僕がAWSでやったこと

まとめました

Transcript

1. ๻͕AWSͰ΍ͬͨ͜ͱ — Author: Junya Nakazato
2. ࣗݾ঺հ גࣜձࣾγʔΤʔΞυόϯε ஥ཬ ३໼ ۀ຿಺༰ • ΞϝʔόαʔϏεͷ؂ࢹγεςϜߏங • ؂ࢹର৅ɾΦϖϨʔλͷ෼ੳϨϙʔτ • ۀ຿γεςϜͷσʔληϯλʔҠઃ Ὅ NEW
3. ໨࣍ • ࠓظ΍ͬͨ͜ͱ • Amazon ECRಋೖ • DatadogͰDockerͷϝτϦΫε؂ࢹ • TrailDashͰCloudTrailΛՄࢹԽ • SentryͰAWS্ͷΤϥʔϩάू໿ɾՄࢹԽ • ॴײɾ·ͱΊ
4. ࠓظ΍ͬͨ͜ͱ • AWS ECSͰJenkinsΛઃஔ • Jenkins, MoebiusͷDockerΠϝʔδΛϏϧυˍσϓϩΠ • Jenkins, LodgeͷόοΫΞοϓΛS3΁ • ۀ຿όον࣮ߦ • Amazon ECRಋೖʢϦϦʔε೔15/12/21ʹଈ೔ରԠ!ʣ • Jenkins, Lodge, Moebius, SentryΛશ෦ECS & ECRͰ؅ཧ
5. ࠓظ΍ͬͨ͜ͱ • docker-compose v2ରԠ • dockerͰಈ͍ͯΔRailsόονߴ଎Խ(ىಈ࣌ؒɿ60ඵڧ!̑ඵʣ • SentryͰAWS্ͷΤϥʔϩάू໿ɾՄࢹԽ • chef, serverspec࠷֮ۙ͑ͨΑ"
6. ࠓճ͸͜ΕΒΛϐοΫΞοϓ • Amazon ECRಋೖ • DatadogͰDockerͷϝτϦΫε؂ࢹ • TrailDashͰCloudTrailΛՄࢹԽ • SentryͰAWS্ͷΤϥʔϩάू໿ɾՄࢹԽ
7. Amazon EC2 Container Registry • όʔδχΞʹ ECR͕ϦϦʔε͞Εͨʂ • AWSʹdockerίϯςφ͕ஔ͚ΔΑ͏ʹͳͬͨʂ • Docker RegistryΠϯελϯεফͨ͠! • EC2Πϯελϯε୅͕ු͍ͨ"
8. How To ECR aws-cliηοτΞοϓͨ͠Β࢖͑Δ͔ΒΈΜͳ࢖͓͏! Jenkins-jobʹΑΔϏϧυྫ cd /var/jenkins_home/repos/moebius-app $(aws ecr get-login --region us-east-1) docker build -t moebius-web . docker build -t moebius-nginx ./containers/nginx docker tag -f moebius-web $DOCKER_REPOS/moebius-web:latest docker tag -f moebius-nginx $DOCKER_REPOS/moebius-nginx:latest docker push $DOCKER_REPOS/moebius-nginx:latest docker push $DOCKER_REPOS/moebius-web:latest
9. ͍·ͷͱ͜Ζ҆ఆ!
10. DatadogͰDockerΛݟΔ! Datadogͱ͸… • ϝτϦΫε؂ࢹγεςϜ • newrelic͡Όͳ͍΍ͭ • Docker؂ࢹʹؔͯ͠͸ɺnewrelicΑΓ༏ल • docker-runͷϩά֬ೝ • ݈߁౓νΣοΫ • ෛՙܭଌ
11. Datadog dashboard
12. Datadog hostmap
13. CloudTrailΛՄࢹԽ • CloudTrail͸AWSͷૢ࡞ϩά͕ΈΕΔ΋ͷͰ͢ • ΠϯελϯεΛؒҧͬͯফͨ࣌͠ɺࣄނͬͨΒ͜ΕͰ௥͑·͢ • ςΩετͩͱΘ͔Γʹ͍͘ͷͰɺ kibanaͰCloudTrailΛՄࢹԽͯ͠Έ·ͨ͠
14. TrailDash CloudTrailͰಘΒΕΔ৘ใΛɺkibanaͰՄࢹԽ͢Δπʔϧ CloudFormation+ECSͰߏங σʔλͷྲྀΕ • AWS-Log -> CloudTrail -> S3 -> SQS -> ElasticSearch -> Kibana ! http:/ /internal-traildash-ecselast-91hi7zabihvp-14621410.ap- northeast-1.elb.amazonaws.com/
15. TrailDash nakazato_junya͕3/23 16:30ʹΠϯελϯεࢭΊͨͷ͕֬ೝͰ͖Δ
16. SentryͰΤϥʔϩάू໿ • Sentryͱ͸ ϑϩϯτΤϯυɺόοΫΤϯυʹΫϥΠΞϯτΛ࢓ࠐΜͰ ΤϥʔϩάΛू໿͢ΔγεςϜͰ͢ • ࢥ͍ͭ͘ݴޠ͸͍͍ͩͨରԠͯ͠·͢ http:/ /internal-sentry-ecselasticl-5pueeg04lozs-796996974.ap- northeast-1.elb.amazonaws.com/
17. ରԠݴޠ
18. Sentry
19. ͳΜ͔ͰͯΔ…
20. ॴײɾ·ͱΊ • Amazon ECS & ECR Λ͕ͬͭΓར༻͠ɺ ͍Ζ͍Ζͳ৘ใΛAWS্ͰՄࢹԽͰ͖ΔΑ͏ʹରԠͨ͠ ՄࢹԽର৅ • Docker Log: Datadog • App Log: Sentry • CloudTrail: TrailDash
21. ۤ࿑ͨ͠఺ • ͢΂ͯ CloudFormation, ECSରԠͤͨ͜͞ͱ • EC2ΛѪ৘ࠐΊͯख࡞Γ͠ͳ͍͜ͱ • ίϯςφ͔ΒͷϦιʔεΛ֎ग़ͨ͜͠͠ͱ • ಉ྅͕docker on windowsͷ᠘Ͱۤ͠ΜͰ͍ΔͷΛݟकΒͳ͍ͱ ͍͚ͳ͍!