {
          ~ internal_ipv6_prefix_length = 0 -> (known after apply)
          + ipv6_access_type            = (known after apply)
          + ipv6_address                = (known after apply)
          ~ name                        = "nic0" -> (known after apply)
          - queue_count                 = 0 -> null
          + stack_type                  = (known after apply)
          ~ subnetwork                  = "https://www.googleapis.com/compute/v1/projects/prod-pinhouse/regions/asia-northeast3/subnetworks/pinhouse-prod-vpc-web-subnet" -> "https://www.googleapis.com/compute/v1/projects/prod-pinhouse/regions/asia-northeast3/subnetworks/pinhouse-prod-vpc-app-subnet" # forces replacement
          ~ subnetwork_project          = "prod-pinhouse" -> (known after apply)
            # (1 unchanged attribute hidden)
        }

      ~ scheduling {
          - min_node_cpus       = 0 -> null
          ~ provisioning_model  = "STANDARD" -> (known after apply)
            # (3 unchanged attributes hidden)
        }

      ~ service_account {
          ~ email  = "default" -> (known after apply)
            # (1 unchanged attribute hidden)
        }
    }

  # module.vpc.google_compute_firewall.firewall_rules["allow_ssh"] will be updated in-place
  ~ resource "google_compute_firewall" "firewall_rules" {
        id                      = "projects/prod-pinhouse/global/firewalls/prod-vpc-allow-ssh"
        name                    = "prod-vpc-allow-ssh"
      ~ source_ranges           = [
          - "0.0.0.0/0",
        ]
        # (12 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 1 to add, 2 to change, 1 to destroy.

실행 사용자: @doup2001, 이벤트: pull_request