TERRAFORMͰ͸͡ΊΔ INFRASTRACTURE AS CODE yusukeyasuo@redish

ର৅ • ඇΠϯϑϥΤϯδχΞͰɺΠϯϑϥͷߏஙɾӡ༻΋͠ͳ͖Ό͍ ͚ͳ͘ͳͬͨΤϯδχΞ • ·ͩInfrastructure as CodeΛ͍ͯ͠ͳ͍ΠϯϑϥΤϯδχΞ • தʙ্ڃऀ޲͚Ͱ͸ͳ͍Ͱ͢m(__)m

AGENDA • ࣗݾ঺հ • Infrastructure as Codeͱ͸ • Terraformͱ͸ • ࣮ྫ • ·ͱΊ

ࣗݾ঺հ • Yusuke Yasuo • ϦʔυΤϯδχΞ@redishגࣜձࣾ • NTT→ίϩϓϥ→ελʔτΞοϓΛ਺ࣾ • ελʔτΞοϓͰΤϯδχΞ1ʙ2ਓͷ࣌ ظ͕͋ΓɺAWSΛ৮ΔΑ͏ʹͳͬͨ

INFRASTRUCTURE AS CODEͱ͸ • ίʔυʹΑΔΠϯϑϥߏ੒؅ཧ

ͳͥίʔυ؅ཧ͕ඞཁ͔ʁ • खಈͰ؅ཧ͢Δͱେม͔ͩΒ

๻͕ܦݧͨ͠खಈ؅ཧͷฐ֐ • υΩϡϝϯτɺखॱॻ͕ͳ͍ͷͰͲ͏΍ͬͯߏங͔ͨ͠୲౰ ऀʹฉ͔ͳ͍ͱ෼͔Βͳ͍ • ୲౰ऀʹฉ͍ͯ΋ߏங࣌ͷهԱ͕ͳͯ͘෼͔Βͳ͍ • ো֐͕ൃੜͨ͠ࡍʹ෮چͰ͖ͳ͍ • ప໷Ͱθϩ͔Βߏங͢Δ • ୀ৬ޙ΋ো֐͕ൃੜ͢Δͱݺͼग़͞ΕΔ

ίʔυԽ͓͚ͯ͠͹ • Πϯϑϥͷઃఆ͕୭Ͱ΋෼͔ΔʢϒϥοΫϘοΫεԽ͠ ͳ͍ʣ • ো֐͕ൃੜͯ͠΋ίϚϯυҰͭͰ͙͢ʹ෮چ͕Մೳ • ࡞ۀϛε΋ى͜Βͳ͍ • ΠϯϑϥΤϯδχΞ͕͍ͳͯ͘΋؅ཧͰ͖Δ

ओͳπʔϧ

TERRAFORMͱ͸ • ΠϯϑϥετϥΫνϟఆٛπʔϧ • VagrantͳͲ։ൃ͍ͯ͠ΔHashiCorp͕ࣾ։ൃݩ • Πϯϑϥͷߏ੒ΛએݴతʹఆٛͰ͖Δ
 ※खଓ͖తʹॻ͔ͳͯ͘ྑ͍

Πϯετʔϧ • ϏϧυࡁΈόΠφϦΛμ΢ϯϩʔυͯ͠ύεΛ௨͚ͩ͢

ࣄલ४උ • IAMϢʔβʔͷ࡞੒ • AWS CLIΛར༻͢ΔͨΊͷIAMϢʔβʔΛ࡞੒͠ɺΞΫηεΩʔΛऔಘ͢Δ • AWS CLIͷηοτΞοϓ • $ aws configure Ͱೝূ৘ใΛηοτ͢Δ
 ※ ~/.aws/credentials ʹೝূ৘ใ͕อଘ͞Ε͍ͯΕ͹OK • terraformͷॳظԽ • $ terraform init

RDSΛ࡞੒͢Δྫ

ఆٛϑΝΠϧͷ࡞੒ provider "aws" { region = "ap-northeast-1" } resource "aws_db_instance" "default" { allocated_storage = 10 storage_type = "gp2" engine = "mysql" engine_version = "5.7" instance_class = "db.t2.micro" name = "mydb" username = "foo" password = "foobarbaz" parameter_group_name = "default.mysql5.7" } rds.tf

಺༰ͷνΣοΫ • $ terraform plan

RDSͷ࡞੒ • $ terraform apply

࡞੒ͨ͠ΦϒδΣΫτͷ֬ೝ • $ terraform show

஫ҙ͢Δ͜ͱ • TerraformͰ࡞੒ͨ͠ΦϒδΣΫτΛखಈͰมߋ͠ͳ͍ • ෳ਺ਓͰ࡞ۀ͢Δ৔߹͸tfstateͷ؅ཧʹؾΛ͚ͭΑ͏

·ͱΊ • ϓϩμΫγϣϯ༻ͷΠϯϑϥ͸ඞͣίʔυԽ͠·͠ΐ͏ • ίʔυԽ͠ͳ͍΋ͷ͸ϦϦʔε͠ͳ͍ • redishͰҰॹʹInfrastructure as Code͠·͠ΐ͏w