AWSをテラフォーミングする会(Terraformハンズオン)
6 likes3,299 views
This document describes how to use Terraform to provision infrastructure on AWS. It outlines creating a VPC, subnets, security groups, an internet gateway, route tables, and EC2 instances and load balancer. The steps include initializing Terraform, running plan and apply commands, and cleaning up resources with destroy. Code blocks show how resources are defined using Terraform configuration files.
![SecurityGroup
security_group.tf
resource "aws_security_group" "terrafom_handson_instance_sg" {
name = "terraform_handson_instance_sg"
description = "TerraformHandson: instance"
vpc_id = "${aws_vpc.terraform_handson_vpc.id}"
ingress {
protocol = "tcp"
from_port = 22
to_port = 22
cidr_blocks = ["0.0.0.0/0"]
}
ingress {
protocol = "tcp"
from_port = 80
to_port = 80
cidr_blocks = ["0.0.0.0/0"]
}
egress {
protocol = "-1"
from_port = 0
to_port = 0
cidr_blocks = ["0.0.0.0/0"]
}
tags {
Name = "terraform_handson_instance_sg"
}
}](https://image.slidesharecdn.com/aws-160929035605/85/AWS-Terraform-44-320.jpg)
![resource "aws_security_group" "terraform_handson_elb_sg" {
name = "terraform_handson_elb_sg"
description = "TerraformHandson: elb"
vpc_id = "${aws_vpc.terraform_handson_vpc.id}"
ingress {
protocol = "tcp"
from_port = 80
to_port = 80
cidr_blocks = ["0.0.0.0/0"]
}
egress {
protocol = "-1"
from_port = 0
to_port = 0
cidr_blocks = ["0.0.0.0/0"]
}
tags {
Name = "terraform_handson_elb_sg"
}
}](https://image.slidesharecdn.com/aws-160929035605/85/AWS-Terraform-45-320.jpg)
![EC2
ec2.tf
resource "aws_instance" "terraform_handson_instance_a" {
ami = "ami-374db956"
instance_type = "t2.micro"
key_name = "terraform"
vpc_security_group_ids = ["${aws_security_group.terrafom_handson_instance_sg.id}"]
subnet_id = "${aws_subnet.terraform_handson_public_subnet_a.id}"
associate_public_ip_address = true
root_block_device {
volume_type = "gp2"
volume_size = 8
}
tags {
Name = "terraform_handson_instance_a"
}
user_data = <<EOF
#!/bin/bash
yum install nginx -y
uname -n > /usr/share/nginx/html/index.html
service nginx start
EOF
}](https://image.slidesharecdn.com/aws-160929035605/85/AWS-Terraform-46-320.jpg)
![resource "aws_instance" "terraform_handson_instance_c" {
ami = "ami-374db956"
instance_type = "t2.micro"
key_name = "terraform"
vpc_security_group_ids = ["${aws_security_group.terrafom_handson_instance_sg.id}"]
subnet_id = "${aws_subnet.terraform_handson_public_subnet_c.id}"
associate_public_ip_address = true
root_block_device {
volume_type = "gp2"
volume_size = 8
}
tags {
Name = "terraform_handson_instance_c"
}
user_data = <<EOF
#!/bin/bash
yum install nginx -y
uname -n > /usr/share/nginx/html/index.html
service nginx start
EOF
}](https://image.slidesharecdn.com/aws-160929035605/85/AWS-Terraform-47-320.jpg)
![ELB
elb.tf
resource "aws_elb" "terraform_handson_elb" {
name = "terraform-handson-elb"
subnets = [
"${aws_subnet.terraform_handson_public_subnet_a.id}",
"${aws_subnet.terraform_handson_public_subnet_c.id}"
]
security_groups = ["${aws_security_group.terraform_handson_elb_sg.id}"]
listener {
instance_port = 80
instance_protocol = "http"
lb_port = 80
lb_protocol = "http"
}
health_check {
healthy_threshold = 3
unhealthy_threshold = 3
timeout = 10
target = "HTTP:80/"
interval = 30
}
instances = [
"${aws_instance.terraform_handson_instance_a.id}",
"${aws_instance.terraform_handson_instance_c.id}"
]
cross_zone_load_balancing = true
idle_timeout = 60
connection_draining = true
connection_draining_timeout = 300
tags {
Name = "terraform_handson_elb"
}
}](https://image.slidesharecdn.com/aws-160929035605/85/AWS-Terraform-48-320.jpg)
AWSをテラフォーミングする会(Terraformハンズオン)
- 2. om732
- 6. 4 VPC 4 InternetGateway 4 Subnet 4 RouteTable 4 SecurityGroup 4 EC2 4 ELB
- 7. Terraform
- 9. Terraform
- 11. Github
- 12. > > Terraform>
- 13. Github CI
- 14. 4 terraform =
- 15. Terraform 4 dry-run $ terraform plan 4 $ terraform apply 2 ( )
- 18. terraform $ terraform version Terraform v0.7.4
- 19. AWS 1. IAM 2.
- 20. IAM
- 27. Terraform
- 31. ( ) terraform-handson ( )
- 33. 1. 2. terraform plan 3. 4. terraform apply 5. AWS
- 34. OK
- 35. VPC 1. 2. VPC 3. InternetGateway 4. Subnet 5. RouteTable
- 36. EC2 1. SecurityGroup 2. EC2 3. ELB
- 37. aws.tf provider "aws" { access_key = "xxxxxxxxxxxxxxxxxxxx" secret_key = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" region = "ap-northeast-1" }
- 38. VPC vpc.tf resource "aws_vpc" "terraform_handson_vpc" { cidr_block = "10.100.0.0/16" tags { Name = "terraform_handson_vpc" } }
- 39. InternetGateway internet-gateway.tf resource "aws_internet_gateway" "terraform_handson_igw" { vpc_id = "${aws_vpc.terraform_handson_vpc.id}" tags { Name = "terraform_handson_igw" } }
- 40. Subnet subnet.tf resource "aws_subnet" "terraform_handson_public_subnet_a" { vpc_id = "${aws_vpc.terraform_handson_vpc.id}" availability_zone = "ap-northeast-1a" cidr_block = "10.100.1.0/24" tags { Name = "terraform_handson_subnet_a" } } resource "aws_subnet" "terraform_handson_public_subnet_c" { vpc_id = "${aws_vpc.terraform_handson_vpc.id}" availability_zone = "ap-northeast-1c" cidr_block = "10.100.2.0/24" tags { Name = "terraform_handson_subnet_c" } }
- 41. RouteTable routetable.tf resource "aws_route_table" "terraform_handson_public_rt" { vpc_id = "${aws_vpc.terraform_handson_vpc.id}" route { cidr_block = "0.0.0.0/0" gateway_id = "${aws_internet_gateway.terraform_handson_igw.id}" } tags { Name = "terraform_handson_public_rt" } } resource "aws_route_table_association" "terraform_handson_public_rtassoc_a" { subnet_id = "${aws_subnet.terraform_handson_public_subnet_a.id}" route_table_id = "${aws_route_table.terraform_handson_public_rt.id}" } resource "aws_route_table_association" "terraform_handson_public_rtassoc_c" { subnet_id = "${aws_subnet.terraform_handson_public_subnet_c.id}" route_table_id = "${aws_route_table.terraform_handson_public_rt.id}" }
- 42. VPC
- 43. EC2
- 44. SecurityGroup security_group.tf resource "aws_security_group" "terrafom_handson_instance_sg" { name = "terraform_handson_instance_sg" description = "TerraformHandson: instance" vpc_id = "${aws_vpc.terraform_handson_vpc.id}" ingress { protocol = "tcp" from_port = 22 to_port = 22 cidr_blocks = ["0.0.0.0/0"] } ingress { protocol = "tcp" from_port = 80 to_port = 80 cidr_blocks = ["0.0.0.0/0"] } egress { protocol = "-1" from_port = 0 to_port = 0 cidr_blocks = ["0.0.0.0/0"] } tags { Name = "terraform_handson_instance_sg" } }
- 45. resource "aws_security_group" "terraform_handson_elb_sg" { name = "terraform_handson_elb_sg" description = "TerraformHandson: elb" vpc_id = "${aws_vpc.terraform_handson_vpc.id}" ingress { protocol = "tcp" from_port = 80 to_port = 80 cidr_blocks = ["0.0.0.0/0"] } egress { protocol = "-1" from_port = 0 to_port = 0 cidr_blocks = ["0.0.0.0/0"] } tags { Name = "terraform_handson_elb_sg" } }
- 46. EC2 ec2.tf resource "aws_instance" "terraform_handson_instance_a" { ami = "ami-374db956" instance_type = "t2.micro" key_name = "terraform" vpc_security_group_ids = ["${aws_security_group.terrafom_handson_instance_sg.id}"] subnet_id = "${aws_subnet.terraform_handson_public_subnet_a.id}" associate_public_ip_address = true root_block_device { volume_type = "gp2" volume_size = 8 } tags { Name = "terraform_handson_instance_a" } user_data = <<EOF #!/bin/bash yum install nginx -y uname -n > /usr/share/nginx/html/index.html service nginx start EOF }
- 47. resource "aws_instance" "terraform_handson_instance_c" { ami = "ami-374db956" instance_type = "t2.micro" key_name = "terraform" vpc_security_group_ids = ["${aws_security_group.terrafom_handson_instance_sg.id}"] subnet_id = "${aws_subnet.terraform_handson_public_subnet_c.id}" associate_public_ip_address = true root_block_device { volume_type = "gp2" volume_size = 8 } tags { Name = "terraform_handson_instance_c" } user_data = <<EOF #!/bin/bash yum install nginx -y uname -n > /usr/share/nginx/html/index.html service nginx start EOF }
- 48. ELB elb.tf resource "aws_elb" "terraform_handson_elb" { name = "terraform-handson-elb" subnets = [ "${aws_subnet.terraform_handson_public_subnet_a.id}", "${aws_subnet.terraform_handson_public_subnet_c.id}" ] security_groups = ["${aws_security_group.terraform_handson_elb_sg.id}"] listener { instance_port = 80 instance_protocol = "http" lb_port = 80 lb_protocol = "http" } health_check { healthy_threshold = 3 unhealthy_threshold = 3 timeout = 10 target = "HTTP:80/" interval = 30 } instances = [ "${aws_instance.terraform_handson_instance_a.id}", "${aws_instance.terraform_handson_instance_c.id}" ] cross_zone_load_balancing = true idle_timeout = 60 connection_draining = true connection_draining_timeout = 300 tags { Name = "terraform_handson_elb" } }
- 49. $ terraform plan -destroy $ terraform destroy plan
- 50. 4 AWS git 4 OS tf 4 credentials
- 51. 4 4 state 4 terraform 4 4 terraform