AtlantisによるTerraformコードの継続的ApplyとTerraformによるAtlantis環境の構築

Transcript

1. "UMBOUJTʹΑΔ5FSSBGPSNίʔυͷ
   ܧଓత"QQMZͱ
   5FSSBGPSNʹΑΔ"UMBOUJT؀ڥͷߏங HashiTalks: Japan ٶલ
   ׮
2. ٶલ
   ׮
   Yutaka Miyamae w ΞεΫϧגࣜձࣾ
   ςΫϊϩδʔຊ෦
   w ΞϓϦέʔγϣϯΤϯδχΞ
   w ɹɹ!ZVUBLBN
3. ΞδΣϯμ w 5FSSBGPSNͱ͸
   w 5FSSBGPSNʹ͓͚Δ$*$%
   w "QQMZࣗಈ࣮ߦ؀ڥ
   w "UMBOUJT
   w "UMBOUJT؀ڥߏங
   w 5JQT
   w ࠓޙͷల๬
4. 
   
   
   
   Terraformͱ͸ w ΠϯϑϥΛίʔυԽ͠ɺΫϥ΢υΠϯϑϥαʔϏεΛߏங͓Αͼ؅ ཧ͢ΔͨΊͷπʔϧ
5. ઃܭ ίʔυԽ Apply ൓ө
6. ՝୊
7. ઃܭ ίʔυԽ Apply ൓ө 5FSSBGPSNίʔυͷ඼࣭ͷ୲อ
8. ઃܭ ίʔυԽ Apply ൓ө ܧଓతʹΠϯϑϥΛσϦόϦʔ͍ͨ͠
9. $*
   
   $%
   ͷߟ͑ΛऔΓೖΕΔ
10. CI ܧଓతΠϯςΟάϨʔγϣϯ
    
    ࣗಈςετ
11. > terraform fmt w ७ਖ਼ͷ5FSSBGPSNݴޠελΠϧϑΥʔϚολ
12. > tflint w IUUQTHJUIVCDPNUFSSBGPSNMJOUFSTUqJOU
    w ϓϩόΠμݻ༗ͷهड़ϛεΛνΣοΫ
    w JOTUBODF@UZQF
    
    UYMBSHF
    
    ଘࡏ͠ͳ͍ΠϯελϯελΠϓ
    w Ϧιʔε໊ͷ໋໊نଇνΣοΫ εωʔΫέʔεͷΈڐՄ
    w ίϝϯτߏจͷ੍ݶ
    AAͷΈڐՄ
13. > Checkov w IUUQTHJUIVCDPNCSJEHFDSFXJPDIFDLPW
    w 5FSSBGPSNͷ੩తηΩϡϦςΟνΣοΫ
    w -#͸)5514ϓϩτίϧΛ࢖༻͍ͯ͠Δ͔
    w 44) 
    ͰΠϯό΢ϯυ͕ڐՄ͞Ε͍ͯͳ͍͔
    w ͦͷଞ
    
    ͷϧʔϧ͕͋Δ
14. $*
    ܧଓతΠϯςΟάϨʔγϣϯ
    
    ࣗಈςετ w UFSSBGPSN
    GNU
    ϑΥʔϚολ
    w UqJOU
    -JOUπʔϧ
    w DIFDLPW
    ੩తηΩϡϦςΟղੳ $*πʔϧͰ
    ࣗಈςετ ඼࣭ͷ୲อ
15. CD ܧଓతσϦόϦʔ
    
    ࣗಈ"QQMZ
16. ઃܭ ίʔυԽ Apply ൓ө
17. TERMINAL 
    UFSSBGPSN
    BQQMZ ͲͷΑ͏ͳ؀ڥͰ ࣮ߦ͍ͯ͠·͔͢
18. ΤϯδχΞ
    ਓ ϩʔΧϧϚγϯ
    Ͱ
    खಈ"QQMZ
19. ΤϯδχΞ
    ਓ ϩʔΧϧϚγϯ
    Ͱ
    खಈ"QQMZ ΤϯδχΞ
    ਓ
20. ϩʔΧϧϚγϯͰखಈ"QQMZ͢ΔσϝϦοτ w ඇੜ࢈తͳ࡞ۀ
    w ίϛϡχέʔγϣϯίετ
    
    w ώϡʔϚϯΤϥʔʹΑΔ࣮ߦϛε
    w "QQMZ͢ΔͷΛ๨ΕΔɺ൓өͨͭ͠΋Γ
21. ϩʔΧϧϚγϯͰखಈ"QQMZ͢ΔσϝϦοτ w ඇੜ࢈తͳ࡞ۀ
    w ίϛϡχέʔγϣϯίετ
    
    w ώϡʔϚϯΤϥʔʹΑΔ࣮ߦϛε
    w "QQMZ͢ΔͷΛ๨ΕΔɺ൓өͨͭ͠΋Γ σϦόϦʔ͕
    ஗͘ͳΔ
22. ઃܭ ίʔυԽ Apply ൓ө ࣗಈԽ
23. ApplyΛࣗಈԽ͢Δπʔϧ
24. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU )JHI
25. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU )JHI
26. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU )JHI
27. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU )JHI νʔϜͷཁ݅ʹ͋ͬͨ΋ͷΛબ୒͢Δ
28. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU )JHI ࣗ༝౓ͱ࢖͍΍͢͞ͷόϥϯε͔Β"UMBOUJTΛ࠾༻
29. Atlantis
31. 5FSSBGPSN
    ίʔυΛهड़
    &$Λߏங
32. 13Λग़͢
33. QMBO͕ࣗಈత
    ʹ࣮ߦ͞ΕΔ
34. QMBOͷ
    ৄࡉΛ֬ೝ
35. ͳΒ
    BUMBOUJT
    BQQMZ
    ͱίϝϯτ͢Δ
36. "UMBOUJT؀ڥ಺Ͱ
    BQQMZ͕࣮ߦ͞Ε
    ݁Ռ͕ग़ྗ͞ΕΔ
37. &$͕
    ߏங͞Ε͍ͯΔ
38. ϩʔΧϧϚγϯͰखಈ"QQMZ͢ΔσϝϦοτ w ඇੜ࢈తͳ࡞ۀ
    w ίϛϡχέʔγϣϯίετ
    
    w ώϡʔϚϯΤϥʔʹΑΔ࣮ߦϛε
    w "QQMZ͢ΔͷΛ๨ΕΔɺ൓өͨͭ͠΋Γ σϦόϦʔ͕
    ஗͘ͳΔ "UMBOUJTͰղফ
39. Atlantis ͷ؀ڥߏங
40. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU )JHI ηϧϑϗετͳͷͰࣗ෼Ͱ؀ڥΛߏங͢Δඞཁ͕͋Δ
41. %/444-ωοτϫʔΫ-#/"5
    ͳͲ͕ඞཁ
42. "UMBOUJT؀ڥΛ
    θϩ͔Β
    ߏங͢Δͷ͸ਏ͍
43. ࣮͸
    5FSSBGPSNϞδϡʔϧͰ
    ؆୯ʹߏஙͰ͖Δ
44. Ϟδϡʔϧ
    UFSSBGPSNBXTBUMBOUJT https://registry.terraform.io/modules/terraform-aws-modules/atlantis/aws/
45. ͍͔ͭ͘ύϥϝʔλ Λࢦఆ͢Δ͚ͩͰ
46. 5FSSBGPSNϞδϡʔϧͰ"UMBOUJT؀ڥ͕ߏஙͰ͖Δ
47. 
    
    
    
    
    5FSSBGPSN
    $MPVE "UMBOUJT (JU)VC
    "DUJPOT આ໌ 5FSSBGPSNઐ༻ͷαʔϏε
    ࣮ߦ4UBUFϑΝΠϧ؅ཧ 5FSSBGPSN࣮ߦ༻ͷ044 ൚༻$*$%
    πʔϧ Πϯϑϥ 4BB4 ηϧϑϗετ 4BB4 ࢖͍΍͢͞ )JHI .FEJVN -PX ࣗ༝౓ -PX )JHI .FEJVN ಋೖͷ؆ศ͞ )JHI -PXFTU
    
    .FEJVN )JHI গ͠ಋೖָ͕ʹͳΔ
48. Tips
49. "UMBOUJT
    "UMBOUJT
    %PDLFSΠϝʔδͷΧελϚΠζ 
    BXT
    DMJίϚϯυΛ࣮ߦͰ͖ΔΑ͏ʹ͢Δ
50. Ϟδϡʔϧ
    ΧελϚΠζͨ͠"UMBOUJT؀ڥΛߏங͍ͨ͠ BDN@DFSUJpDBUF@EPNBJO@OBNF
    BMC@BVUIFOUJDBUF@DPHOJUP
    BMC@BVUIFOUJDBUF@PJED
    BMC@JOHSFTT@DJES@CMPDLT
    BMC@MPH@CVDLFU@OBNF
    BMC@MPH@MPDBUJPO@QSFpY
    BMC@MPHHJOH@FOBCMFE
    BMMPX@HJUIVC@XFCIPPLT
    BMMPX@SFQP@DPOpH
    BMMPX@VOBVUIFOUJDBUFE@BDDFTT
    BMMPX@VOBVUIFOUJDBUFE@BDDFTT@QSJPSJUZ
    BUMBOUJT@BMMPXFE@SFQP@OBNFT
    BUMBOUJT@CJUCVDLFU@CBTF@VSM
    BUMBOUJT@CJUCVDLFU@VTFS
    BUMBOUJT@CJUCVDLFU@VTFS@UPLFO
    BUMBOUJT@CJUCVDLFU@VTFS@UPLFO@TTN@QB SBNFUFS@OBNF
    BUMBOUJT@GREO
    BUMBOUJT@HJUIVC@VTFS
    BUMBOUJT@HJUIVC@VTFS@UPLFO
    BUMBOUJT@HJUIVC@VTFS@UPLFO@TTN@QBSBN FUFS@OBNF BUMBOUJT@HJUMBC@IPTUOBNF
    BUMBOUJT@HJUMBC@VTFS
    BUMBOUJT@HJUMBC@VTFS@UPLFO
    BUMBOUJT@HJUMBC@VTFS@UPLFO@TTN@QBSBN FUFS@OBNF
    BUMBOUJT@JNBHF
    BUMBOUJT@MPH@MFWFM
    BUMBOUJT@QPSU
    BUMBOUJT@SFQP@XIJUFMJTU
    BUMBOUJT@WFSTJPO
    B[T
    DFSUJpDBUF@BSO
    DJES
    DMPVEXBUDI@MPH@SFUFOUJPO@JO@EBZT
    DPOUBJOFS@NFNPSZ@SFTFSWBUJPO
    DSFBUF@SPVUF@SFDPSE
    DVTUPN@DPOUBJOFS@EFpOJUJPOT
    DVTUPN@FOWJSPONFOU@TFDSFUT
    DVTUPN@FOWJSPONFOU@WBSJBCMFT
    FDT@TFSWJDF@BTTJHO@QVCMJD@JQ
    FDT@TFSWJDF@EFQMPZNFOU@NBYJNVN@QF SDFOU FDT@TFSWJDF@BTTJHO@QVCMJD@JQ
    FDT@TFSWJDF@EFQMPZNFOU@NBYJNVN@QF SDFOU
    FDT@TFSWJDF@EFQMPZNFOU@NJOJNVN@IFB MUIZ@QFSDFOU
    FDT@TFSWJDF@EFTJSFE@DPVOU
    FDT@UBTL@DQV
    FDT@UBTL@NFNPSZ
    HJUIVC@XFCIPPLT@DJES@CMPDLT
    JOUFSOBM
    OBNF
    QPMJDJFT@BSO
    QSJWBUF@TVCOFU@JET
    QSJWBUF@TVCOFUT
    QVCMJD@TVCOFU@JET
    QVCMJD@TVCOFUT
    SPVUF@SFDPSE@OBNF
    SPVUF@[POF@OBNF
    TFDVSJUZ@HSPVQ@JET
    TTN@LNT@LFZ@BSO
    UBHT
    WQD@JE
    XFCIPPL@TTN@QBSBNFUFS@OBNF
    XIJUFMJTU@VOBVUIFOUJDBUFE@DJES@CMPDLT 
    ࢦఆͰ͖Δύϥϝʔλ͕ଟ͍ͨΊΧελϚΠζ͸༰қ
51. ·ͱΊ  5FSSBGPSNಋೖͷ࣍ʹߟ͑Δ͜ͱ͸
    
    A$*$%A
     "QQMZࣗಈԽπʔϧ͸ཁ݅ʹ͋ͬͨ΋ͷΛબ୒͢Δ
     A"UMBOUJTAͷ঺հ
     "UMBOUJT؀ڥͷߏங͸A5FSSBGPSNϞδϡʔϧAʹ೚ͤΑ͏
52. ࠓޙͷల๬  "QQMZ੒ޭࣦഊ࣌ͷࣗಈ4MBDL௨஌
     5FSSBUFTUΛ࢖ͬͨΠϯϑϥͷࣗಈςετ
     "QQMZޙͷࣗಈෛՙࢼݧ
53. "UMBOUJTʹΑΔ5FSSBGPSNίʔυͷ
    ܧଓత"QQMZͱ
    5FSSBGPSNʹΑΔ"UMBOUJT؀ڥͷߏங HashiTalks: Japan ٶલ
    ׮