塩漬けダメ、ゼッタイ! サポート切れのIaCツールをTerraformに移行した話

Slide 1

Slide 1 text

Ԙ௮͚μϝɺθολΠʂ αϙʔτ੾Εͷ*B$πʔϧΛ 5FSSBGPSNʹҠߦͨ͠࿩   4JN4UB !TIJNBHBKJ   +"846(৘γεࢧ෦ ˡϗϫΠτγϚϦεͷΞϧλ

Slide 2

Slide 2 text

ࣗݾ঺հ "84ೝఆ ʲॕʳף ɹ࡛ۄɹʢʙେֶͷ్த·Ͱʣ ˠࡳຈɹʢʙେֶɾ೥ʣ ˠਆಸ઒ʢʙେֶӃʙब৬ͯ͠೥൒͘Β͍ʣ ˠࡳຈɹʢʙ೥൒͘Β͍ɺݱࡏʣ ޷͖ͳ"84αʔϏεɿ4UFQ'VODUJPOT 4JN4UBʢΦϯϥΠϯͷ͕ͨ͢ʣ ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾ ϓϥοτϑΥʔϜΤϯδχΞϦϯά෦ !TIJNBHBKJ 5XJUUFS ΧάΧά %&" 4FSWFSMFTT

Slide 3

Slide 3 text

ϗϫΠτγϚϦεͱ ฻Β͍ͯ͠·͢🐿 ˢ౳਎େνϧλϦε 5XJUUFSΞΧ΢ϯτ΋͋ΔΑ !BMUB@XIJUFDIJQ ઌिʢʣࡀʹͳΓ·ͨ͠🎂

Slide 4

Slide 4 text

աڈͷొஃࢿྉΞοϓͯ͠·͢ʢࠓ೔ͷࢿྉ΋ʂʣ IUUQTTQFBLFSEFDLDPNTIJNBHBKJ

Slide 5

Slide 5 text

ݸਓϒϩάΛӡ༻͍ͯ͠·͢͠·͕͡ ͠Ήͦ͘ "84ΞοϓσʔτΛ ຖिߋ৽ʂ   ͦͷଞ Ϋϥ΢υΨδΣοτ γϚϦεͷ࿩ͳͲ

Slide 6

Slide 6 text

"HFOEB • ͸͡Ίʹ • ೖࣾͯ͠ਅͬઌʹ΍ͬͨ͜ͱ • ݟ෇͚ͯ͠·ͬͨ΋ͷ • Ṗͷ%SPOFΛܸ௢ͤΑ • 5FSSBGPSNҠߦฤʢϋϚΓϙΠϯτूʣ • ϦιʔεఆٛͷϋϚΓϙΠϯτ • JNQPSUͷϋϚΓϙΠϯτ • (JU)VC"DUJPOTͷϋϚΓϙΠϯτ • ·ͱΊͱڭ܇

Slide 7

Slide 7 text

͸͡Ίʹ

Slide 8

Slide 8 text

ઌ݄ʢ೥݄ʣʹ,"(΁ೖࣾ͠·ͨ͠ ͪΐ͏ͲΏΔΩϟϥ΋σϏϡʔ͠·ͨ͠ ୭΋࢖Θͳ͍ϋογϡλάय़͔Β,"(

Slide 9

Slide 9 text

ೖࣾͨ͠͹͔Γͷ৘γε1'&͸ ·ͣԿΛ͢Δ͔ʁ 1'&ɿϓϥοτϑΥʔϜΤϯδχΞ

Slide 10

Slide 10 text

ࣾ಺ڞ௨ͷݕূ༻"84ΞΧ΢ϯτΛோΊ·͢ ˞ը૾͸ΠϝʔδʢݸਓΞΧ΢ϯτͷ΋ͷʣͰ͢

Slide 11

Slide 11 text

·ͣ"84ΞΧ΢ϯτΛோΊͯ΍Δ͜ͱʢൈਮʣ • "ENJOJTUSBUPS"DDFTTͷΞΫηεΩʔ͕ແ͍͔   • ίϯιʔϧ༻ͷ*".ϢʔβʔʹΞΫηεΩʔ΋෇༩͞Ε͍ͯͳ͍͔   • ௕ظؒ࢖༻͞Ε͍ͯͳ͍*".Ϣʔβʔ͕͍ͳ͍͔   • ڧ͍ݖݶΛ࣋ͭ*".Ϣʔβʔʹ.'"͸ઃఆ͞Ε͍ͯΔ͔   • ༨ܭͳྉۚΛൃੜ͍ͤͯ͞ΔϦιʔε͸ແ͍͔  

Slide 12

Slide 12 text

·ͣ"84ΞΧ΢ϯτΛோΊͯ΍Δ͜ͱʢൈਮʣ • "ENJOJTUSBUPS"DDFTTͷΞΫηεΩʔ͕ແ͍͔   → • ίϯιʔϧ༻ͷ*".ϢʔβʔʹΞΫηεΩʔ΋෇༩͞Ε͍ͯͳ͍͔   → 付 • ௕ظؒ࢖༻͞Ε͍ͯͳ͍*".Ϣʔβʔ͕͍ͳ͍͔   → • ڧ͍ݖݶΛ࣋ͭ*".Ϣʔβʔʹ.'"͸ઃఆ͞Ε͍ͯΔ͔   → 設定 • ༨ܭͳྉۚΛൃੜ͍ͤͯ͞ΔϦιʔε͸ແ͍͔   → （今⽇話） ˞·ͩձࣾ΋෦ॺ΋ग़དྷͯؒ΋ͳ͍͜ͱ΋͋Γɺࠓ·ͰϧʔϧԽ͞Ε͍ͯͳ͔ͬͨ෦෼Λ੔උ͍ͯ͠Δͱ͜ΖͰ͢

Slide 13

Slide 13 text

݄ͷ3%4੥ٻը໘

Slide 14

Slide 14 text

݄ͷ3%4੥ٻը໘

Slide 15

Slide 15 text

…

Slide 16

Slide 16 text

݄ͷ3%4੥ٻը໘ ʂʁ

Slide 17

Slide 17 text

݄ͷ3%4੥ٻը໘ ୭΋ؾ෇͔ͳ͍͏ͪʹ3%4GPS.Z42-͕ Ԇ௕αϙʔτʹಥೖ͍ͯͨͤ͠Ͱ ίϯϐϡʔςΟϯάྉ͕ۚഒҎ্ʹͳͬͯ·ͨ͠🤔

Slide 18

Slide 18 text

ࢀߟɿ3%4ʢGPS.Z42-ʣͷԆ௕αϙʔτ IUUQTBXTBNB[PODPNKQSETNZTRMQSJDJOH IUUQTRJJUBDPNNJOPSVOJUFNTBDFCFCGF ʢ3%4͚ͩ͡Όͳ͘&,4΋͔Β͋ΔΑʣ

Slide 19

Slide 19 text

݄υϧ௒͑ͷίετΛੜΈग़͢൜ਓ ɾɾɾԿऀʁ

Slide 20

Slide 20 text

%SPOFʢͱ1JDVMFUʣͷ࣮ଶ • 1JDVMFUͱ͍͏ηΩϡϦςΟάϧʔϓΛ؅ཧ͢ΔͬΆ͍πʔϧ͕͋Δ   ˠ3VCZ%4-ͰηΩϡϦςΟάϧʔϓΛهड़͍ͯ͠Δ   ɹάάͬͯ΋೥Ҏ্લͷ৘ใ͔͠ग़ͯ͜ͳ͍ʜ • (JU)VC&OUFSQSJTFΛϗετ͢Δ&$ͷηΩϡϦςΟάϧʔϓΛ   ϦϙδτϦͰ؅ཧ͠ɺར༻ऀʹΑΔ*1௥ՃมߋΛϓϧϦΫΤετͰड෇ • %SPOF͸ʢগͳ͘ͱ΋͜͜Ͱ͸ʣϦϙδτϦͷઃఆ಺༰Λ΋ͱʹ   "84্ͷηΩϡϦςΟάϧʔϓΛߋ৽͢Δ$*$%πʔϧʢΒ͍͠ʣ • &$ʢ"VUP4DBMJOHʣͱ3%4ʢ͖ͬ͞ͷ΍ͭʣͰಈ͍͍ͯΔ   ˠ&$͸ͱ΋͔͘3%4ͷྉ͕ۚΩπ͍ • ΊͬͪΌ$SFBUF4FDVSJUZ(SPVQୟ͘ • 現在中⾝分⼈ ˞·ͩձࣾ΋෦ॺ΋ग़དྷͯؒ΋ͳ͍͜ͱ΋͋Γɺࠓ·ͰϧʔϧԽ͞Ε͍ͯͳ͔ͬͨ෦෼Λ੔උ͍ͯ͠Δͱ͜ΖͰ͢

Slide 21

Slide 21 text

%SPOFʢͱ1JDVMFUʣͷ࣮ଶ Network Load   Balancer NAT gateway GitHub Enterprise Bastion Drone drone-db User AWS Cloud Push Merge ηΩϡϦςΟάϧʔϓ ͍͍ͩͨ͜Μͳײ͡ʢ$PEF#VJME͕࢓ࠐΜͰ͋ΔΒ͍͚͠ͲṖʣ

Slide 22

Slide 22 text

ͱ͍͏͜ͱͰʂ

Slide 23

Slide 23 text

%SPOFܸ௢࡞ઓɺ։࢝

Slide 24

Slide 24 text

5FSSBGPSNҠߦฤ ʢ͔͜͜Β͸ͬ͘͟Γ͍͖·͢ʣ

Slide 25

Slide 25 text

5FSSBGPSNҠߦͷഎܠ • ࣾ಺Ͱ࢖ΘΕ͍ͯΔ*B$πʔϧ͕5FSSBGPSN͔ͩͬͨΒ฿ͬͨ   ʢ(PPHMF$MPVE΋"[VSF΋࢖͏৔໘͕ҰԠ͋Δʣ • $MPVE'PSNBUJPOΛීஈ࢖͓ͬͯΓɺॳΊͯͷ5FSSBGPSN   ˠॻ͖ํΛͱΓ࣮֮͋͑ͣ͑ͯ૷͢Δ   ʢࠓճ͸ηΩϡϦςΟάϧʔϓ͚͍͚ͩͩ͠Δ΍Ζʜʣ • %SPOFΛಈ͔͠ଓ͚͍ͯΔݶΓͣͬͱߴֹͳྉ͕ۚൃੜ͢ΔͷͰ   ͳΔ΂͘ૣ͘ҠߦΛࡁ·ͤΔ   ˠଟগଥڠ͢Δ৔໘͕͋ͬͯ΋εϐʔυΛ༏ઌ͠ɺҠߦޙʹߟ͑Δ

Slide 26

Slide 26 text

ϋϚΓϙΠϯτબ   ʢ࣮ࡍ͸΋ͬͱ͋ͬͨʣ

Slide 27

Slide 27 text

ϦιʔεఆٛͷϋϚΓϙΠϯτ ηΩϡϦςΟάϧʔϓͷϧʔϧͷॻ͖ํͬͯछྨ͋ΜͶΜ • BXT@TFDVSJUZ@HSPVQͷதʹJOHSFTTͱFHSFTTΛೖΕΔ • BXT@TFDVSJUZ@HSPVQ@SVMF • BXT@WQD@TFDVSJUZ@HSPVQ@JOHSFTTFHSFTT@SVMF ࢀߟɿ5FSSBGPSNͰ"84ͷηΩϡϦςΟάϧʔϓͷϧʔϧΛ࡞੒͢Δํ๏ͷൺֱͱ஫ҙ఺ IUUQTEFWDMBTTNFUIPEKQBSUJDMFTUFSSBGPSNTFDVSJUZHSPVQ

Slide 28

Slide 28 text

ͦΕͧΕͷॻ͖ํͷྫ ີ݁߹͕ͩݟ΍͍͢ ΍΍ૄ݁߹ɺ΍΍ఆ͕ٛ૿͑Δ ᶃ ᶄ

Slide 29

Slide 29 text

ͦΕͧΕͷॻ͖ํͷྫ ˠ֤νʔϜ΋ࢀর͢ΔͨΊɺݟ΍͢͞ͱମݧͷมΘΒͳ͞ॏࢹͰᶃΛ࠾༻ ᶅ ૄ݁߹Ͱϧʔϧ͝ͱʹλάΛઃఆͰ͖Δ͕௕͍

Slide 30

Slide 30 text

JNQPSUͷϋϚΓϙΠϯτ ϦιʔεͷJNQPSUํ๏ͬͯछྨ͋ΜͶΜ • UFSSBGPSNJNQPSUίϚϯυͰ݅ͣͭऔΓࠐΉํ๏   • UGϑΝΠϧʹJNQPSUϒϩοΫΛهड़͠ɺBQQMZͰऔΓࠐΉํ๏               ˠUFSSBGPSNҎ߱Ͱར༻Մೳ terraform import aws_security_group.hoge_sg sg-XXXXXXXXXXXXXXXX import { resource “aws_security_group” “hoge_sg { id = sg-XXXXXXXXXXXXXXXX } } terraform apply

Slide 31

Slide 31 text

JNQPSUͷϋϚΓϙΠϯτ JNQPSUϒϩοΫΛ࢖͏ͱෳ਺ϦιʔεΛҰؾʹऔΓࠐΊΔʂ   ˠUFSSBGPSNBQQMZͷ֬ೝը໘ͰɺطଘͷϦιʔεΛ࡟আ͠   ɹಉ͡ઃఆͷ৽͍͠Ϧιʔε͕࡞੒͞ΕΔঢ়ଶʹͳ͍ͬͯͨ🤔 ࣌ؒ΋ແ͍ͷͰ݅ͣͭJNQPSUίϚϯυͰऔΓࠐΉํ๏ʹ੾Γସ͑   ʢͦΕ΄Ͳଟ͘ͳ͔ͬͨͷͰͳΜͱ͔ͳͬͨʣ ΍Γํ͕ؒҧ͍ͬͯͨՄೳੑ΋͋ΔͷͰɺखಈͰରԠͰ͖ͳ͍਺ͷ   ϦιʔεΛJNQPSU͢Δͱ͖ʹඋ͑ͯਖ਼͍͠ํ๏Λཱ͍֬ͤͨ͞ʜ

Slide 32

Slide 32 text

(JU)VC"DUJPOTͷϋϚΓϙΠϯτ w (JU)VC"DUJPOTΛಈ࡞ͤ͞Δ3VOOFSͬͯछྨ͋ΜͶΜ • (JU)VCʹΑΔϚωʔδυ3VOOFS • ࣗલͰ༻ҙ͢Δ4FMG)PTUFE3VOOFS w (JU)VC&OUFSQSJTFʢηϧϑϚωʔδυ൛ʣ͸4FMG)PTUFEͷΈ   ˠ࢓ํͳ͘ΦϯσϚϯυͷ&$Λߏங͠ɺฏ೔࣌ʹՔಇ   ʢ΋ͬͱίεύ͕ߴ͘ӡ༻ෛՙ͕௿͍࢓૊Έ͕ࣾ಺ʹ͋ͬͨͬΆ͍ʣ w 3VOOFS͕UFSSBGPSNBQQMZʹͯηΩϡϦςΟάϧʔϓΛߋ৽   ˠ5FSSBGPSNΛΠϯετʔϧ͠ɺద੾ͳ*".ϩʔϧΛ෇༩

Slide 33

Slide 33 text

(JU)VC"DUJPOTʹΑΔUFSSBGPSNBQQMZͷ᠘ w ϩʔΧϧͰBQQMZ͢Δ৔߹ AWS Cloud UGTUBUFΛߋ৽ BQQMZޙʹϩʔΧϧͷUGTUBUF͕ߋ৽͞ΕΔͨΊ੔߹ੑ͕อͨΕΔ ϩʔΧϧͷUGTUBUFΛ࢖ͬͯ UFSSBGPSNBQQMZ ˞UGTUBUFɿݱࡏͷϦιʔεͷঢ়ଶ͕هड़͞Ε͍ͯΔϑΝΠϧɻQMBOBQQMZͷࡍ͸UGϑΝΠϧͱUGTUBUFΛൺֱ͢Δ

Slide 34

Slide 34 text

w (JU)VC"DUJPOT͕BQQMZ͢Δ৔߹ AWS Cloud UGTUBUFΛߋ৽ ϦϙδτϦͷUGTUBUFΛ࢖ͬͯ UFSSBGPSNBQQMZ "DUJPOT͕ऴྃͨ͠Β࡞ۀσΟϨΫτϦ͸࡟আ͞ΕΔͨΊɺ ϦϙδτϦͷUGTUBUF͸ߋ৽͞Εͣෆ੔߹͕ൃੜ (JU)VC"DUJPOTʹΑΔUFSSBGPSNBQQMZͷ᠘

Slide 35

Slide 35 text

w (JU)VC"DUJPOT͕BQQMZ͢Δ৔߹ʢରࡦ൛ʣ AWS Cloud ᶅUGTUBUFΛߋ৽ ᶄ4͔Βऔಘͨ͠UGTUBUFΛ࢖ͬͯ UFSSBGPSNBQQMZ 4ʹ഑ஔͨ͠UGTUBUFΛऔಘͯ͠BQQMZΛ࣮ࢪ͠ɺ 4ͷUGTUBUFΛ্ॻ͖͢Δ͜ͱͰ੔߹ੑΛอͭ ᶃऔಘ ᶆ্ॻ͖ (JU)VC"DUJPOTʹΑΔUFSSBGPSNBQQMZͷ᠘

Slide 36

Slide 36 text

͜Μͳײ͡Ͱ ͳΜ΍͔Μ΍͋ͬͯʜ

Slide 37

Slide 37 text

5FSSBGPSN΁Ҡߦ͢Δ͜ͱͰ %SPOFܸ௢࡞ઓɺ੒ޭʂʂʂ

Slide 38

Slide 38 text

%SPOF͕ࢭ·ͬͯίετ΋ݮΓ·ͨ͠ Ұ࣌ఀࢭͨ͠೔ʢʣ ·ͩੜ͖ͯΔͷͰ ετϨʔδྉۚ͸ൃੜ ೔υϧˠυϧ ຊ೔ʢʣ εφοϓγϣοτऔͬͯ ׬શʹফ͠·ͨ͠

Slide 39

Slide 39 text

·ͱΊͱڭ܇

Slide 40

Slide 40 text

·ͱΊͱڭ܇ • "84؀ڥΛோΊ͍ͯͨΒԆ௕αϙʔτಥೖͷ3%4͕͍ͨ   ˠԘ௮͚Λແ͘͠ɺఆظతʹ఺ݕ͠Α͏ • Ṗͷ*B$πʔϧ͔Β5FSSBGPSNʹҠߦͨ͠   ˠϒϥοΫϘοΫεΛແ͘͠ɺٕज़ෛ࠴Λฦͦ͏ • ͍͔ͭ͘͸ଥڠͭͭ͠ɺ୹ظؒͰҠߦΛࡁ·ͤͨ   ˠΞδϦςΟΛߴ͘อͪͭͭɺٕज़ෛ࠴͸ܭըతʹ ࠓޙ΋ࣾ಺ͷ"84؀ڥΛத৺ͱͨ͠ϓϥοτϑΥʔϜΛ੔උ͠ɺ   ݈શͳঢ়ଶΛอͭ͜ͱͰΞδϦςΟͷߴ͍։ൃΛࢧԉ͍͖ͯ͠·͢ Ұॹʹࢧԉ͍ͨ͠ɺΞδϟΠϧΛਪਐ͍͖͍ͯͨ͠ํͳͲ͸ੋඇͪ͜Β΁ˠ

Slide 41

Slide 41 text

5IBOLZPVʂ