With Ansible and Terraform

Ansible ユーザー会
2019/7/30 Ansible Night in Tokyo 2019.07 LT 説明資料
https://ansible-users.connpass.com/event/135965/

Transcript

1. "OTJCMFͱ 5FSSBGPSNͱ
    ࣗݾ঺հ
   
   
   
   (JU)VC
   TBOUBL
   w ฏ੒͸શظؒࣾձਓ
   w ΄΅ιϑτ΢ΣΞ։ൃ
   w ͷखश͍Ͱ"OTJCMF Ansible Night in Tokyo 2019.07
2. ࿩͢͜ͱ 5FSSBGPSNͬͯ
   *B$πʔϧͷҐஔ෇͚੔ཧ
   ࣮ࡍɺ࢖͍෼͚Λ͢Δʁ
   ݁࿦ !2
3. 5FSSBGPSNͬͯԿʁ એݴతϞσϧϕʔεͷ*B$πʔϧ
   )FBU
   $MPVE'PSNBUJPO
   ͱಉྨ
   ͨͩ͠ϚϧνΫϥ΢υ΁ͷରԠՄೳ
   %3:
   36/Մೳ
   ߏஙޙͷΠϯϑϥঢ়ଶϑΝΠϧ͕ ϙΠϯτ
   )BTIJ$PSQ
   ͕։ൃɺ044
   &OUFSQSJTF൛΋͋Γ !3
4. 5FSSBGPSNͬͯ
   ਓؾ্ঢதʁ !4 Ansible Chef Terraform Google Trend https://azure.microsoft.com/ja-jp/solutions/devops/terraform/ https://jp.alibabacloud.com/solutions/devops/terraform 5FSSBGPSNιϦϡʔγϣϯ IUUQTHJUIVCDPN(PPHMF$MPVE1MBUGPSNUFSSBGPSNFS طଘͷ؀ڥ͔Β5FSSBGPSN༻ͷఆٛϑΝΠϧ Λੜ੒͢Δπʔϧʢ($1͕։ൃʣ https://blog.pulumi.com/using-terraform-remote-state-with-pulumi 1VMVNJ
   Ͱ5FSSBGPSN
   TUBUFϑΝΠϧ ΛಡΈࠐΈͰ͖ΔΑ
5. *B$πʔϧͷҐஔ෇͚੔ཧ
   !5 ωοτϫʔΫج൫ Ծ૝Խج൫ ίϯςφج൫ ΦϯϓϨϛε ύϒϦοΫΫϥ΢υ "[VSF ($1 "84 LT 0QFO4UBDL
   7.8BSF 0QFO4IJGU /495 Heat μΠφϛοΫΠϯϑϥετϥΫνϟϓϥοτϑΥʔϜ ΠϯϑϥετϥΫνϟఆٛπʔϧ CloudFormation Terraform αʔόʔߏ੒πʔϧ Ansible ੔ཧ࣠ͷҾ༻ݩ "[VSF
   4UBDL (,&
   0OQSFN "84
   0VUQPTUT Πϯϑϥج൫ӡ༻ऀ ۀ຿޲͚
   Πϯϑϥ؅ཧऀ ۀ຿։ൃऀ AP Πϯϑϥج൫ఏڙଆ Πϯϑϥج൫ར༻ଆ ʮҐஔ෇͚ʯͷ੔ཧͰ͋ΓػೳతͳΦʔό ϥοϓ͸͋Δɺͱهࡌ͞Ε͍ͯ·͢ɻ
6. 5FSSBGPSNͱ"OTJCMFΛ Ұॹʹ࢖͏ʁ !6 https://www.redhat.com/ja/resources/hashicorp-terraform-ansible-infrastructure-as-code-overview TERRAFORM INVOKING ANSIBLE AUTOMATION ANSIBLE AUTOMATION INVOKING TERRAFORM ͜ͷࢿྉʹ͸ҎԼͷ̎ྫ͕Ͱ͖Δͱهࡌ͞Ε͍ͯΔ HCL (HashiCorp Configuration Language) Playbook Playbook Ansible Module HCL ʢݸਓͷײ૝Ͱ͢ʣ
   πʔϧΛࠞͥͯ࢖Θͳ͍ํ͕ྑ͍ͷͰ͸ʁ
   ࠨهͷ̎ྫͷར఺͕Θ͔Βͳ͍ɻɻ
   τϥϒϧγϡʔςΟϯά͕େมͦ͏ɻ ʮͰ͖Δʯͱॻ͍ͯ͋Δ͕ɻɻɻ
   ͜ͷΑ͏ʹ૊Έ߹ΘͤΔཧ༝΍
   Ձ஋ʹ͍ͭͯઆ໌͕ͳ͘ࠔ࿭
   ʢ͜ͷࢿྉ͕ࠓճͷ-5ͷ
   ΩοΧέʹʣ
7. !7 ͪΐͬͱ͚ͩৄ͘͠ݟͯΈΔͱɻɻ
   ϝϯςφϯε؍఺͔Β TERRAFORM INVOKING ANSIBLE AUTOMATION ANSIBLE AUTOMATION INVOKING TERRAFORM hcl resource “aws_instance” “web” { # ... provisioner “local-exec” { command = “ansible-playbook -u ubuntu -i ‘${aws_instance.web.public_dns},’ main.yml” } } --- - name: main hosts: all gather_facts: false connection: local tasks: - name: plan terraform: project_path: ‘terraform/’ plan_file: “{{playbook_dir}}/tfplan” lock: true state: planned 5FSSBGPSN
   Ͱ&$Λ࡞੒͠ɺ࡞੒͕׬ྃͨ͠ޙ 1MBZCPPLͰઃఆ͍ͯ͠Δ
   ʢޙॲཧͷΠϝʔδʣ 1MBZCPPLͷ࣮ߦ͕ࣦഊ͢Δͱɺ5FSSBGPSN
   ্ͷঢ়ଶ͸z5BJOUFEz
   ͱͳΔɻ
   ໰୊Λղܾ͠࠶౓BQQMZ
   Λ࣮ߦ͢Δͱɺ&$͸Ұ୴࡟আ͞Εͯ࠶࡞੒͞Εͨޙɺ1MBZCPPL
   ͕࣮ߦ͞ΕΔɻ 1MBZCPPLΛ࣮ߦ͢Δͱɺ5FSSBGPSNϞδϡʔϧ͔Βొ࿥ ͞Ε͍ͯΔ)$-Λݺͼग़͢
   ʢϝΠϯॲཧͷҰ෦ʣ
   5FSSBGPSN
   ͕࡞੒ͨ͠Ϧιʔε ྫ͑͹αʔό
   ͷΠϯϕϯτϦ৘ใΛ͜ͷޙͷUBTL
   ΍3PMFͳͲʹ౉͢ඞཁ͕͋Δɻ
   μΠφϛοΫΠϯϕϯτϦΛ࢖ͬͯରॲ͢Δϊ΢ϋ΢͕ωοτ্Ͱݟ͚ͭΒΕ·͢ɻ ແ͠ɺ͔ͳ ͋ͬͯ΋͍
8. 5PXFS͔Β࢖͏ !8 No. Ansible Terraform ༗ ແ ༗Γɾແ͠ͷཧ༝ 1 Tower Enterprise º ྆ํͱ΋ߴػೳͳ(6*͕͋Γɺશମ੍ޚʹ ͲͪΒΛ࢖͏΂͖͔෼͔Βͳ͘ͳΔ
   ੍ޚର৅Ͱ࢖͍෼͚ΔͷͰ͋Ε͹༗Γ 2 Tower OSS ˓ *B$੔ཧͷΑ͏ʹΠϯϑϥΛ5FSSBGPSNͰɺ ίϯϑΟάΛ"OTJCMF
   Ͱߦ͍ɺશମ੍ޚΛ 5PXFSͷϫʔΫϑϩʔͰ࣮ݱ 3 Engine Enterprise ˚ શମ੍ޚ͸5FSSBGPSN͔Β࣮ࢪɻ"OTJCMF
   1MBZCPPL͕͢Ͱʹ੔උࡁΈͷ৔߹΍ 5FSSBGPSN
   Ͱ͸ίϯϑΟάͰ͖ͳ͍ࣄ߲ʹ "OTJCMFΛར༻͢Δύλʔϯ 4 Engine OSS ˚ ͦΕͧΕͰׯবͤͣʹ੍ޚର৅Ͱ࢖͍෼͚ ΔͷͰ͋Ε͹༗Γ
   +FOLJOTͳͲ্͕Ґʹ͍ͯɺͦΕͧΕΛผ λεΫͰ੍ޚ͢ΔͱదࡐదॴͰ࢖͑ͦ͏ ੍ޚର৅ͱͳΔγεςϜΛ྆ํͷπʔϧͰ૊Έ߹Θ੍ͤͯޚ͢Δ͔Ͳ͏͔ͱݴ͏؍఺Ͱ͢
   5PXFS
   
   Ͱ֎෦γεςϜ͔Βͷೝূ৘ใ࿈ܞͱͯ͠ɺ)BTIJ$PSQ
   7BVMU
   ͕બ୒Ͱ͖ΔΑ͏ʹ ͳΓ·ͨ͠ɻ)BTIJ$PSQ
   ϓϩμΫτΛ׆༻͍ͯ͠Δ৔߹ͷ࿈ܞ͕ਐΉՄೳੑ͕͋Γ·͢ɻ ҎԼͷ૊Έ߹ΘͤͰͷߟ࡯
9. !9 AWS "OTJCMF
   5PXFSͷϫʔΫϑϩʔ͔Β࣮ߦ͢Δ 1MBZCPPLδϣϒ 8FCαʔόઃఆ
   ύοέʔδΞοϓσʔτɺ
   Πϯετʔϧɺίϯςϯπద༻ 1MBZCPPLδϣϒ σʔλઃఆ ^ ྫ͑͹ɺڭҭ؀ڥͳͲେྔʹ ·ͱΊͯߏங͢Δ৔߹ͳͲ
   0OF1VTIͰ ΠϯϑϥΛߏங
   71$
   &-#
   &$
   3%4
   4 8FCαʔόઃఆ
   ύοέʔδΞοϓσʔτɺ
   Πϯετʔϧɺίϯςϯπద༻ σʔλઃఆ δϣϒςϯϓϨʔτผʹ࣮ߦ͢Δํ͕γϯϓϧ͔ "84͚ͩͩͬͨΒ$'O͕͍͍ͱࢥ͏͕ɺ"[VSF
   ͱ͔($1
   ΋࢖͏৔߹͸ɺ5FSSBGPSNͰ౷ҰײΛ લϖʔδ/P
   ͷΠϝʔδ ΠϯϑϥΛߏங
   71$
   &-#
   &$
   3%4
   4 5FSSBGPSN࣮ߦ༻δϣϒ 1MBZCPPL 5FSSBGPSNϞδϡʔϧ࢖༻
10. 5FSSBGPSNͱ"OTJCMF͸࢖͍ ෼͚ͨํ͕͍͍ͩΖ͏ͱࢥ͏ ͦͷϦιʔεͷϥΠϑαΠΫϧʹ߹ΘͤͯπʔϧΛ࢖͍෼͚Δ
 Πϯϑϥͱ04ɾϛυϧ΢ΣΞͷϥΠϑαΠΫϧ͸ҧ͏͠
 ͨͩ͠ɺΠϯϕϯτϦͷ࿈ܞ͸ඞཁ
    5FSSBGPSN͸એݴతͳϞσϧఆٛ )$-
    ͰΠϯϑϥΛߏஙɾมߋ͢Δ ͷ͕ےͷྑ͍࢖͍ํ ޙॲཧͰ1MBZCPPL
    Λݺͼग़͢ͷ͸ҧ࿨ײ͋Γ
    "OTJCMFͰ5FSSBGPSNϞδϡʔϧΛ࢖͏৔߹͸ɺ"OTJCMF
    5PXFSΛ࢖ ͏ͱݟ௨͕͠ྑ͘ͳΔͱࢥ͏
    ෳ਺ͷ%4-Λ֮͑Δน͸ҙ֎ͱେ͖͍
 1MBZCPPL :".- ͱ)$-Λ֮͑Δඞཁ͕͋Γɺݱ৔ͷ఍߅͕͋Δ͔ ΋ !10 ݁ ࿦
11. ·ͱΊ దࡐదॴͰ
    ૄ࿈ܞɺγϯϓϧӡ༻
 ʢ*B$΋ϞϊϦεԽ͠ͳ͍Α͏ʹʣ
    ৄࡉ͸ͪ͜ΒɹˠɹOPUF
    Ͱ !11 ຊൃද͓Αͼࢿྉʹ͍ͭͯɺॴଐ͢Δ૊৫ͱͷؔ܎͸͋Γ·ͤΜɻݸਓͷݟղͱͳΓ·͢ɻ
12. "OTJCMF
    Ϣʔβʔձ
    IUUQTBOTJCMFVTFSTDPOOQBTTDPN
    IUUQTBOTJCMFKQHJUIVCJP !12
13. !13 ओཁػೳ "OTJCMF
    5PXFS 5FSSBGPSN
    &OUFSQSJTF 8FCϕʔε6* ˓ ˓ ݖݶ؅ཧ ˓ ˓ δϣϒϫʔΫϑϩʔ ˓ º ΠϯϕϯτϦ؅ཧ ˓ ˓ 7$4࿈ܞ ˓ ˓ "OTJCMF
    &OHJOFʹ͸ແ͘5PXFSͷΈͰ࣮૷͞Ε͍ͯΔ΋ͷ
    044൛5FSSBGPSNʹ͸ແ͘&OUFSQSJTF൛ͷΈͰ࣮૷͞Ε͍ͯΔ΋ͷ ิ଍ࢿྉ