Merge pull request 'Terraformerの記事を追加' (#78) from terraformer into master
Reviewed-on: #78
This commit is contained in:
commit
7de8a4bcd4
|
|
@ -0,0 +1,269 @@
|
|||
+++
|
||||
title = "terraformerを試しに使ってみましたよ"
|
||||
date = 2021-11-27T22:13:43+09:00
|
||||
description = "必要に迫られて[terraformer](https://github.com/GoogleCloudPlatform/terraformer)を使ってみました。`terraform import`をお手軽簡単にできるものみたいです。"
|
||||
tags = ["terraform"]
|
||||
categories = ["インフラ", "HashiCorp"]
|
||||
author = "kazu634"
|
||||
+++
|
||||
|
||||
必要に迫られて[terraformer](https://github.com/GoogleCloudPlatform/terraformer)を使ってみました。`terraform import`をお手軽簡単にできるものみたいです。
|
||||
|
||||
## terraformerとは
|
||||
各種クラウドサービスなどから、`Terraform`のコードを生成してくれるツールです。インフラからソースコードを生成します。
|
||||
|
||||
## 事前準備
|
||||
[terraformer](https://github.com/GoogleCloudPlatform/terraformer)を利用する前の準備作業を説明します。
|
||||
|
||||
### AWSのIAMユーザー作成
|
||||
今回はAWSからコードを生成するので、AWSから情報を取得するIAMユーザーを作成します。ポリシーは`ReadOnlyAccess`を割り当ててみました:
|
||||
|
||||
<a data-flickr-embed="true" href="https://www.flickr.com/photos/42332031@N02/51708608624/in/dateposted-public/" title="IAM Management C"><img src="https://live.staticflickr.com/65535/51708608624_6881a50569_z.jpg" width="640" height="491" alt="IAM Management C"></a><script async src="//embedr.flickr.com/assets/client-code.js" charset="utf-8"></script>
|
||||
|
||||
### AWS認証情報を設定ファイルに格納
|
||||
`~/.aws/credentials`に先ほど作成したIAMユーザーのアクセスキー・シークレットキーの情報、あとはリージョン情報を格納します:
|
||||
|
||||
```ini
|
||||
[default]
|
||||
aws_access_key_id=<ここにアクセスキー>
|
||||
aws_secret_access_key=<ここにシークレットキー>
|
||||
region=ap-northeast-1
|
||||
```
|
||||
|
||||
## terraformerのインストール
|
||||
それではインストールしていきます:
|
||||
|
||||
```bash
|
||||
kazu634@bastion2004% export PROVIDER=all
|
||||
kazu634@bastion2004% curl -LO https://github.com/GoogleCloudPlatform/terraformer/releases/download/$(curl -s https://api.github.com/repos/GoogleCloudPlatform/terraformer/releases/latest | grep tag_name | cut -d '"' -f 4)/terraformer-${PROVIDER}-linux-amd64
|
||||
% Total % Received % Xferd Average Speed Time Time Time Current
|
||||
Dload Upload Total Spent Left Speed
|
||||
100 666 100 666 0 0 2466 0 --:--:-- --:--:-- --:--:-- 2475
|
||||
100 358M 100 358M 0 0 21.0M 0 0:00:17 0:00:17 --:--:-- 26.9M
|
||||
kazu634@bastion2004% chmod +x terraformer-${PROVIDER}-linux-amd64
|
||||
kazu634@bastion2004% sudo mv terraformer-${PROVIDER}-linux-amd64 /usr/local/bin/terraformer
|
||||
[sudo] password for kazu634:
|
||||
```
|
||||
|
||||
## terraformerを使ってみる
|
||||
まずはAWSの情報を取得するということを宣言するようで、`init.tf`に`provider “aws” {}`を書き込み、`terraform init`を実行します:
|
||||
|
||||
```bash
|
||||
kazu634@bastion2004% echo 'provider "aws" {}' > init.tf
|
||||
kazu634@bastion2004% terraform init
|
||||
Initializing the backend...
|
||||
|
||||
Initializing provider plugins...
|
||||
- Finding latest version of hashicorp/aws...
|
||||
- Installing hashicorp/aws v3.67.0...
|
||||
- Installed hashicorp/aws v3.67.0 (signed by HashiCorp)
|
||||
|
||||
Terraform has created a lock file .terraform.lock.hcl to record the provider
|
||||
selections it made above. Include this file in your version control repository
|
||||
so that Terraform can guarantee to make the same selections by default when
|
||||
you run "terraform init" in the future.
|
||||
|
||||
Terraform has been successfully initialized!
|
||||
|
||||
You may now begin working with Terraform. Try running "terraform plan" to see
|
||||
any changes that are required for your infrastructure. All Terraform commands
|
||||
should now work.
|
||||
|
||||
If you ever set or change modules or backend configuration for Terraform,
|
||||
rerun this command to reinitialize your working directory. If you forget, other
|
||||
commands will detect it and remind you to do so if necessary.
|
||||
```
|
||||
|
||||
`Route53`の情報を取得する場合は、次のようにします:
|
||||
|
||||
```bash
|
||||
kazu634@bastion2004% terraformer import aws --resources=route53
|
||||
2021/11/27 21:25:49 aws importing default region
|
||||
2021/11/27 21:25:51 aws importing... route53
|
||||
2021/11/27 21:25:52 aws done importing route53
|
||||
2021/11/27 21:25:52 Number of resources for service route53: 16
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_kazu634-002E-com-002E-_NS_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_blog-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_pocket-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_minio-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_openvpn-002E-kazu634-002E-com-002E-_CNAME_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_git-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_kazu634-002E-com-002E-_SOA_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_blog-002E-kazu634-002E-com-002E-_CAA_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_grafana-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_gitea-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_test-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_g-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_faktory-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:52 Refreshing state... aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com
|
||||
2021/11/27 21:25:54 Refreshing state... aws_route53_record.tfer--ZI0FHD0611WVA_drone-002E-kazu634-002E-com-002E-_A_
|
||||
2021/11/27 21:25:55 Filtered number of resources for service route53: 16
|
||||
2021/11/27 21:25:55 aws Connecting....
|
||||
2021/11/27 21:25:55 aws save route53
|
||||
2021/11/27 21:25:55 aws save tfstate for route53
|
||||
```
|
||||
|
||||
すると`generated`というディレクトリーが作成され、その中に`terraform`のソースコードが格納されます:
|
||||
|
||||
```bash
|
||||
kazu634@bastion2004% ll
|
||||
total 28K
|
||||
drwxrwxr-x 4 kazu634 kazu634 4.0K Nov 27 21:25 .
|
||||
drwxr-xr-x 13 kazu634 kazu634 4.0K Nov 26 23:51 ..
|
||||
drwxrwxr-x 3 kazu634 kazu634 4.0K Nov 27 21:25 generated
|
||||
-rw-rw-r-- 1 kazu634 kazu634 18 Nov 27 00:54 init.tf
|
||||
drwxr-xr-x 3 kazu634 kazu634 4.0K Nov 27 00:54 .terraform
|
||||
-rw-r--r-- 1 kazu634 kazu634 1.1K Nov 27 00:54 .terraform.lock.hcl
|
||||
```
|
||||
|
||||
`generated`の中身はこのようになっています:
|
||||
|
||||
```bash
|
||||
kazu634@bastion2004% pwd
|
||||
/home/kazu634/works/mnt/others/terraformer/generated
|
||||
|
||||
aws
|
||||
└── route53
|
||||
├── outputs.tf
|
||||
├── provider.tf
|
||||
├── route53_record.tf
|
||||
├── route53_zone.tf
|
||||
└── terraform.tfstate
|
||||
|
||||
2 directories, 5 files
|
||||
```
|
||||
|
||||
たとえば`route53_record.tf`の中身はこのようになっています:
|
||||
|
||||
```bash
|
||||
kazu634@bastion2004% cat route53_record.tf
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_blog-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "blog.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "86400"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_blog-002E-kazu634-002E-com-002E-_CAA_" {
|
||||
name = "blog.kazu634.com"
|
||||
records = ["0 issue \"letsencrypt.org\""]
|
||||
ttl = "86400"
|
||||
type = "CAA"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_drone-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "drone.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_faktory-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "faktory.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_g-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "g.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_git-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "git.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_gitea-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "gitea.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_grafana-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "grafana.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_kazu634-002E-com-002E-_A_" {
|
||||
name = "kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_kazu634-002E-com-002E-_NS_" {
|
||||
name = "kazu634.com"
|
||||
records = ["ns-1111.awsdns-10.org.", "ns-469.awsdns-58.com.", "ns-720.awsdns-26.net.", "ns-1844.awsdns-38.co.uk."]
|
||||
ttl = "172800"
|
||||
type = "NS"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_kazu634-002E-com-002E-_SOA_" {
|
||||
name = "kazu634.com"
|
||||
records = ["ns-720.awsdns-26.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"]
|
||||
ttl = "900"
|
||||
type = "SOA"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_minio-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "minio.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_openvpn-002E-kazu634-002E-com-002E-_CNAME_" {
|
||||
name = "openvpn.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "CNAME"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_pocket-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "pocket.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
|
||||
resource "aws_route53_record" "tfer--ZI0FHD0611WVA_test-002E-kazu634-002E-com-002E-_A_" {
|
||||
name = "test.kazu634.com"
|
||||
records = ["52.193.98.253"]
|
||||
ttl = "3600"
|
||||
type = "A"
|
||||
zone_id = "${aws_route53_zone.tfer--ZI0FHD0611WVA_kazu634-002E-com.zone_id}"
|
||||
}
|
||||
```
|
||||
|
||||
## まとめ
|
||||
`terraform import`コマンドを使うと、AWSリソースのIDをいちいち調べて指定して、一つずつインポートするという苦行をしていたのですが、[terraformer](https://github.com/GoogleCloudPlatform/terraformer)を利用するとコマンド一発で`terraform`のコードに落とし込んでもらえるので、だいぶ楽になるということがわかりました。はまるとすると、IAMとかポリシーの部分ですかね。
|
||||
|
||||
## 参考
|
||||
- [Terraformerを使ってTerraformに既存インフラのリソースをインポートする \| 株式会社ビヨンド](https://beyondjapan.com/blog/2020/05/terraformer-import-existing-infrastructure/?utm_source=pocket_mylist)
|
||||
- [terraformerをmaster accountからassume roleでアクセス＆MFA必須なAWS環境で使う \- Qiita](https://qiita.com/nntsugu/items/c34fc5183e0b5ffdf88e?utm_source=pocket_mylist)
|
||||
- [設定ファイルと認証情報ファイルの設定](https://docs.aws.amazon.com/ja_jp/cli/latest/userguide/cli-configure-files.html)
|
||||
- [ubuntuでtreeコマンドを使う方法 – magazine off](https://off.tokyo/blog/ubuntu-tree/)
|
||||
Loading…
Reference in New Issue