エンジニア向けSaaSを支えるInfrastructure as Code

YAP(achimon)C::Asia Hachioji 2016 Day2

Transcript

1. ΤϯδχΞ޲͚SaaSΛࢧ͑Δ
   Infrastructure as Code
   YAP(achimon)C::Asia Hachioji 2016 Day2
   

   View Slide

2. ࣗݾ঺հ
   • ౉ᬒҰਅ (@wata727_)
   • Engineer in Actcat, Inc.

   ΠϯϑϥدΓαʔόαΠυ
   

   View Slide

3. ࠷ॳʹ
   

   View Slide

4. ཧ૝ͱݱ࣮
   

   View Slide

5. ImmutableͰ͋Δ͜ͱͷ೉͠͞
   • ࠷ॳ͸Immutable Infrastructureʹ͍ͭͯτʔ
   Ϋ͢Δͭ΋Γͩͬͨ
   • ࣮ݱ͢ΔͨΊʹ͸՝୊͕ଟ͗ͨ͢ʢޙड़ʣ
   

   View Slide

6. ΤϯδχΞ޲͚
   SaaS
   

   View Slide

7. SideCI
   

   View Slide

8. SideCI
   ࣗಈίʔυϨϏϡʔ
   

   View Slide

9. GitHub࿈ܞ
   

   View Slide

10. https://github.com/integrations/sideci
    

    View Slide

11. ࠓ೔ͷ͓࿩
    • SideCIͷAWSҠߦࣄྫ
    • Πϯϑϥͷӡ༻ํࣜΛબ୒ͨ͠࿩
    • ࣮ݱ͢ΔͨΊͷInfrastructure as Code
    

    View Slide

12. AWS΁ͷҠߦ
    

    View Slide

13. Ҏલͷߏ੒
    

    View Slide

14. ϋΠϒϦοτΫϥ΢υߏ੒
    • AWS + GCP
    • VPNͰ઀ଓͯ͠ωοτϫʔΫΛߏங
    • Ұํͷϕϯμʔͷো֐ͰαʔϏε͕མͪΔ͜
    ͱ͕͋ͬͯɺҰຊԽ͍ͨ͠ͱ͍͏࿩͕͋ͬͨ
    

    View Slide

15. Ҡߦͷ՝୊
    

    View Slide

16. ߏ੒؅ཧ͞Ε͍ͯͳ͍
    • Ҿ͖ܧ͕Εͨखॱॻ.mdͷΈ
    • νʔϜ͕εέʔϧ͢ΔͱଐਓԽͷ໰୊Λট͖
    ͦ͏ͱ͍͏ผͷ໰୊΋…
    • ԿΒ͔ͷࣗಈԽ͕ඞཁ
    

    View Slide

17. ߏ੒؅ཧ͞Ε͍ͯͳ͍
    • Ҿ͖ܧ͕Εͨखॱॻ.mdͷΈ
    • νʔϜ͕εέʔϧ͢ΔͱଐਓԽͷ໰୊Λট͖
    ͦ͏ͱ͍͏ผͷ໰୊΋…
    • ԿΒ͔ͷࣗಈԽ͕ඞཁ
    Infrastructure as Code
    Λ΍Δͧʂʂ
    

    View Slide

18. Πϯϑϥͷ
    ӡ༻ํࣜͷબ୒
    

    View Slide

19. Ͳ͏΍ͬͯίʔυԽ͢Δ͔
    • ·ͣ͸ΠϯϑϥɺσϓϩΠͷ؅ཧɺӡ༻ΛͲ
    ͏͢Δ΂͖͔ߟ͔͑ͯΒɺπʔϧΛબ୒͢Δ
    • PushܕɺPullܕɺImmutable…
    

    View Slide

20. Pushܕ
    

    View Slide

21. Pushܕͷӡ༻ɺσϓϩΠ
    • ΫϥΠΞϯτ͔Β֤αʔόʹϛυϧ΢ΣΞม
    ߋ΍ΞϓϦέʔγϣϯͷσϓϩΠΛSSHܦ༝
    ͳͲͰߦ͏
    • Ansible, Itamae, CapistranoͳͲ
    

    View Slide

22. Pushܕͷӡ༻ɺσϓϩΠ
    

    View Slide

23. Pushܕͷӡ༻ɺσϓϩΠ
    

    View Slide

24. ϝϦοτͱσϝϦοτ
    • ΫϥΠΞϯτͷΈͰಈ࡞͢ΔͷͰαʔόଆʹ
    ઃఆ͕ෆཁͰ؅ཧָ͕
    • αʔόͷ୆਺͕ଟ͔ͬͨΓɺΦʔτεέʔϦ
    ϯάͰ૿ݮ͢Δͱద༻͕೉͘͠ͳΔ
    

    View Slide

25. Pullܕ
    

    View Slide

26. Pullܕͷӡ༻ɺσϓϩΠ
    • ֤αʔό͕ࣗ෼Ͱඞཁͳϛυϧ΢ΣΞɺΞϓ
    ϦέʔγϣϯͷมߋΛࣗ෼ࣗ਎ʹద༻͢Δ
    • Chef, AWS CodeDeploy, StretcherͳͲ
    

    View Slide

27. Pullܕͷӡ༻ɺσϓϩΠ
    

    View Slide

28. Pullܕͷӡ༻ɺσϓϩΠ
    

    View Slide

29. Pullܕͷӡ༻ɺσϓϩΠ
    

    View Slide

30. ϝϦοτͱσϝϦοτ
    • ֤αʔό͕੹຿Λ࣋ͭͷͰεέʔϧ͢ΔɺΦʔ
    τεέʔϦϯάͰ΋౰વ໰୊ͳ͠
    • ֤αʔόʹର͢Δ഑෍ݩͱͳΔαʔό͕SPOF
    ʹͳΓ͕ͪͳͷͰɺ৑௕ԽͳͲߟ͑Δͱϝϯ
    ςφϯείετ͕ߴ͍
    

    View Slide

31. Immutable
    

    View Slide

32. Immutableͳӡ༻ɺσϓϩΠ
    • ֤αʔό͸࠷ॳ͔ΒมߋࡁΈͰɺมߋΛཁ͢
    Δ৔߹ʹ͸αʔό͝ͱഁغ͢Δ
    • ؔ࿈πʔϧ͸Packer, DockerͳͲ
    

    View Slide

33. Immutableͳӡ༻ɺσϓϩΠ
    

    View Slide

34. Immutableͳӡ༻ɺσϓϩΠ
    

    View Slide

35. ϝϦοτͱσϝϦοτ
    • ֤αʔό͸׬શʹෳ੡ՄೳͰɺϩʔϧόοΫ
    ͕༰қʢBlue-Green Deployʣ
    • ΰʔϧσϯΠϝʔδͷੜ੒ίετ͕ߴ͍
    

    View Slide

36. Immutableͳ
    ํࣜͷ࠾༻
    

    View Slide

37. ΰʔϧσϯΠϝʔδͷϏϧυ
    • αʔϏεΠϯՄೳͳϚγϯΠϝʔδΛ౎౓
    PackerͰϏϧυ͢Δ
    • αʔϏεΠϯՄೳͰ͋Δ͜ͱ͸PackerͷϏϧ
    υͷ࠷ޙʹServerspecΛ࣮ߦͯ͠୲อ͢Δ
    

    View Slide

38. ImmutableͳσϓϩΠ
    • ৽͍͠ϚγϯΠϝʔδ͝ͱʹαʔόΛBlue-
    GreenతʹೖΕସ͑Δ
    • TerraformʹΑΔαʔό࠶഑ஔͷࣗಈԽ
    • طଘͷϦιʔε͸TerraformingͰநग़
    

    View Slide

39. αʔόߏஙϑϩʔ
    QBDLFSCVJMETFSWFSKTPO
    

    View Slide

40. QBDLFSCVJMETFSWFS KTPO
    Server
    ݩʹͳΔ
    αʔόͷىಈ
    αʔόߏஙϑϩʔ
    

    View Slide

41. αʔόߏஙϑϩʔ
    QBDLFSCVJMETFSWFS KTPO
    Server
    αʔόΛߏங
    QSPWJTJPOFST
    \
    UZQFTIFMM
    FYFDVUF@DPNNBOE\\7BST^^TVEP&CBTIF
    \\1BUI^^\\VTFSAFOWJSPONFOUA^^
    TDSJQUT
    TDSJQUTSPPU@VQHSBEFTI
    TDSJQUTSPPU@JOTUBMMTI
    >
    ^
    ʜ
    

    View Slide

42. αʔόߏஙϑϩʔ
    QBDLFSCVJMETFSWFS KTPO
    Server
    4FSWFSTQFDͰ
    ಈ࡞ςετ
    

    View Slide

43. αʔόߏஙϑϩʔ
    QBDLFSCVJMETFSWFS KTPO
    Server
    Machine Image
    αʔό͔ΒϚγϯ
    ΠϝʔδΛநग़
    

    View Slide

44. αʔόߏஙϑϩʔ
    QBDLFSCVJMETFSWFS KTPO
    Machine Image
    αʔόΛ࡟আ
    

    View Slide

45. αʔόߏஙϑϩʔ
    UFSSBGPSNBQQMZ
    Machine Image
    

    View Slide

46. αʔόߏஙϑϩʔ
    UFSSBGPSNBQQMZ
    Machine Image
    ݩʹͳΔϚγϯ
    ΠϝʔδΛࢦఆ
    

    View Slide

47. αʔόߏஙϑϩʔ
    UFSSBGPSNBQQMZ
    Machine Image
    Security Group
    ࢖༻͢ΔηΩϡϦςΟ
    άϧʔϓΛࢦఆ
    

    View Slide

48. αʔόߏஙϑϩʔ
    UFSSBGPSNBQQMZ
    Machine Image
    Security Group
    Server
    ͦΕͧΕͷઃఆ͔Β
    αʔόΛىಈ
    

    View Slide

49. ໰୊ൃੜ
    

    View Slide

50. ΠϝʔδͷϏϧυ͕஗͗͢Δ
    • 30෼͘Β͍͔͔Δ
    • σϓϩΠͷ଎౓͕2෼ˠ30෼ʙͱ͔ʹͳΔ
    • ϦϦʔεʹର͢Δ఍߅ײͷ૿େ
    

    View Slide

51. σϓϩΠ͚ͩPushܕʹ
    • σϓϩΠ͸ैདྷ௨ΓCapistrano
    • ϛυϧ΢ΣΞมߋ࣌ͷΈϚγϯΠϝʔδΛߋ
    ৽͢ΔΑ͏ʹมߋ
    

    View Slide

52. Ҡߦ࡞ۀͷ࣮ࢪ
    

    View Slide

53. ҠߦͷྲྀΕ
    • ฒྻͰࣄલʹϓϩμΫγϣϯ؀ڥΛՔಇͤ͞
    ͓ͯ͘ʢNOT εςʔδϯάʣ
    • ՄೳͳݶΓɺELBͱRoute53ͷ੾Γସ͚͑ͩͰ
    τϥϑΟοΫͷྲྀΕΛมߋ͢ΔΑ͏ʹ͢Δ
    

    View Slide

54. Ҡߦલ
    

    View Slide

55. Ҡߦޙ
    

    View Slide

56. ແࣄ׬ྃ
    

    View Slide

57. Infrastructure as
    CodeΛಋೖ͢Δ
    ͱ͍͏͜ͱ
    

    View Slide

58. ָͳӡ༻Λߟ͑Δ
    • ྫ͑͹ɺΠϝʔδͷϏϧυʹ͕͔͔࣌ؒΓ͢
    ͗ͨΓɺϏϧυͷͨΊʹෳࡶͳ؀ڥΛߏங͢
    Δඞཁ͕͋Δͱɺͳ͔ͳ͔ਁಁ͠ͳ͍
    • ·ͩ·ͩվળͷ༨஍͋Γ…
    

    View Slide

59. ن໛ʹ͋ͬͨํ๏ΛબͿ
    • AutoScalingΛඞཁͱ͠ͳ͍গ਺ͷαʔόͳΒ
    ͹PushܕͰे෼ͳ͜ͱ΋͋Δ
    • ͦΕͧΕʹదͨ͠πʔϧ͕͋ΔͷͰɺྲྀߦΓ
    ഇΓʹ࿭Θ͞Εͳ͍
    

    View Slide

60. Thank you!
    

    View Slide