확장 가능한 테라폼 코드 관리 (Scalable Terraform Code Management)

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022
All Rights Reserved. Scalable Terraform Code Management ഛ੢ оמೠ పۄಬ ௏٘ ҙܻ ߅ ߽૓ (Byungjin Park) · ௿۽٘ (Claud) · Site Reliability Engineer @ ׼Ӕಕ੉ HashiTalks: Korea April 28, 2022

speaker ߊ಴੗ ࣗѐ Byungjin Park · ⌂ posquit0.com · posquit0
Copyright © 2022 All Rights Reserved. ߅߽૓ / @posquit0 / ௿۽٘ (Claud) (അ) Site Reliability Engineer @ ׼Ӕಕ੉ (੹) Director of Infrastructure Division @ ஠ࢎ௏ܻই (੹) Software Architect @ ১פযझ   (੹) Co-founder & Software Engineer @ ஠೒ۖ HashiCorp Ambassador / AWS Community Builder   Ҵઁ೧ఊ؀ഥ DEFCON CTF ࠄࢶ 6ഥ ૓୹ ೞद௏೐ ೠҴ ࢎਊ੗ ݽ੐ ਍৔ ೠҴ੄ য়೑ࣗझ ઺ GitHub 15,000ѐ ੉࢚੄ झఋܳ ߉਷ ೐۽ં౟

All Rights Reserved. Objective intro “ઑ૒੉ ழ૑ݶࢲ ҙܻೞח పۄಬ ௏٘о ੼੼ ࠂ੟೧૑Ҋ ੓যਃ.” “ޖट పۄಬ ݽٕਸ ٜ݅Ҋ যڌѱ ҙܻ೧ঠೡ૑ х੉ উ৬ਃ.” “ب؀୓ ೞա੄ పۄಬ ਕ௼झಕ੉झী ׸ইঠ ೞח ܻࣗझ੄ ҃҅ח য٣ө૑ੌөਃ?” “઺ࠂغח పۄಬ ௏٘о ցޖ ݆ই૑Ҋ ੓যਃ.” ਤ৬ э਷ Ҋ޹ਸ ೞҊ ੓׮ݶ ઁо ҕਬ ܻ٘ח ղਊ੉ ೧Ѿ଼ਸ ଺ח җ੿ী ب਑੉ ؼ Ѫ੉ۄ ࢤп೤פ׮. ޛۿ ੷ب زੌೠ Ҋ޹ਸ ҅ࣘ ೞҊ ੓যਃ. ࠄ ߊ಴ ղਊ਷ ੿׹੉ ইצ ઁо పۄಬ ௏٘ܳ ؀ೞח ੗ࣁੑפ׮. 😄

All Rights Reserved. Agenda intro ഛ੢ оמೠ పۄಬ ௏٘ ҙܻܳ ਤೠ ਗ஗ పۄಬ ߡ੹ ҙܻ੗ పۄಬ ௿ۄ਋٘ MISC పۄಬ ݽٕਸ ࢎਊೞۄ ৻ࠗ ݽٕਸ ࢎਊೞ૑ ݃ۄ ݽٕ੄ ߡ੹ਸ ҙܻೞۄ ف ઙܨ੄ పۄಬ ݽٕਸ ҙܻೞۄ ௏٘৬ ؘ੉ఠܳ ܻ࠙ೞۄ ೞա੄ ਕ௼झಕ੉झী ݽٚ Ѫਸ ׸૑ ݃ۄ ਕ௼झಕ੉झ р੄ ੄ઓࢿਸ ҙܻೞۄ ݽٚ Ѫਸ పۄಬਵ۽ ҙܻೞ۰ೞ૑ ݃ۄ

పۄಬ ݽٕਸ ࢎਊೞۄ Byungjin Park · ⌂ posquit0.com · posquit0
Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ਷ ޖ঺ੋо? ৈ۞ పۄಬ ܻࣗझܳ ೞա੄ ֤ܻ੸ Ӓܛਵ۽ ҙܻೞӝ ਤ೧ ࢎਊ ೞա੄ ٣۩షܻ ղী .tf ഑਷ .tf.json ౵ੌ۽ ҳࢿػ ௒۩࣌ ݽٕ (Module)

Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ਷ ޖ঺ੋо? పۄಬ CLI о plan / apply पઁ۽ ࣻ೯ೞѱ غח ੘স ٣۩షܻ੄ పۄಬ ௏٘ ݽ਺ ܖ౟ ݽٕ (Root Module) ରੌ٘ ݽٕ (Child Module) ׮ܲ ݽٕ੄ పۄಬ ௏٘ ղীࢲ ഐ୹(ଵઑ)ೞӝ ਤೠ ݾ੸ਵ۽ ੘ࢿػ పۄಬ ௏٘ ݽ਺ ಞ੄࢚ খਵ۽ ঱әೞח ݽٚ ݽٕ਷ ରੌ٘ ݽٕਸ ੄޷೧ਃ. ഐ୹

Copyright © 2022 All Rights Reserved. పۄಬ ݽٕਸ ࢎਊ೧ঠ ೞח ੉ਬ: ઺୏ ܖ೐ (Nested Loop) aws_iam_user aws_iam_user_group_membership aws_iam_user_policy_attachment 0..1 1 1 0..N AWS ࢎਊ੗৬ ҙ۲ػ ܻࣗझٜ੄ ઙܨ৬ ܻࣗझ р੄ ҙ҅ܳ ౵ঈ೧ঠ ೧ਃ పۄಬਵ۽ AWS ࢎਊ੗ܳ ҙܻೠ׮Ҋ о੿೧ࠅѱਃ

Copyright © 2022 All Rights Reserved. పۄಬ ݽٕਸ ࢎਊ೧ঠ ೞח ੉ਬ: ઺୏ ܖ೐ (Nested Loop) aws_iam_user ܻࣗझী ؀೧ࢲ݅ ܳ for_eachա countܳ ా೧ ߈ࠂ੸ਵ۽ ҙܻೞب۾ ೞח Ѫ਷ एਕਃ aws_iam_user aws_iam_user_group_membership aws_iam_user_policy_attachment 0..1 1 1 0..N

Copyright © 2022 All Rights Reserved. పۄಬ ݽٕਸ ࢎਊ೧ঠ ೞח ੉ਬ: ઺୏ ܖ೐ (Nested Loop) aws_iam_user ܻࣗझ৬ 1:1 ҙ҅ܳ о૑ח ܻࣗझب ߹ ޙઁо غ૑ ঋભ aws_iam_user aws_iam_user_group_membership aws_iam_user_policy_attachment 0..1 1 1 0..N

Copyright © 2022 All Rights Reserved. పۄಬ ݽٕਸ ࢎਊ೧ঠ ೞח ੉ਬ: ઺୏ ܖ೐ (Nested Loop) aws_iam_user aws_iam_user_group_membership aws_iam_user_policy_attachment 0..1 1 1 0..N aws_iam_user ܻࣗझ৬ 1:N ҙ҅ܳ о૑ח ܻࣗझо ੓׮ݶ Ҏ஖ ই౵૘פ׮. https://www.daveperrett.com/articles/2021/08/19/nested-for-each-with-terraform/ 🤪 🤪

module x N పۄಬ ݽٕਸ ࢎਊೞۄ Byungjin Park · ⌂
posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕਸ ࢎਊ೧ঠ ೞח ੉ਬ: ઺୏ ܖ೐ (Nested Loop) aws_iam_user aws_iam_user_group_membership aws_iam_user_policy_attachment 0..1 1 1 0..N ݃਺੄ ಣചܳ غ଺ਸ ࣻ ੓णפ׮… 😇 🥳 ݽٕਸ ࢎਊೞѱ غݶ ࠂ੟ೠ ё୓(ܻࣗझ ૘೤)ਸ ױࣽೞѱ ҙܻೡ ࣻ ੓Ҋ,

Copyright © 2022 All Rights Reserved. పۄಬ ݽٕਸ ࢎਊ೧ঠ ೞח ੉ਬ: ஭ङച (Encapsulation) ё୓૑ೱ ೐۽Ӓ۔੄ ೨ब ѐ֛ ઺ ೞա ё୓੄ ਽૘ب৬ ة݀ࢿਸ ֫੉ӝ ਤ೧ ё୓੄ ݽٕചܳ ૑ೱೞח Ѫ ё୓੄ ݽٕചо ੜ ੉ܖয૑ݶ ݽٕ ױਤ੄ ੤ࢎਊ੉ ݒ਋ ਊ੉ ஭ङച (Encapsulation) secrets-manager-secret aws_secretsmanager_secret aws_secretsmanager_secret_policy aws_secretsmanager_secret_rotation aws_secretsmanager_secret_version aws_secretsmanager_secret_version aws_secretsmanager_secret_version рಞೠ ਬ૑ࠁࣻ!!

৻ࠗ ݽٕਸ ࢎਊೞ૑ ݃ۄ Byungjin Park · ⌂ posquit0.com ·
posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ۨ૑झ౟ܻ ೞद௏೐ীࢲ ҕध੸ਵ۽ ਍৔ೞח పۄಬ ೐۽߄੉؊ ߂ ݽٕ ੷੢ࣗ ҕѐػ పۄಬ ݽٕਸ औѱ ଺ই ഝਊೡ ࣻ ੓਺ పۄಬ ۨ૑झ౟ܻ (Terraform Registry) https://registry.terraform.io/browse/modules

posquit0 Copyright © 2022 All Rights Reserved. ৻ࠗী ҕѐػ పۄಬ ݽٕ о੢ ݆਷ ੋӝܳ ՑҊ ੓ח AWS పۄಬ ݽٕਸ ҙܻೞח GitHub ઑ૒ HashiCorp Ambassador ઺ ೠ ݺੋ Anton Babenkoо ܻ٘ GitHub: terraform-aws-modules https://github.com/terraform-aws-modules/ DevOps ੹ޙ ӝস Cloud Posseীࢲ ઁҕೞח పۄಬ ݽٕ GitHub: Cloud Posse https://github.com/cloudposse/ ߊ಴੗о ৈ۞ పۄಬ ݽٕਸ য়೑ࣗझ۽ ҙܻೞҊ ੓ח GitHub ઑ૒ 😄 GitHub: Tedilabs https://github.com/tedilabs/ GitHub ۨನ૑షܻী ⭐ח ௾ ൨੉ ؾפ׮. 🤣

posquit0 Copyright © 2022 All Rights Reserved. ޙઁ੼ ৻ࠗ੄ పۄಬ ݽٕਸ ߄۽ ࢎਊೞѱ ؼ ҃਋, ௏٘੄ ాઁӂ੉ ઑ૒ ղী হয ৈ۞ ޙઁܳ ѻਸ ࣻ ੓णפ׮. ݽٕী बпೠ ࠁউ ޙઁ੼ਸ ଺ই ׼੢ Ҋ୛ঠ ೠ׮ݶ? AWS ೐۽߄੉؊ नӏ ߡ੹ীࢲ ୶оػ ӝמਸ ੸ਊೞҊ र਷ؘ,   ݽٕ ղী ୶࢚ച غয Ѥٜ ࣻо হ׮ݶ? ܻࣗझীࢲח ૑ਗ೧઱ח ӝמ਷ؘ, ݽٕীࢲ ೧׼ ӝמী ؀ೠ   ੋఠಕ੉झܳ ઁҕ೧઱૑ ঋҊ ੓׮ݶ?

posquit0 Copyright © 2022 All Rights Reserved. ೧Ѿ଼ పۄಬ ݽٕਸ ૒੽ ੘ࢿೞѢա, ৻ࠗ ݽٕ੄ ࠂઁࠄਸ ࢎਊೞৈ ௏٘੄ ాઁӂਸ ઑ૒ীࢲ о૑Ҋ ੓যঠ ೤פ׮. ઑ૒ ղীࢲ ૒੽ పۄಬ ݽٕਸ ࢸ҅ೞҊ ੘ࢿೞৈ ҙܻ DIY (Do It Your Self) ৻ࠗ ݽٕਸ ࢎਊೞҊ੗ ೠ׮ݶ ઑ૒ ղࠗী ࠂઁ റ ࢎਊ Use After Fork

ݽٕ੄ ߡ੹ਸ ҙܻೞۄ Byungjin Park · ⌂ posquit0.com · posquit0
Copyright © 2022 All Rights Reserved. ۽ஸ ݽٕ పۄಬ ݽٕਸ ۽ஸ ౵ੌ ҃۽ܳ ా೧ ࢎਊೠ׮ݶ ಞܻೞ૑݅ ݽٕ੄ ߡ੹ਸ ࢶఖೡ ࣻ হणפ׮.

Copyright © 2022 All Rights Reserved. ޙઁ੼ ৈ۞ ਕ௼झಕ੉झীࢲ ࢎਊ઺ੋ ۽ஸ ݽٕী ੜޅػ ࣻ੿ਸ ೠ׮ݶ যڌѱ ؼөਃ? 🤔 service-upload-dev s3-bucket service-payment-dev log-aws-cloudtrail service-payment-prod service-upload-prod Workspaces Local Module

Copyright © 2022 All Rights Reserved. ਗѺ ݽٕ п ਕ௼झಕ੉झীࢲ ਗѺ ݽٕ੄ ౠ੿ ߡ੹ਸ ࢎਊೠ׮ݶ ݽٕਸ ߸҃ೞ؊ۄب ৔ೱਸ ߉૑ ঋب۾ ೡ ࣻ ੓णפ׮. service-upload-dev s3-bucket v0.0.2 service-payment-dev log-aws-cloudtrail service-payment-prod service-upload-prod Workspaces Remote Module s3-bucket v0.0.3 s3-bucket v0.0.1

Copyright © 2022 All Rights Reserved. ߡ੹ ઁড ઑѤ (Version Constraint) ੉ܳ ੜ ੉ਊೞݶ ࠛ೙ਃೠ ߡ੹ ч সؘ੉౟ ࠼بࣻܳ ઴ੌ ࣻ ੓णפ׮! ݽٕ ࠶۾ ղ version ਷ ߡ੹ ઁড ઑѤ धਸ ૑ਗ೤פ׮. 1.2.0 = 1.2.0 >= 1.2.0 ~> 1.2.0 ~> 1.0 >= 1.2.0, < 2.0.0 1.2.0 ߡ੹ 1.2.0 ߡ੹ 1.2.0 ߡ੹ ੉࢚ ઺ ୭न ߡ੹ 1.2.0 ߡ੹ ੉࢚ 2.0.0 ߡ੹ ޷݅ ઺ ୭न ߡ੹ 1.2.x ߡ੹ ઺ ୭न ߡ੹ 1.x ߡ੹ ઺ ୭न ߡ੹ https://www.terraform.io/language/expressions/version-constraints

ف ઙܨ੄ పۄಬ ݽٕਸ ҙܻೞۄ Byungjin Park · ⌂ posquit0.com
· posquit0 Copyright © 2022 All Rights Reserved. যڃ ݽٕਸ ٜ݅ Ѫੋо? ݽٕਸ ࢎਊೞӝী খࢲ, যځೠ ݽٕٜਸ ٜ݅য ਍ਊೡ૑ ੜ Ҋ޹೧ঠ ೤פ׮. DevOps A DevOps B ਋ܻ ઑ૒੄ ಴ળҗ ஶ߮࣌੉ ੸ਊػ S3 ߡఉ ݽٕਸ ٜ݅੗! খਵ۽ S3 ߡఉ੉ ೙ਃೞݶ ੉ ݽٕਸ о૑Ҋ زੌೠ ಴ળҗ ஶ߮࣌ਸ ੸ਊೡ ࣻ ੓ਸѢঠ. Ҷ੉ S3 ߡఉ੄ ݽٚ ২࣌ਸ ࢸ੿ೡ ࣻ ੓ب۾ ੗ਬبܳ ઴ ೙ਃ হ੗ա? ա઺ী ৘৻ா੉झо ߊࢤ೮ਸ ٸ ؀਽ೞӝ য۰ਕ૑ݶ যڌѱ ೧? ݽٕ੉ ӝઓ ܻࣗझ੄ ӝמਸ ઁೠदఃݶ উػ׮Ҋ ࢤп೧.   ӝઓ ܻࣗझ ݽ਺ਸ ਬোೞѱ ࢎਊೡ ࣻ ੓ب۾ ب৬઻ঠ૑! ਋ࢶ S3 ߡఉҗ ҙ۲ػ ܻࣗझٜ੄ ҙ҅ܳ ౵ঈ೧ࢲ ੜ ୶࢚ചػ ೞա੄ ё୓۽ ಴അೡ ࣻ ੓ب۾ ݽٕਸ ݅٘חѱ যٸ?

· posquit0 Copyright © 2022 All Rights Reserved. যڃ ݽٕਸ ٜ݅ Ѫੋо? ੷ח ࠁా ف о૑ ഋక੄ పۄಬ ݽٕਸ ઑ૒ ղীࢲ ҙܻೞৈ ഝਊೞҊ ੓णפ׮. झఖ (Stack) ݽٕ (Module) పۄಬ ݽٕ (Terraform Module) ӝઓ ܻࣗझٜਸ ਬ੄޷ೠ ё୓ ױਤ۽ ׮द ୶࢚ചೠ ܻࣗझ ݽ਺ ઑ૒੄ ੿ࠁܳ ׸Ҋ ੓૑ ঋب۾ ೠ׮ যځೠ ઑ૒ীࢲٚ ਊبী ޖҙೞѱ ੤ࢎਊೞӝ औب۾ ೞח Ѫ੉ ݾ੸ ݽٕ (Module) ઑ૒੄ ӝࣿ ಴ળҗ ஶ߮࣌੉ ੸ਊغয ઁೠػ ੋఠಕ੉झ݅ ઁҕೞח పۄಬ ݽٕ झఖ਷ ܻࣗझ৬ ݽٕ੄ ݽ਺ਵ۽ ҳࢿ ࢎਊ ਊب৬ ২࣌ਸ ઁೠೞৈ ࢎਊࢿਸ ೱ࢚दఃҊ ӝࣿ ಴ળਸ ъઁ ੸ਊೞח Ѫ੉ ݾ੸ झఖ (Stack)

· posquit0 Copyright © 2022 All Rights Reserved. ৘द: ecr-repository ecr-repository aws_ecr_repository aws_ecr_repository_policy aws_ecr_lifecycle_policy ecr-repository AWS Resources Module Stack ۨನ૑షܻ ੿଼ ࢸ੿ ੗ਬ ੉޷૑ ۄ੉೐ࢎ੉௿ ੿଼ ࢸ੿ ੗ਬ ۨನ૑షܻ ੿଼ ࢸ੿ ઁೠ੸ ࢸ੿ ೲਊ   (IAM Policy Deny ੿଼ਵ۽ ӂೠ ઁೠ)   ੉޷૑ ۄ੉೐ࢎ੉௿ ੿଼ ࢸ੿ ࠛо   (޷ܻ ࢸ੿ػ ۄ੉೐ࢎ੉௿ ੿଼)

· posquit0 Copyright © 2022 All Rights Reserved. ৘द: micro-backend ecr-repository micro-backend Module Stack ߔূ٘ ݃੉௼۽ࢲ࠺झ ੋ೐ۄ ܻࣗझܳ ୶࢚ചೠ झఖ ࢲ࠺झ ੉ܴ, ജ҃, DB ࢎਊৈࠗ ߂ ࢸ੿, Redis ࢎਊৈࠗ ߂ ࢸ੿ ١   ୭ࣗೠ੄ ২࣌݅ ੋఠಕ੉झ۽ ֢୹ eks-irsa kms-key secrets-manager-secret elasticache-redis rds-mysql kafka-topic

௏٘৬ ؘ੉ఠܳ ܻ࠙ೞۄ Byungjin Park · ⌂ posquit0.com · posquit0
Copyright © 2022 All Rights Reserved. ؘ੉ఠо ೞ٘௏٬ػ ௏٘ ؘ੉ఠ৬ ௏٘о э੉ ҙܻغח ҃਋, ؘ੉ఠ ୶оܳ ਤ೧ ೦࢚ ӝઓ ࠶۾ਸ ࠂࢎ ࠢৈ֍ӝೞѱ ؾפ׮. ௏٘ ੤ࢎਊࢿ ԧ! ௏٘ ੤ࢎਊࢿ ԧ!

Copyright © 2022 All Rights Reserved. try ೣࣻ…? try ೣࣻо lookup ࠁ׮ оةࢿ੉ જҊ ؊ ׮নೠ ਬૉா੉झী ੸ਊ੉ оמ೤פ׮. ࢤࣗೠؘ? try-catch ੋо? ੐੄ ӡ੉੄ ੋ੗ ੹׳ оמ ࣽࢲ؀۽ ੋ੗ ಴അध(argument expression)ਸ ೧ࢳ   য়ܨо ߊࢤೞ૑ ঋח ୐ ߣ૩ ੋ੗ чਸ ߈ജ try(arg 1, arg 2, …, arg N) map ؘ੉ఠীࢲ ౠ੿ keyী ೧׼ೞח valueܳ ߈ജ ೧׼ keyо হਸ ҃਋ ӝࠄ ч(default) ߈ജ lookup (map, key, default) ࠁా lookupਸ ݆੉ ॳ؍ؘ! try(map.key, default)

Copyright © 2022 All Rights Reserved. ೧ೖূ٬ IaC / GitOps੄ ੢੼ਸ ೣԋ ־ܾ ࣻ ੓णפ׮. ѐߊ੗ DevOps / SRE Secret Managerী द௼݁ ೞա ୶о೧઴ ࣻ ੓ѷࣗ? con fi g.yaml ౵ੌী ೦ݾ ࣻ੿ೞৈ PR ৢܻदয় Secret Managerী द௼݁੉ ੉ઁ ೙ਃ হਵפ ઁѢ೧઱दয় con fi g.yaml ౵ੌী ೦ݾ ઁѢೞৈ PR ৢܻदয় ੉ઁ పۄಬ ௏٘ܳ ݽܰ؊ۄب ੋ೐ۄ ܻࣗझ ҙܻী औѱ ଵৈೡ ࣻ ੓Ҋ,

ਕ௼झಕ੉झ р੄ ੄ઓࢿਸ ҙܻೞۄ Byungjin Park · ⌂ posquit0.com ·
posquit0 Copyright © 2022 All Rights Reserved. ਕ௼झಕ੉झ ৻ࠗ ؘ੉ఠ ഝਊ ਕ௼झಕ੉झ ৻ࠗ ؘ੉ఠܳ ഝਊೞӝ ਤೠ ߑߨਵ۽ పۄಬ਷ ؘ੉ఠ ࣗझܳ ઁҕ೤פ׮. ೐۽߄੉؊ীࢲ ઁҕೞח ؘ੉ఠ ઑഥ ݾ੸੄ ܻࣗझ (GET / LIST)   data ࠶۾ਸ ా೧ ੿੄ ؘ੉ఠ ࣗझ (Data Source) పۄಬ ೐۽߄੉؊ܳ ా೧ ઁҕೞח ؘ੉ఠࣗझ ৻ࠗ పۄಬ ਕ௼झಕ੉झ ࢚క ؘ੉ఠ ઑഥ ݾ੸ terraform_remote_state ؘ੉ఠ ࣗझ https://www.terraform.io/language/data-sources https://registry.terraform.io/providers/hashicorp/terraform/latest/docs/data-sources/remote_state

posquit0 Copyright © 2022 All Rights Reserved. ਕ௼झಕ੉झ р੄ ੄ઓ ҙ҅ ҙܻ п ਕ௼झಕ੉झо যځೠ ੄ઓبܳ о૑Ҋ ੓ח૑ ҙܻೡ ೙ਃо ੓णפ׮. network-vpc domain-cert network-lb domain-zone ৈ۞ ਕ௼झಕ੉झ۽ ܻ࠙ೞৈ ҙܻೞݶ ׼ো൤ п ਕ௼झಕ੉झ р੄ ੄ઓࢿ੉ ߊࢤೞѱ ؾפ׮.

ݽٚ Ѫਸ పۄಬਵ۽ ҙܻೞ۰ೞ૑ ݃ۄ Byungjin Park · ⌂ posquit0.com
· posquit0 Copyright © 2022 All Rights Reserved. झझ۽ীѱ ૕ޙ೧ࠁӝ ݽٚ Ѫਸ పۄಬਵ۽ ҙܻೞ۰ח ਄ब਷ ֍য ل ೙ਃо ੓णפ׮. 😅 زੌೠ ੘সী ؀೧ ӝઓ ੘ࢿػ పۄಬ ௏٘о ੓חо? ࢜܂ѱ పۄಬ ௏٘ܳ ੘ࢿೡ݅ఀ दр੸ ৈਬо ੓חо? ୶റী زੌೠ ੘স੉ ߊࢤ೮ਸ ٸ ࣗਃ दрਸ ױ୷दெ઱חо? IaC੄ ੢੼(Audit, Code Review, Documentation ١)੉ ೧׼ ௏٘ী ؀೧ ਬബೠо? ੉޷ ׮ܲ ߑߨਵ۽ ٜ݅য૓ زੌ ܻࣗझо ੓׮ݶ ݽف పۄಬਵ۽ ݃੉Ӓۨ੉࣌ਸ ૓೯ೡ ࣻ ੓חо?

· posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ҙܻ ܻࣗझ ࠙ܨ ղо పۄಬ ௏٘۽ ੘ࢿೞӝ द੘ೞݶ, زܐب زੌೞѱ ੘সਸ ೧ঠ ೠ׮ח Ѫਸ ੕૑ ݈ইঠ ೤פ׮. 👯👯 ೐۽߄੉؊ ࠙ܨ ܻࣗझ పۄಬ ҙܻ ৈࠗ AWS VPC VPC O AWS VPC Subnet O AWS VPC NACL X AWS Route53 HostedZone O AWS Route53 HostedZone Record X, NS / TXT ۨ௏٘݅ ҙܻ GitHub Organization Team O GitHub Repository Secret X ౱ ղী పۄಬਵ۽ ҙܻೞח ܻࣗझ ઙܨী ؀ೠ ೤੄ܳ ݅٘ח Ѫ੉ ઺ਃ೤פ׮.

· posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ҙܻ ழߡܻ૑ ஏ੿ driftctl ৬ э਷ بҳܳ ੉ਊೞݶ పۄಬ ҙܻ ܻࣗझী ؀ೠ ୶੸ਸ औѱ ೡ ࣻ ੓णפ׮. పۄಬ ࢚క ؘ੉ఠ৬ पઁ ੋ೐ۄ ܻࣗझܳ ࠺Үೞৈ IaC ழߡܻ૑ ஏ੿ పۄಬ ҙܻ ܻࣗझ ઺ ৻ࠗ ߸҃ࢎ೦ ୶੸ AWS / Azure / GCP / GitHub ೐۽߄੉؊ ૑ਗ driftctl https://github.com/snyk/driftctl ੹୓ ܻࣗझ ઺ IaC (పۄಬ ௏٘)۽ ҙܻغҊ ੓ח ܻࣗझ੄ ࠺઺ IaC ழߡܻ૑

All Rights Reserved. పۄಬ ߡ੹ ҙܻ੗ misc о੢ ഝߊೞѱ ҙܻغҊ ੓ח పۄಬ ߡ੹ ҙܻ੗ tfenvࠁ׮ ׮নೠ ӝמਸ ઁҕ tfswitch https://github.com/warrensbox/terraform-switcher о੢ ݆੉ ࢎਊغח పۄಬ ߡ੹ ҙܻ੗ rbenvী ৔хਸ ߉ই ѐߊ tfenv https://github.com/tfutils/tfenv ৈ۞ పۄಬ ਕ௼झಕ੉झܳ ҙܻೠ׮ݶ పۄಬ ߡ੹ ҙܻ੗ח ೙ࣻੑפ׮. п పۄಬ ௏٘ ٣۩షܻী .terraform-version ੿੄

All Rights Reserved. పۄಬ ௿ۄ਋٘ misc https://app.terraform.io Terraform Cloud ೐ۄ੉ࡁ ೐۽߄੉؊ / ݽٕ ੷੢ࣗ ޖܐ ઁҕ ࢚క ੷੢ࣗ ޖܐ ઁҕ (Lock ӝמ ઁҕ) ౱ਗ 5ݺө૑ ޖܐ పۄಬ ௿ۄ਋٘ীࢲ ҙܻೞח ী੉੹౟ীࢲ పۄಬ ௏٘ ਗѺ प೯ Remote प೯ ݽ٘ ࢎਊ੗ ە఑ীࢲ పۄಬ ௏٘ प೯ (࢚క੷੢ࣗ݅ పۄಬ ௿ۄ਋٘ ੉ਊ) Local प೯ ݽ٘ ੸਷ ੋਗ੉ పۄಬ ௏٘ܳ ҙܻೠ׮ݶ పۄಬ ௿ۄ਋٘ܳ ࢎਊೞৈ ޖܐ۽ ׮নೠ ӝמਸ ഝਊೡ ࣻ ੓णפ׮.

summary Byungjin Park · ⌂ posquit0.com · posquit0 Copyright ©
2022 All Rights Reserved. 1. పۄಬ ݽٕਸ ࢎਊೞۄ 2. ৻ࠗ ݽٕਸ ࢎਊೞ૑ ݃ۄ 3. ݽٕ੄ ߡ੹ਸ ҙܻೞۄ 4. ف ઙܨ੄ పۄಬ ݽٕਸ ҙܻೞۄ 5. ௏٘৬ ؘ੉ఠܳ ܻ࠙ೞۄ 6. ೞա੄ ਕ௼झಕ੉झী ݽٚ Ѫਸ ׸૑ ݃ۄ 7. ਕ௼झಕ੉झ р੄ ੄ઓࢿਸ ҙܻೞۄ 8. ݽٚ Ѫਸ పۄಬਵ۽ ҙܻೞ۰ೞ૑ ݃ۄ పۄಬ ߡ੹ ҙܻ੗ܳ ࢎਊೞ੗ పۄಬ ௿ۄ਋٘ જ׮ ݃૑݄ਵ۽…

ࣻಣ੸ੋ ࣗా — ૒ә X / ৔য੉ܴ / न܉৬ ୽ج
/ ైݺೠ ੿ࠁ ҕਬ ੗ਯҗ ଼੐ — מز੸ সޖ ࣻ೯ / ੗ਯ੸ ౸ױ ૌѩѱ ࢿ੢ — աࠁ׮ ڪযդ زܐ / ౱ ਕ௼ / ૌѢ਑ ࢎਊ੗ ઺ब ࢎҊ — ࢎਊ੗ о஖ ୭਋ࢶ / ࢎਊ੗৬ ੿ࢲ੸ োѾ recruiting ੋ೐ۄ ౱ীࢲ ೣԋ ೡ زܐܳ ଺ইਃ! 👋 Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ੗ࣁೠ ղਊ਷ daangn.team ਸ ߑޙ೧઱ࣁਃ! :) SRE (Site Reliability Engineer) ׼Ӕಕ੉ ੋ೐ۄ ҳ୷ ߂ ਍৔ Data Engineer ׼Ӕಕ੉ ؘ੉ఠ ೒ۖಬ ҳ୷ ߂ ਍৔ ਋ܻח ੉ۧѱ ੌ೧ਃ ഌఖ ߂ ࠂ૑ ੗ਬ۽਍ ോо / ਬো ୹ృӔ ߂ ੤ఖӔޖ / धࢎ ߂ ׮নೠ рध ઁҕ झగ٬ ؘझ௼ & ೲݢ޻۞ ੄੗ ઁҕ / بࢲ ҳݒ ߂ Үਭ࠺ ૑ਗ ੗֎… ա৬ ೣԋ పۄಬ ௏٘ ӫ૑ ঋѷࣗ..? 👨🦳

확장 가능한 테라폼 코드 관리 (Scalable Terraform Code Management)

확장 가능한 테라폼 코드 관리 (Scalable Terraform Code Management)

More Decks by Byungjin Park

Other Decks in Programming

Featured

Transcript