Consulはなめらかか？

$POTVMͷ׆༻ํ๏࠶ߟ GMO Pepabo, Inc. Uchio Kondo E-Zuka Tech Night @
2016-05-18 $POTVM ͸ ͳΊΒ͔͔ʁ

ເͷ͖ͭͮ

ۙ౻͏͓ͪ (.0ϖύϘॴଐ ٕज़ج൫νʔϜ ෱Ԭࢧࣾۈ຿ 'VLVPLBSC
3BJMT(JSMT'VLVPLB૯߹ࡶ༻ίʔν·ͱΊ

ࣗಈԽ

ӡ༻ͷࣗಈԽ

ൿ఻ͷλϨ

खॱॻ

खॱʹखଓ͖ ʹϓϩάϥϛϯάͰ͖Δ

ࣗಈԽ

खॱॻˠ ࣗಈԽ

΋ͬͱࠜຊతͳϧʔϧ ʢʴࣗ཯ੑʣˠ ͳΊΒ͔ͳγεςϜ

͔ͳ❓

$POTVM

ΦʔέετϨʔγϣϯ

ΦʔέετϨʔγϣϯ ❓

*OGSBTUSVDUVSFBT$PEF Πϯϑϥͷ͓࢓ࣄΛɺίʔυͰ 0SDIFTUSBUJPO $POpHVSBUJPO #PPUTUSBQQJOH

*OGSBTUSVDUVSF0SDIFTUSBUJPO5PPMT 5FSSBGPSN΍$MPVE'PSNBUJPOͷΑ͏ͳɺ *BB4্ͰαʔόωοτϫʔΫετϨʔδͱ ͍ͬͨϦιʔεΛ੍ޚ͢ΔͨΊͷπʔϧ΍αʔ Ϗε $POTVM FUDE ;PP,FFQFSͷΑ͏ͳ
$POpHVSBUJPO3FHJTUSZ

SFGT *OGSBTUSVDUVSFBT$PEF࠶ߟ IUUQNJ[[ZPSHCMPH

$POpHVSBUJPO 3FHJTUSZ

ઃఆ߲໨Λ ෳ਺୆ͷαʔόͰڞ༗͢Δ

3BGU$POTFOTVT "MHPSJUIN

෼ࢄ߹ҙΞϧΰϦζϜ

4FFQBQFST IUUQTXXXVTFOJYPSHTZTUFNpMFT DPOGFSFODFBUDBUDQBQFS POHBSPQEG ೔ຊޠͰͷղઆ IUUQTHJTUHJUIVCDPNTJMF BEDFCGE

DGϒϩοΫνΣʔϯ ͯ͞ɺϒϩοΫνΣʔϯ͸૊৫త෼ࢄܕͷܥΛલఏͱͨ͠ ΋ͷͰ͢ɻͦͯ͠ɺෳ਺ͷࢀՃऀ͕ಉ͡ϒϩοΫ໦͔Βಉ ͡ϒϩοΫνΣʔϯΛܾఆ͢Δͱ͍͏ͷ͕ਖ਼ʹ߹ҙܗ੒Ͱ ͢ SFGTIUUQOFYUCMPDLDIBJOOFU CMPDLDIBJOBCJMJUZ

෼ࢄγεςϜʹ͓͚Δ߹ҙ ͱ͸

ެࣜͷઆ໌ )PMEPOXIBUJTDPOTFOTVT $POTFOTVTJOWPMWFTNVMUJQMFTFSWFSTBHSFFJOHPO WBMVFT IUUQTSBGUHJUIVCJP

ෳ਺ͷαʔό͕ ಉ͡஋ʹ͍ͭͯ߹ҙ͢Δ

ز͔ͭͷαʔό͕ յΕ͍ͯͯ΋ɺ ͪΌΜͱ߹ҙͰ͖Δ DG2VPSVN IUUQTXXXDPOTVMJPEPDTJOUFSOBMTDPOTFOTVTIUNM

εςʔτϚγϯͷෳ੡

IUUQTDPNNPOTXJLJNFEJBPSHXJLJ'JMF$15'4..FBMZTWH

DG3BGUͷ3VCZ࣮૷ IUUQTHJUIVCDPNDFMMVMPJEqPTT '4.ͱͯ͠ϋογϡΛ࢖ͬͨྫ

$POTVMͱ͸ ߹ҙΞϧΰϦζϜΛ༻͍ͯෳ਺୆ͷαʔόؒͰ εςʔτΛڞ༗͠ɺ ͦΕΛ༻͍ͯαʔόӡ༻ͷࣗಈԽΛߦ͏͜ͱ΋ Ͱ͖Δπʔϧ

FHDPOTVMFYFDͷத਎ ίϚϯυͷத਎Λ,74Ͱڞ༗͢Δ ड͚औͬͨϊʔυ͸ͦΕΛ࣮ߦ͢Δ ऴΘͬͨΒফ͢

Πϕϯτ

Ϋϥελͷ ঢ়ଶͷมԽΛ؂ࢹ

XBUDIͰ͖Δ΋ͷ ͬ͘͟Γͭ OPEFTϊʔυͷ௥Ճ࡟আ TFSWJDFTϊʔυͰಈ͘αʔϏεͷঢ়ଶ DIFDLTϊʔυ্ͷαʔϏεͷϔϧενΣοΫ؂ࢹͷঢ় ଶ
LFZLFZQSFpYϊʔυؒͰڞ༗͍ͯ͠Δ,74ͷத਎ FWFOU೚ҙͷΠϕϯτ

ྫͰ͢

ϩʔυόϥϯαʔͷ ಈతϝϯόʔ௥Ճ

͓खॱ ϝϯόʔҰཡΛ؂ࢹ͢Δ Ұཡͷσʔλ͸+40/ͰಘΒΕΔ ͦΕΛ3VCZͳͲͰ৯΂ͯઃఆϑΝΠϧΛࣗಈ Ͱ࡞Ε͹0,

ϝϯόʔҰཡΛ؂ࢹ > consul watch -type checks -service nginx

Ұཡͷσʔλ͸+40/ͰಘΒΕΔ Πϕϯτʹ  ϊʔυͷ௥Ճ࡟আɺ  ϔϧενΣοΫͷঢ়ଶมߋ Πϕϯτ͕ى͜Δͱ  ࣗಈͰ+40/͕೚ҙͷ  ίϚϯυʹ౉͍ͬͯ͘

ͦΕΛ3VCZͳͲͰ৯΂ͯ ઃఆϑΝΠϧΛࣗಈͰ࡞Ε͹0, ʢੜ੒ʹ੒ޭͨ͠ΒϦϩʔυʣ

#!/usr/bin/env ruby require 'json' data = STDIN.read @nodes = []
JSON.parse(data).each do |node| if node["Checks"].find {|c| c["CheckID"] == "service:nginx" && c["Status"] == "passing" } @nodes << "#{c["Node"]["Address"]}:#{c["Service"]["Port"]}" end end template = <<ERB upstream backend_apps { <% for node in @nodes %> server <%= node %>; <% end %> } server { listen 80; # .... location / { proxy_pass http://backend_apps; } } ERB require 'erb' open("/etc/nginx/dynamic.conf", "w") do |f| f.write ERB.new(template).run(binding) end

ࢀߟ DPOTVMUFNQMBUFͱ͍͏΍͕ͭதͰେମಉ͡ ͜ͱΛ͍ͯ͠·͢ IUUQTHJUIVCDPNIBTIJDPSQDPOTVM UFNQMBUF

΋ͬͱ۩ମྫ

ྫTUSFUDIFS

TUSFUDIFS QVMMܕσϓϩΠϛυϧ΢ΣΞͷύΠΦχΞ IUUQTHJUIVCDPNGVKJXBSBTUSFUDIFS !GVKJXBSB͞Μ࡞ɺ(P੡

͓खॱ σϓϩΠΠϕϯτΛൃՐ͢Δ ˠT͔ΒϚχϑΣετΛऔΔ ˠUBSCBMMΛऔΔ ˠల։ɺޙॲཧ

σϓϩΠΠϕϯτͷൃՐ > consul event -name deploy_production ˞Ұճ͚ͩൃߦ͢Ε͹0,

֤αʔόʔ ͦΕͧΕͷαʔόͰconsul watchͷίϚϯ υΛɺσʔϞϯͱ্ཱ͓ͯͪ͛ͯ͘͠ ൃՐͨ͠ΠϕϯτΛड͚औͬͯιʔεΛQVMM ͦͯ͠ల։ɺඞཁʹԠ͡ΞϓϦͷϦϩʔυ
αʔόʔ͕୆ʹͳͬͯ΋ඇৗʹ୹͍࣌ؒͰ ൓ө͞ΕΔΑ͏ʹͰ͖Δ

ྫ5-4TFTTJPO UJDLFUͷڞ༗

5-4TFTTJPOUJDLFUͱ͸ 5-4ͷηογϣϯ伴Λอଘ͠ɺ࠶ར༻͢Δ࢓૊ Έ͕͋Δɻ ͦͷࡍɺෳ਺ͷαʔόͷ৔߹ɺ҉߸ԽͷͨΊͷ Ϛελ伴Λڞ༗͢Δඞཁ͕͋Δ ˠલํൿಗੑͷ؍఺͔Βɺఆظߋ৽͕ඞཁ
ˠ͔͠΋શ୆ಉ࣌ʹʂ ࢀߟCMPHLB[VIPPLVDPNGPSXBSETFDSFDZIUNM

ΠϕϯτΛλΠϚʔʹ࢓ֻ͚Δ FHTZTUFNEͷλΠϚʔϢχοτ

ൃՐˠߋ৽ˠϦϩʔυ গ͚ͩ͠λΠϜϥά͕͋Δͱͳ͓Α͠ #!/bin/bash set -x ( sleep $(($RANDOM %
30)) && \ cat | jq -r .[-1].Payload | base64 -d > /var/lib/nginx_tls_session_ticket.key && \ systemctl reload nginx && echo reload OK ) || curl -d 'channel=#XXXX' -d "message=Failed reload: $(hostname)" notifier.local/notice

ࢀߟ $POTVMΛར༻ͨ͠5-4ηογϣϯνέοτͷ ࣗಈߋ৽ IUUQUFDINFSDBSJDPNFOUSZ

ྫDPMMFDUPS

DG7*1ʹΑΔՄ༻ੑͷ֬อ ୆ͷαʔόͷલʹ7*1ΛׂΓৼΔྫ GPPVE[VSBKQ"

7*1ͷσϝϦοτ /୆த.୆ͷ*1Λάϩʔόϧ*1ͱ͚ͯͭ͠Δɺ ͱ͍͏͜ͱ͕೉͍͠ɻ %/4ϥ΢ϯυϩϏϯͱͷ૬ੑ͕ѱ͍ ͋ΔυϝΠϯ͕/ݸͷ*1Λ͍࣋ͬͯΔͱ͖ɺ  ࣮αʔό͸/ݸҎ্ඞཁʹͳͬͯ͠·͏

͡Ό͋ಈతʹ %/4Λߋ৽ͯ͠Έͯ͸ʁ

DPMMFDUPSͷத਎ ΫϥΠΞϯτ DPOTVMͷϔϧενΣοΫͰ࢖͏ ίϯγϡʔϚʔ DPOTVMXBUDIͰ্ཱ͓ͪ͛ͯ͘

ϔϧενΣοΫʹߋ৽ͷͨΊͷ*1ΛؚΊΔ

DIFDLΛ؂ࢹͯ͠มߋΛऔಘ͢Δ check watch

ͦͷ಺༰͔Β%/4 3PVUF Λୟ͘ watch GPPVE[VSBKQ" GPPVE[VSBKQ" GPPVE[VSBKQ"

௨஌ػೳ΋ೖΕͯ·͢

ઃܭࢥ૝ %/4ΩϟογϡͳͲʹΑΔҰ࣌తͳෆ௨͸ڐ༰ ར༻ͷ্Ͱ͸ɺ55-Λ୹͘͢Δ΂͖ සൟͳߋ৽ʹ͸޲͔ͳ͍

ৄࡉ͸ ࢖ͬͯΈͯͶ IUUQTHJUIVCDPNVE[VSBDPMMFDUPS

·ͱΊ

$POTVM͸࣮͸γϯϓϧʂ

"*ͱ͸ؔ܎͕ͳ͍ ʜ

"*Λۦಈ͢ΔԿ͔͠Βͷج൫ʹ ࢖͑Δ͔΋͠Εͳ͍͕ɺΞΠσΞ࣍ୈ

͝੩ௌ ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ

օ༷ͷΑ͏ͳ ༏लͳएऀΛ଴ͭ

ը૾ʹ͍ͭͯ ϑϦʔΞΠίϯ IUUQTDPNNPOTXJLJNFEJBPSHXJLJ'JMF4FSWFS NVMUJQMFTWH IUUQTDPNNPOTXJLJNFEJBPSHXJLJ 'JMF$PNQVUFSCMVFTWH
ͦͷଞɺϩΰɺΞΠίϯ͸֤ࣾɾஂମʹݖར͕͋Γ·͢ɻ  Ҿ༻ͷൣғͰར༻͍ͯ͠·͢ɻ

Consulはなめらかか？

Consulはなめらかか？

More Decks by KONDO Uchio

Other Decks in Technology

Featured

Transcript