GitOpsで実現するPull Request毎のプレビュー環境/Preview environment for each Pull Request by GitOps

Transcript

1. 
   1FQBCP
   5FDI
   $POGFSFODF
    (JU0QTͰ࣮ݱ͢Δ1VMM
   3FRVFTUຖͷ
   ϓϨϏϡʔ؀ڥ
2. (.0ϖύϘגࣜձࣾ
   ϗεςΟϯάࣄۀ෦
   43&νʔϜ
   ࠷ۙ΍͍ͬͯΔ͜ͱ
   ΞϓϦͷίϯςφԽLTͷಋೖ
   $%։ൃମݧͷ޲্ ٱถ୓അ
   !UBLVNBLVNF
3. ࠓճ঺հ͢Δ΋ͷ ΞϓϦέʔγϣϯ
   ϦϙδτϦ LVCFSOFUFT
   Ϋϥελ Branch-A Branch-B Branch-A Branch-B 13࡞੒ 13࡞੒ branch-a.example.com branch-b.example.com (JU0QTͰ࣮ݱ͢Δ1VMM
   3FRVFTUຖͷϓϨϏϡʔ؀ڥ
4. ໨࣍ w։ൃܦҢ
   wϓϨϏϡʔ؀ڥͷղઆ
   wࠓޙͷ՝୊
   w·ͱΊ
5. ։ൃܦҢ
6. ։ൃܦҢ wϦϦʔεલʹڞ༻ͷTUBHJOH؀ڥʹΞϓϦέʔγϣϯΛσϓϩΠ ͯ͠ಈ࡞֬ೝΛߦ͏։ൃϑϩʔʹ͓͚Δ՝୊
   w౎౓σϓϩΠߦҝ͕ඞཁͰखؒͰ͋Δ
   w؀ڥ͸਺ʹݶΓ͕͋Γɺར༻଴͕ͪൃੜ͢Δ͜ͱ͕͋Δ
   wڞ༻Ώ͑ʹɺ؀ڥΛҰ࣌తʹઐ༗͢Δ͜ͱʹਫ਼ਆతϋʔυϧ͕ ͋Δ
7. 1VMM
   3FRVFTUຖʹ؀ڥΛ
   ੜ੒͢Δ͜ͱͰ՝୊ղܾΛ͢Δ
8. ΞϓϦέʔγϣϯ
   ϦϙδτϦ LVCFSOFUFT
   Ϋϥελ Branch-A Branch-B Branch-A Branch-B 13࡞੒ 13࡞੒ branch-a.example.com branch-b.example.com ϓϨϏϡʔ؀ڥͷղઆ
9. ϓϨϏϡʔ؀ڥͷղઆɿલఏ "QQ
   3FQP 4ZTUFN
   .BOJGFTUT
   3FQP $POUBJOFS
   3FHJTUSZ ,VCFSOFUFT
   $MVTUFS ιʔείʔυ LVCFSOFUFT
   NBOJGFTUT LVCFSOFUFT
   NBOJGFTUT
   
   "SHP$%
   
   ֤"QQ
   3FQPͷ"SHP$%
   $POpH
   
   *OHSFTT
   $POUSPMMFS
   ʜ ArgoCD ΞϓϦͷίϯςφΠϝʔδ ArgoCD Image Updater "SHP$%ͰNBOJGFTUTͷ$%Λ͍ͯ͠Δ "SHP$%
   *NBHF
   6QEBUFSͰΠϝʔδͷ
   $%Λ͍ͯ͠Δ ϓϨϏϡʔ؀ڥͷղઆͷલʹɺϦϙδτϦͷߏ੒ͱ$%ʹ͍ͭͯ
10. ϓϨϏϡʔ؀ڥͷղઆɿશମ૾ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP $POUBJOFS
    3FHJTUSZ ,VCFSOFUFT
    $MVTUFS Github Actions branch-a Github Actions 
    13࡞੒ App Image 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI SFQPTJUPSZ@EJTQBUDI 13τϦΨʔͰΠϝʔδͷϏϧυͱ"SHP$%ͷઃఆΛੜ੒͢Δ 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛੜ੒ HJU
    DPNNJU
    
    QVTI
11. ϓϨϏϡʔ؀ڥͷղઆɿશମ૾ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP $POUBJOFS
    3FHJTUSZ ,VCFSOFUFT
    $MVTUFS Github Actions branch-a Github Actions 
    13࡞੒ App Image 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI SFQPTJUPSZ@EJTQBUDI 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛੜ੒ "SHP$%͕ݕ஌͠ϒϥϯνͷ؀ڥΛσϓϩΠ͢Δ ArgoCD 
    CSBODIBͷ؀ڥΛੜ੒ BQQCSBODIB 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ"QQMZ 
    CSBODIBͷNBOJGFTUTͷಉظΛ։࢝ %FQMPZNFOU
    4FSWJDFʜ 
    มߋΛݕ஌ HJU
    DPNNJU
    
    QVTI
12. ϓϨϏϡʔ؀ڥͷղઆɿશମ૾ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP $POUBJOFS
    3FHJTUSZ ,VCFSOFUFT
    $MVTUFS Github Actions branch-a Github Actions 
    13࡞੒ App Image 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI SFQPTJUPSZ@EJTQBUDI 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛੜ੒ "SHP$%
    *NBHF
    6QEBUFSͰ࠷৽ͷΠϝʔδΛద༻͢Δ ArgoCD 
    มߋΛݕ஌ 
    CSBODIBͷ؀ڥΛੜ੒ BQQCSBODIB 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ"QQMZ 
    CSBODIBͷNBOJGFTUTͷಉظΛ։࢝ %FQMPZNFOU
    4FSWJDFʜ ArgoCD Image Updater ࠷৽ͷΠϝʔδΛద༻͢Δ มߋΛݕ஌ 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI ϒϥϯν΁1VTI͢Δ౓ʹ࣮ߦ HJU
    DPNNJU
    
    QVTI
13. ϓϨϏϡʔ؀ڥͷղઆɿશମ૾ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP $POUBJOFS
    3FHJTUSZ ,VCFSOFUFT
    $MVTUFS Github Actions branch-a Github Actions 
    13࡞੒ App Image 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI SFQPTJUPSZ@EJTQBUDI 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛੜ੒ ArgoCD 
    มߋΛݕ஌ 
    CSBODIBͷ؀ڥΛੜ੒ BQQCSBODIB 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ"QQMZ 
    CSBODIBͷNBOJGFTUTͷಉظΛ։࢝ %FQMPZNFOU
    4FSWJDFʜ ArgoCD Image Updater ࠷৽ͷΠϝʔδΛద༻͢Δ มߋΛݕ஌ 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI HJU
    DPNNJU
    
    QVTI
14. ϓϨϏϡʔ؀ڥͷղઆɿશମ૾ wҰݟෳࡶʹݟ͑Δ͕ʜ
    w13τϦΨʔͰ(JUIVC
    "DUJPOTΛ࢖ͬͯɺ"SHP$%ͷઃఆΛࣗಈ ੜ੒ͯ͠ϦϙδτϦʹ1VTI͍ͯ͠Δ
    wͦΕҎ֎͸ɺ"SHP$%΍*NBHF
    6QEBUFS͕΍ͬͯ͘ΕΔ
15. "SHP$%ͷઃఆͷੜ੒ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP $POUBJOFS
    3FHJTUSZ ,VCFSOFUFT
    $MVTUFS Github Actions branch-a Github Actions 
    13࡞੒ App Image 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI SFQPTJUPSZ@EJTQBUDI 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛੜ੒ ArgoCD 
    มߋΛݕ஌ 
    CSBODIBͷ؀ڥΛੜ੒ BQQCSBODIB 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ"QQMZ 
    CSBODIBͷNBOJGFTUTͷಉظΛ։࢝ %FQMPZNFOU
    4FSWJDFʜ ArgoCD Image Updater ࠷৽ͷΠϝʔδΛద༻͢Δ มߋΛݕ஌ 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI HJU
    DPNNJU
    
    QVTI
16. "SHP$%ͷઃఆͷੜ੒ wBSHPDE
    BENJO
    BQQ
    HFOFSBUFTQFD
    ίϚϯυͰઃఆΛੜ੒ͯ͠Ϧ ϙδτϦʹ1VTI͍ͯ͠Δ $ argocd admin app generate-spec sample-app-pr-1 \ --dest-server https://kubernetes.default.svc \ --dest-namespace sample-app-pr-1 \ --path manifests/preview \ --repo https://github.com/takumakume/sample-app \ --revision branch-1 \ --sync-policy auto \ --sync-option Prune=true \ --sync-option CreateNamespace=true apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name: sample-app-pr-1 spec: destination: namespace: sample-app-pr-1 server: https://kubernetes.default.svc source: path: manifests/preview repoURL: https://github.com/takumakume/sample-app targetRevision: branch-1 syncPolicy: … wੜ੒ʹඞཁͳύϥϝʔλΛ(JUIVC
    "DUJPOͰ౉͍ͯ͠Δ sample-app-pr-1.yaml
17. "SHP$%ͷઃఆͷੜ੒ apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name: sample-app-pr-1 spec: source: path: manifests/preview repoURL: https://github.com/takumakume/sample-app targetRevision: branch-1 destination: namespace: sample-app-pr-1 server: https://kubernetes.default.svc syncPolicy: - CreateNamespace=true … ϓϨϏϡʔ؀ڥͷNBOJGFTUTͷσ ΟϨΫτϦΛ 13ຖͷ/BNFTQBDFʹల։ /BNFTQBDF͸ࣗಈੜ੒ w୯ҰͷNBOJGFTUTΛ࢖֤ͬͯ13ͷ؀ڥΛએݴతʹੜ੒Ͱ͖Δ sample-app-pr-1.yaml
18. "QQ
    *NBHFͷߋ৽ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP $POUBJOFS
    3FHJTUSZ ,VCFSOFUFT
    $MVTUFS Github Actions branch-a Github Actions 
    13࡞੒ App Image 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI SFQPTJUPSZ@EJTQBUDI 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛੜ੒ ArgoCD 
    มߋΛݕ஌ 
    CSBODIBͷ؀ڥΛੜ੒ BQQCSBODIB 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ"QQMZ 
    CSBODIBͷNBOJGFTUTͷಉظΛ։࢝ %FQMPZNFOU
    4FSWJDFʜ ArgoCD Image Updater ࠷৽ͷΠϝʔδΛద༻͢Δ มߋΛݕ஌ 
    ίϯςφΠϝʔδͷ#VJME
    
    1VTI HJU
    DPNNJU
    
    QVTI
19. "QQ
    *NBHFͷߋ৽ wϒϥϯνʹHJU
    QVTI͢Δ౓ʹɺ13൪߸ͱίϛοτϋογϡͰߏ ੒͞ΕΔλάΛ෇༩ͯ͠ΠϝʔδΛQVTI͍ͯ͠Δ
    wTBNQMFBQQQSFDFE
    w"SHP$%ͷઃఆΛੜ੒͢Δஈ֊Ͱ*NBHF
    6QEBUFSͷઃఆΛ෇༩ apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name: sample-app-pr-1 annotations: argocd-image-updater.argoproj.io/image-list: sample-app=takumakume/sample-app:^pr-1 argocd-image-updater.argoproj.io/sample-app.update-strategy: latest argocd-image-updater.argoproj.io/sample-app.ignore-tags: latest argocd-image-updater.argoproj.io/sample-app.allow-tags: regexp:^pr-1-[0-9a-f]{5,40}$ ... ࠷৽ͷ
    lQSίϛοτϋογϡz
    
    ͳΠϝʔδΛద༻͢Δ
20. ϓϨϏϡʔ؀ڥͷղઆɿ؀ڥͷ࡟আ "QQ
    3FQP 4ZTUFN
    .BOJGFTUT
    3FQP ,VCFSOFUFT
    $MVTUFS Github Actions Pull Request Github Actions 
    $MPTF
    PS
    .FSHF SFQPTJUPSZ@EJTQBUDI 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ࡟আ ArgoCD 
    ࡟আΛݕ஌ 
    CSBODIBͷ؀ڥΛ࡟আ BQQCSBODIB 
    CSBODIB༻ͷ"SHP$%ͷઃఆΛ࡟আ %FQMPZNFOU
    4FSWJDFʜ HJU
    DPNNJU
    
    QVTI apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name: sample-app-pr-1 finalizers: - resources-finalizer.argocd.argoproj.io … "QQMJDBUJPOϦιʔε࡟আ࣌ʹͦͷ؀ڥΛ࡟আ͢Δ
21. ϓϨϏϡʔ؀ڥͷղઆɿ؀ڥ΁ͷΞΫηε ΞϓϦέʔγϣϯ
    ϦϙδτϦ LVCFSOFUFT
    Ϋϥελ Branch-A Branch-B Branch-A Branch-B 13࡞੒ 13࡞੒ branch-a.example.com branch-b.example.com *OHSFTTΛ࢖ͬͯެ։͍ͯ͠Δ
22. ϓϨϏϡʔ؀ڥͷղઆɿ؀ڥ΁ͷΞΫηε apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: app-ingress namespace: app spec: rules: - host: staging-app.example.com http: paths: - backend: service: name: app-svc port: number: 8080 path: / pathType: Prefix tls: - hosts: - staging-app.example.com secretName: app-tls staging-app.example.com staging-app.example.com ίί ίί w*OHSFTTΛ࢖͏৔߹ͷ՝୊
    w୯ҰͷNBOJGFTUTΛෳ਺ͷϓϨϏϡʔ ؀ڥʹར༻͢ΔͨΊɺ*OHSFTT
    IPTUͷ ॻ͖׵͕͑ඞཁ
    wNBOJGFTUTੜ੒࣌ʹεΫϦϓτ౳Ͱॻ ͖׵͑Δࣄ΋Ͱ͖Δ͕ɺ؅ཧ͕൥ࡶͱ ͳΔ
23. ϓϨϏϡʔ؀ڥͷղઆɿ؀ڥ΁ͷΞΫηε wUBLVNBLVNFTFSWJDFFYQPTFPQFSBUPS
    wࢦఆͨ͠4FSWJDFΛެ։͢Δ*OHSFTTΛࣗಈੜ੒͢Δ0QFSBUPS
    w4&37*$&@/".&/".&41"$&FYBNQMFDPN
    wࣗಈͰ*OHSFTT
    IPTUΛׂΓ౰ͯΔ͜ͱ͕Ͱ͖Δ
    wLVCFSOFUFT
    4FSWJDF
    %JTDPWFSZͷ*OHSFTT൛ͷΑ͏ͳػೳ
    wએݴతʹಈతͳϗετ໊Ͱ*OHSFTTΛੜ੒Ͱ͖Δ
24. apiVersion: service-expose.../v1alpha1 kind: ServiceExpose metadata: name: example namespace: ns1 spec: backend: service: name: example-svc port: number: 8080 domain: example.com path: / pathType: Prefix tlsEnable: true tlsSecretName: example-tls annotations: cert-manager.io/cluster-issuer: letsencrypt apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example namespace: ns1 annotations: cert-manager.io/cluster-issuer: letsencrypt spec: rules: - host: example-svc.ns1.example.com http: paths: - backend: service: name: example-svc port: number: 8080 path: / pathType: Prefix tls: - hosts: - example-svc.ns1.example.com secretName: example-tls backend: service: name: example-svc port: number: 8080 example-svc ns1 example.com example-svc ns1 example.com example-svc ns1 example.com ެ։͢Δ
    4FSWJDF αʔϏεσΟεΧόϦతͳ
    ϗετ໊ΛࣗಈͰ෇༩ αʔϏε໊ namespace υϝΠϯ UBLVNBLVNFTFSWJDFFYQPTFPQFSBUPS
25. IUUQTTQFBLFSEFDLDPNUBLVNBLVNFHPLVCFSOFUFTPQFSBUPS LVCFSOFUFT
    PQFSBUPSͷৄ͍࣮͠૷಺༰ʹ͍ͭͯ͸ҎԼ
26. ϓϨϏϡʔ؀ڥͷղઆɿ؀ڥ΁ͷΞΫηε w4FSWJDF&YQPTFʹΑͬͯੜ੒͞Εͨ*OHSFTTͷϗετ໊ʹରͯ͠
    wFYUFSOBMEOT
    "Ϩίʔυͷࣗಈઃఆ
    wDFSUNBOBHFS
    5-4ূ໌ॻͷࣗಈઃఆ
27. ࠓޙͷ՝୊
28. ࠓޙͷ՝୊ wίʔυ1VTI͔Β؀ڥ΁ͷ൓ө׬ྃͷ௨஌͕෼͔Γʹ͍͘
    w"SHP$%
    /PUJpDBUJPOTͰεςʔλεΛ4MBDL௨஌͍ͯ͠Δ
    
29. ࠓޙͷ՝୊ wίʔυ1VTI͔Β؀ڥ΁ͷ൓ө׬ྃͷ௨஌͕෼͔Γʹ͍͘
    ɹʢଓ͖ʣ
    wͲͷίϛοτ·ͰϓϨϏϡʔ؀ڥͷίϯςφʹ൓ө͍ͯ͠Δ͔ ͕෼͔Γʹ͍͘
    wݫີʹ͸࣮ߦதͷίϯςφͷΠϝʔδλάΛݟΔ͔͠ͳ͍
    wར༻ऀ͸ॻ͍ͨίʔυ͕ѱ͍ͷ͔ɺ؀ڥʹ൓өͯ͠ͳ͍ͷ͔ ൑அʹ໎͏Մೳੑ͕͋Δ
30. ࠓޙͷ՝୊ wίʔυ1VTI͔Β؀ڥ΁ͷ൓ө·ͰͷλΠϜϥά͕ͦͦ͋͜͜Δ
    wΞϓϦͷ$*Λ1BTT
    wίϯςφΠϝʔδͷ#VJMEˍ1VTI
    w"SHP$%
    *NBHF
    6QEBUFS͕ݕ஌࣮͠ߦதͷίϯςφͷΠϝʔδ Λߋ৽
    wίϯςφΠϝʔδͷ1VMM
    wίϯςφͷϩʔϧΞ΢τ
31. ·ͱΊ w13ͷ࡞੒ΛτϦΨʔʹಈ࡞֬ೝ༻ͷϓϨϏϡʔ؀ڥΛ LVCFSOFUFT্ʹࣗಈੜ੒͍ͯ͠Δ
    w"SHP$%ͷઃఆϑΝΠϧΛੜ੒ˍϦϙδτϦʹ1VTI͢Δ͚ͩͰ׬ ͍݁ͯ͠Δ
    wϒϥϯνʹΞϓϦͷίʔυΛ1VTI͢Δ౓ʹΠϝʔδΛ #VJME1VTIͯ͠"SHP$%
    *NBHF
    6QEBUFSͰ؀ڥΛߋ৽͍ͯ͠Δ
    wϗετ໊Λ4FSWJDF
    %JTDPWFSZతʹੜ੒͠ɺ*OHSFTTͰެ։͢Δ 0QFSBUPSΛ։ൃͯ͠࢖͍ͬͯΔ
32. Ϋϥ΢υωΠςΟϒͳٕज़ʹڵຯ͕
    ͋Δํ͸ੋඇҰॹʹಇ͖·͠ΐ͏ʂ