applibotのDevOpsを支える terraform/packer

2018/09/11 DevOpsを支える今話題のHashiCorpツール群について

Transcript

1. applibotͷDevOpsΛࢧ͑Δ
   terraform/packer
   DevOpsΛࢧ͑Δࠓ࿩୊ͷHashiCorpπʔϧ܈ʹ͍ͭͯ
   2018/09/11 ੢ଜ ༡
   

   View Slide

2. ೋ ࣇ ͷ ෕
   ͤ ͍ ΂ ͭ ɿ ͓ ͱ ͜
   Ϩ ϕ ϧ ɿ
   ) 1
   . 1
   ࣾ ձ ਓ ྺ
   d ɹ % $ Ͱ ؂ ࢹ Φϖ Ϩ ʔ λ ʔ
   d ɹ ג ࣜ ձ ࣾ ɹ ɹ ɹ ɿ 4 : 4 5 & . 0 1 & 3 "50 3
   d / 0 8 ɹ ɹ ג ࣜ ձ ࣾ " 1 1 - * # 05 ɿ 4 : 4 5 & . 0 1 & 3 "50 3
   ͳ · ͑ ɹ ɹ ɿ ੢ ଜ ɹ ༡
   ͭ ͍ ͬ ͨ ʔ ɿ !HBDIBSJPO
   HVNJ
   ࣗ ݾ ঺ հ
   

   View Slide

3. גࣜձࣾΞϓϦϘοτ
   ೥݄̓೔૑ཱ
   $ZCFS"HFOU
   εϚʔτϑΥϯήʔϜΤϯλʔςΠϝϯτࣄۀ 4(&
   
   ɹͷ಺ͷࣾ
   ήʔϜ͚ͩͰͳ͘ɺΦϯϥΠϯϓϩάϥϛϯάڭҭαʔϏε΍
   ϝσΟΞܥͷ৘ใൃ৴αΠτ΋ӡӦ
   ձࣾઆ໌
   

   View Slide

4. View Slide

5. View Slide

6. ̍ΞϓϦέʔγϣϯຖʹ
   Χϯύχʔ੍
   

   View Slide

7. ӡ༻தͷΞϓϦ
   ຊ
   

   View Slide

8. ৽ن։ൃ1+
   /ຊ
   

   View Slide

9. ͦͷଞαΠτ࡞੒΍Β
   ৽نࣄۀ΍Β
   ΋Ζ΋Ζ΋Ζ
   

   View Slide

10. 4:401 αʔό؀ڥΛ༻ҙ͢Δਓ
    
    ਓ
    

    View Slide

11. ΞϓϦέʔγϣϯνʔϜͷ
    αʔόΤϯδχΞͱ
    ڠྗ͢Δ͜ͱ͕ଟ͍
    

    View Slide

12. ࿩͢͜ͱ
    w աڈʹ͋ͬͨ՝୊Λ

    UFSSBGPSNQBDLFSΛ࢖ͬͯ

    Ͳ͏ղফ͔ͨ͠ͱ͍͏͓࿩
    

    View Slide

13. ࿩͞ͳ͍͜ͱ
    w ࡉ͔͍5JQT
    

    View Slide

14. agenda
    w DBTF*NBHF࡞੒
    w DBTFෛՙࢼݧ؀ڥߏங
    w DBTF৽ن؀ڥߏங
    w ·ͱΊ
    

    View Slide

15. $BTF
    *NBHF࡞੒
    

    View Slide

16. º º
    ࢖͏΋ͷ
    

    View Slide

17. Packer
    • ༻్
    • AMI / GCP Image / Container Imageͷ࡞੒
    • ansibleͱซ༻ͯ͠࢖༻
    • ϝϦοτ
    • Πϝʔδ࡞੒ͷྲྀΕΛςϯϓϨʔτԽ
    

    View Slide

18. before
    w ྫ"NB[PO".*
    CBTFͱͳΔ".*͔Β&$ىಈ
    "OTJCMFͰߏ੒มߋΛద༻
    Πϝʔδऔಘͨ͠αʔόͷ࡟আ
    Ҏ্ΛશͯखಈͰ࣮ߦ
    

    View Slide

19. before
    ىಈதʹผͷ࡞ۀ΍Δ
    ˠ๨ΕΔ
    Πϝʔδऔಘޙͷαʔό࡟আ
    ˠ๨ΕΔ
    ͦ΋ͦ΋͜ͷ࡞ۀ
    ˠΊΜͲ͍
    

    View Slide

20. ͦΜͳ࣌͸
    

    View Slide

21. after
    $ p a c k e r b u i l d p a c k e r . j s o n
    ʊਓਓਓਓਓਓਓਓਓʊ
    ʼɹίϚϯυҰൃʂɹʻ
    ʉ:?:?:?:?:?:?ʉ
    

    View Slide

22. JOB
    

    View Slide

23. ৄࡉ͸ϒϩάͰ
    ͯͬ͘΅ͬͱ
    https://blog.applibot.co.jp/
    2018/05/11/how-to-build-
    aws-ami-in-applibot/
    

    View Slide

24. $BTF
    ෛՙࢼݧߏங
    

    View Slide

25. º
    ࢖͏΋ͷ
    

    View Slide

26. ෛՙࢼݧͷ৔߹ͷ໾ׂ
    ෛ ՙ ࢼ ݧ Λ ͔ ͚Δ ਓ
    γ φ Ϧ Φ ࡞ ੒
    ࢼ ݧ ࣮ ߦ
    ݁ Ռ · ͱ Ί
    ෛ ՙ ࢼ ݧ ؀ ڥ Λ ࡞ Δ ਓ
    ؀ ڥ ࡞ ੒
    ߏ ੒ ม ߋ
    Ϩ Ϗϡ ʔ
    αʔόΤϯδχΞ γεΦϖ
    

    View Slide

27. Α͋͘Δޫܠ
    ৽ Πϕ ϯ τ ։ ൃ ͠ · ͠ ͨ ʂ
    ෛ ՙ ࢼ ݧ ΍ Γ ͨ ͍Ͱ ͢ ʂ
    ͍ ͭ · Ͱ ʹ ༻ ҙ Ͱ ͖ · ͢ ͔ ʂ ʁ
    ͏ ʔ ʔ ʔ ʔ Μ ɻ ࠓ ख ͕ ۭ ͔ ͳ ͍
    ͔ Β ʜ
    
    ೔ ͙ Β ͍Ͱ ʜ
    ͦ͘ ͓ ͦ ʂ
    ʢ ྃ ղ Ͱ ͢ ʂ
    ΑΖ ͠ ͘ ͓ ئ ͍ ͠ · ͢ ʂ ʣ
    

    View Slide

28. ӡ༻தͷαʔϏε͕
    ෛՙࢼݧΛ΍Δ࣌
    w ৽نΠϕϯτϦϦʔεલ
    w αʔόଆͷߏ੒มߋΛߦ͏࣌
    w $.౳େن໛13લ
    

    View Slide

29. ༻ҙ͢Δ΋ͷ ΠϯϑϥपΓ
    
    w ࠷ऴతʹɺຊ൪ಉ౳ͷ؀ڥ
    w ࢼݧͷλΠϛϯάͰ࡞੒
    w ෛՙΛ͔͚Δαʔό
    w +.FUFSΛ࢖༻ &$
    ɻωοτϫʔΫ͸ผɻΞΧ΢ϯτ෼͚͍ͯΔ
    w ֤छϞχλϦϯά
    w HSBGBOBQSPNFUIFVTLJCBOBFMBTUJDTFBSDI
    w ͜͜͸ࠓճؔ܎ͳ͠
    

    View Slide

30. ༻ҙ͢Δ΋ͷ ΠϯϑϥपΓ
    
    w ࠷ऴతʹɺຊ൪ಉ౳ͷ؀ڥ
    w ࠷ॳ͸ಉ͡ߏ੒Ͱখ͍͞ΠϯελϯεΫϥε
    w ຊ൪ಉ౳ͷن໛Ͱৗʹҡ࣋͢Δͱɺ

    අ༻͕ϠόΠͷͰࢼݧͷ౓ʹ࡞੒͢Δ
    w ࢼݧظؒதͰ΋ɺ࢖Θͳ͍ͱ͖͸খ͘͞
    

    View Slide

31. ༻ҙ͢Δ΋ͷ ΠϯϑϥपΓ
    
    w ෛՙΛ͔͚Δαʔό
    w ฐࣾͰ͸+.FUFSΛ࢖༻
    w NBTUFSTMBWFߏ੒

    TMBWF͸"VUP4DBMJOHͰεέʔϧ͢Δ
    w ͪ͜Β΋ࢼݧͷ౓ʹ࡞੒
    w ࢖Θͳ͍࣌͸࡟আ
    

    View Slide

32. before
    ؅ཧΠϯελϯε෼ͷBXTDMJΛΰϦΰϦ
    3%4&MBTUJ$BDIF&$FUDʜ
    ىಈॱ൪͸εΫϦϓτؒͰௐ੔
    ग़དྷ্͕Δൿ఻ͷλϨ
    TZTPQଆͰຖேຖ൩ͷ֦ுॖখରԠ
    

    View Slide

33. Կ͔໰୊͋Δʁ
    w Ұ౓ಈ͔ͤ͹ྑ͍͚Ͳ
    w ؅ཧ͕େม
    w ଞϓϩδΣΫτͰ͸·ͨΰϦΰϦͱ
    w ҉໧తͳߏ੒ॱ΋͋ͬͨΓͰ

    ֮͑ͯ΋Β͍ͮΒ͍
    

    View Slide

34. ͦΜͳ࣌ͦ͜
    

    View Slide

35. Ұ͔ΒUFSSBGPSNͰ࡞੒
    w ߏ੒ཁૉΛશͯUFSSBGPSNԽ
    w جຊతʹ͸࡞Γ௚͠
    w طʹ͋ΔϦιʔε͸

    UFSSBGPSNJNQPSU
    w Ͳ͏ͯ͠΋੔߹ੑ߹Θͳ͍ͱ͖͸

    UGTUBUFΛ௚઀मਖ਼
    

    View Slide

36. Կ͕ྑ͘ͳͬͨʁ
    w ىಈ؅ཧͷू໿͕Ͱ͖ͨ
    w UFSSBGPSNͷϑΝΠϧΛݟΕ͹ɺߏ੒ཁૉ͕Θ͔Δঢ়ଶ
    w ࡞੒΋εέʔϧ΋UFSSBGPSNBQQMZͰPL
    w ߏ੒ॱং΋ࢦఆ EFQFOET@PO
    
    w WBSTͷ੾Γସ͑Ͱɺॖখɺ֦ு΋༰қ
    

    View Slide

37. ॖখ༻
    ##########################
    ## Aurora InstanceClass ##
    ##########################
    rds_master_class = “db.r3.2xlarge"
    #################
    ## Autoscaling ##
    #################
    desired_capacity = “10”
    ֦ு༻
    ##########################
    ## Aurora InstanceClass ##
    ##########################
    rds_master_class = “db.t2.medium”
    #################
    ## Autoscaling ##
    #################
    desired_capacity = “0”
    ֦ுॖখ͸WBSTϑΝΠϧͷ

    ੾Γସ͑ͰରԠ
    

    View Slide

38. # ద༻͢ΔvarsΛηοτ
    vars_file=vars_file/${OPTARG}_value.tfvars
    # tfstateόοΫΞοϓ
    if [ ${option} == "apply" ]; then
    terraform state pull > backup/terraform.tfstate_backup_`date +"%Y-%m-%d-%H-%M-
    %S"`
    fi
    # terraform࣮ߦ (plan or apply)
    terraform ${tf_option} -var-file=${vars_file}
    ࣮ߦ༻εΫϦϓτ
    

    View Slide

39. w ઃఆ͕ڞ༗Ͱ͖͓ͯΓ
    w มߋ΋WBSTͷ੾Γସ͑ͰPL
    w ͱͳͬͨΒɺ͋ͱ͸୭͕࣮ߦͯ͠
    ΋Ұॹ
    

    View Slide

40. after
    ʊਓਓਓਓਓਓਓਓਓʊ
    ʼɹTMBDLҰൃʂʻ
    ʉ:?:?:?:?:?:?ʉ
    hoge
    hoge
    hoge
    

    View Slide

41. View Slide

42. after hoge
    hoge
    hoge
    w εέʔϧͷݖݶΛΞϓϦνʔϜ΁Ҡৡ
    w Ͳ͏͍͏؀ڥͰࢼݧ͍ͯ͠Δ͔ͷ

    ֬ೝ΋༰қ
    w ϘτϧωοΫՕॴͷมߋ΋

    WBSTͷ஋Λ͍͡Δ͚ͩͰมߋͰ͖Δ
    εϐʔυײͷ͋ΔରԠΛ

    ߦ͏͜ͱ͕Ͱ͖Δ
    

    View Slide

43. $BTF
    ৽ن؀ڥߏங
    

    View Slide

44. º
    ࣄྫ
    

    View Slide

45. ৽نαʔϏεͷ؀ڥߏஙͷྲྀΕ
    ͦ Ζ ͦ Ζ α ʔ ό ͱ ૄ ௨ ͯ͠ ֬ ೝ ͠ ͨ ͍
    ͍ ͭ · Ͱ ʹ ༻ ҙ Ͱ ͖ · ͢ ͔ ʂ ʁ
    Ξ Χ ΢ ϯ τ ͔ Β ͷ ༻ ҙ ͩ ͔ Β ɺ
    ͋ Ε ͍ Εͯ ͜ Ε ͍ Εͯ ͋ ͹ ͹ ͹ ʜ
    ೔ ͙ Β ͍Ͱ ʜ
    ͦ͘ ͓ ͦ ʂ
    ʢ ྃ ղ Ͱ ͢ ʂ
    ΑΖ ͠ ͘ ͓ ئ ͍ ͠ · ͢ ʂ ʣ
    

    View Slide

46. before
    SPPUΞΧ΢ϯτͷ෧ҹ
    $POTPMJEBUFE#JMMJOHઃఆ
    *".6TFSͷ࡞੒ɺ(SPVQઃఆɺTXJUDIઃఆ
    $MPVE5SBJMMPH༻4όέοτͷઃఆ
    ωοτϫʔΫઃఆɺ؂ࢹ༻ϙʔτ։͚
    FUD
    

    View Slide

47. ͦΜͳઃఆ΋
    

    View Slide

48. Կ͕ྑ͘ͳͬͨʁ
    w ΞΧ΢ϯτࣗମͷઃఆ؅ཧ
    w ແҙࣝʹαʔό؀ڥ ΞϓϦέʔγϣϯؔ࿈
    ͷ
    ؅ཧͱͯ͠࢖༻͍͕ͯͨ͠ɺ

    "84ͷ΄΅શͯͷαʔϏε໢ཏ͍ͯ͠ΔͷͰɺ

    $MPVE5SBJM͔Β*".·Ͱɺ

    ॳظઃఆΛશͯςϯϓϨԽͰ͖ͨɻ
    

    View Slide

49. BQQMJCPUͷUFSSBGPSN
    
    ϑΥϧμߏ੒
    • 00_base
    • ΞΧ΢ϯτ࡞੒࣌ʹ࡞੒͢ΔαʔϏε܈
    • CloudTrail / Route53 / keypair / S3(awsؔ࿈ͷϩά༻) / IAMUser
    • 01_common / 02_dev / 03_stg / 04_prd
    • ֤؀ڥ໊ɻιʔτ༻ʹ൪߸ৼ͍ͬͯΔ
    • workspace͸ఘΊ·ͨ͠
    • 99_modules
    • ֤؀ڥ͕ڞ௨Ͱ࢖༻͢Δઃఆ
    • ྫ: VPC Network
    

    View Slide

50. (JUMBCͰ
    CBTFSFQPTJUPSZ؅ཧ
    

    View Slide

51. after
    SPPUΞΧ΢ϯτͷ෧ҹ
    $POTPMJEBUFE#JMMJOHઃఆ
    UFSSBGPSN༻*".6TFS࡞੒
    UFSSBGPSN࣮ߦ
    ͰPL
    

    View Slide

52. hoge
    ઃఆมߋ΋.3Ͱ
    ؅ཧͰ͖Δ
    

    View Slide

53. ·ͱΊ
    

    View Slide

54. ·ͱΊ
    w 1BDLFSUFSSBGPSNͰ؅ཧ͢Δ͜ͱͰ

    ؅ཧ͠΍͘͢ɺڞ༗ՄೳͳΠϯϑϥ΁
    w ߏங෦෼͕ૄ݁߹ʹͳΔ͜ͱͰ

    JOQVUPVUQVUͷ૊Έ߹Θ͕ͤ༰қ
    w ఆܕ࡞ۀ͸ςϯϓϨԽେࣄ
    

    View Slide

55. ͝੩ௌ
    ͋Γ͕ͱ͏͍͟͝·ͨ͠
    

    View Slide