TerraformとGitHub Actionsで手軽に実装するECSのCI/CD

Transcript

1. 5FSSBGPSNͱ(JU)VC
   "DUJPOTͰ
   खܰʹ࣮૷͢Δ&$4ͷ$*$% 
   +"846(
   ಢ໦
   
   ߴ໦݈

2. ࣗݾ঺հ • ໊લɿߴ໦݈ • ॴଐɿओʹ৯඼Λച͍ͬͯΔECاۀ • ϩʔϧɿSite Reliability Engineer (SRE)

   • झຯɿεʔύʔમ౬ɺΩϟϯϓɺϥʔϝϯ

3. ຊεϥΠυͰऔΓѻ͏ൣғ w ࿩͢͜ͱ
   w &$4ʹσϓϩΠ͢ΔΞϓϦέʔγϣϯͷ$*$%
   w ࿩͞ͳ͍͜ͱ
   w &$4Ϋϥελࣗମ΍"-#ͳͲΠϯϑϥͷ$*$%
   w

   πʔϧΛ࢖͏ͨΊͷৄࡉͳखॱ΍ίʔυͷ࣮૷಺༰

4. &$4ͷ$*$%ࣄྫΛௐ΂͍ͯ͘

5. &$4ͷ$*$%ͷ͞·͟·ͳબ୒ࢶ w "84
   $PEFγϦʔζ
   w $PEF$PNNJU
   ˞Λ΋ͬͯ৽نར༻ͷड෇Λऴྃʣ
   w $PEF#VJME
   w $PEF%FQMPZ
   

   w $PEF1JQFMJOF
   w (JU)VC
   "DUJPOT
   w FDTQSFTTP
   w IUUQTHJUIVCDPNLBZBDFDTQSFTTP
   w "84
   $PQJMPU બ୒ࢶ͕ଟ͍ʂ
   σϑΝΫτͱݴ͑Δ΋ͷ͸ແͦ͞͏

6. νʔϜͷεΩϧηοτ΍
   ߏஙͷ༰қ͞౳Λߟྀ

7. ͨͲΓண͍ͨߏ੒

8. ͨͲΓண͍ͨߏ੒ NBJOϒϥϯν΁ͷQVTIΛτϦΨʔʹ %PDLFS fi MFͷϏϧυɺ&$3΁ͷQVTIɺ FTQSFTTP
   EFQMPZΛ࣮ߦ
   ίϯςφΠϝʔδͷλάΛ
   ίϛοτϋογϡʹ͢Δ͜ͱͰ
   τϨʔαϏϦςΟΛ֬อ
   

9. ͨͲΓண͍ͨߏ੒ 5FSSBGPSNͷ੹೚ൣғ
   σʔλετΞʹ"84αʔϏεΛ࠾༻ ͢Δ৔߹
   

10. ͨͲΓண͍ͨߏ੒ FDTQSFTTPͷ੹೚ൣғ

11. FDTQSFTTPͷ࢖͍ํ w ͭͷϑΝΠϧΛ༻ҙ͢Δ
    w $-*
    AFDTQSFTTPA
    ίϚϯυͰ&$4αʔϏεɾλεΫʹؔ͢Δૢ࡞ &$4ͷαʔϏεఆٛ &$4ͷλεΫఆٛ FDTQSFTTPͷઃఆ

12. FDTQSFTTPΛ࢖͏͜ͱͷخ͠͞ w ϥΠϑαΠΫϧ͕ҟͳΔΞϓϦͱΠϯϑϥͷڥք͕໌֬
    w සൟʹߋ৽͞ΕΔΞϓϦ
    w ΞϓϦ΄Ͳසൟʹߋ৽͞Εͳ͍Πϯϑϥ
    w 5FSSBGPSN
    4UBUFΛࢀরͯ͠γʔϜϨεʹ࿈ܞՄೳ ecspresso.yaml

13. - aws-actions/configure-aws-credentials - aws-actions/amazon-ecr-login - docker/setup-buildx-actio - docker/build-push-action - kayac/ecspresso

    - shell: ecspresso deploy w ͭͷ"DUJPOT TIFMMΛར༻ (JU)VC
    "DUJPOTͷ࣮૷

14. w 3FTPVSDF
    w Ϋϥ΢υϦιʔεͷఆٛ
    w 5FSSBGPSN
    .PEVMF
    w ෳ਺ͷϦιʔεΛ·ͱΊͯఆٛ͢ΔςϯϓϨʔτͷΑ͏ͳ΋ͷ
    w 5FSSBGPSN
    3FHJTUSZ
    

    w )BTIJ$PSQͷެࣜ΍ϢʔβʔίϛϡχςΟ͕࡞੒ͨ͠.PEVMF͕ެ ։͞Ε͍ͯΔϨδετϦ 5FSSBGPSNͷ࣮૷

15. w 3FTPVSDF
    w Ϋϥ΢υϦιʔεͷఆٛ
    w 5FSSBGPSN
    .PEVMF
    w ෳ਺ͷϦιʔεΛ·ͱΊͯఆٛ͢ΔςϯϓϨʔτͷΑ͏ͳ΋ͷ
    w 5FSSBGPSN
    3FHJTUSZ
    

    w )BTIJ$PSQͷެࣜ΍ϢʔβʔίϛϡχςΟ͕࡞੒ͨ͠.PEVMF͕ެ ։͞Ε͍ͯΔϨδετϦ 3FTPVSDFΛԿݸ΋ॻ͘ͷ͸େมʜ 5FSSBGPSNͷ࣮૷

16. w 3FTPVSDF
    w Ϋϥ΢υϦιʔεͷఆٛ
    w 5FSSBGPSN
    .PEVMF
    w ෳ਺ͷϦιʔεΛ·ͱΊͯఆٛ͢ΔςϯϓϨʔτͷΑ͏ͳ΋ͷ
    w 5FSSBGPSN
    3FHJTUSZ
    

    w )BTIJ$PSQͷެࣜ΍ϢʔβʔίϛϡχςΟ͕࡞੒ͨ͠.PEVMF͕ެ ։͞Ε͍ͯΔϨδετϦ ࣗ෼Ͱ࡞ͬͯϝϯςφϯε͢Δͷ͸େมʜ 5FSSBGPSNͷ࣮૷

17. w 3FTPVSDF
    w Ϋϥ΢υϦιʔεͷఆٛ
    w 5FSSBGPSN
    .PEVMF
    w ෳ਺ͷϦιʔεΛ·ͱΊͯఆٛ͢ΔςϯϓϨʔτͷΑ͏ͳ΋ͷ
    w 5FSSBGPSN
    3FHJTUSZ
    

    w )BTIJ$PSQͷެࣜ΍ϢʔβʔίϛϡχςΟ͕࡞੒ͨ͠.PEVMF͕ެ ։͞Ε͍ͯΔϨδετϦ ؆୯ʹ"84Ϧιʔεͷߏங͕Մೳʂ
    ͋Γ͕ͨ͘࢖Θ͍ͤͯͨͩ͘ 5FSSBGPSNͷ࣮૷ ѹ౗తײँͬɾɾɾʂ

18. w 5FSSBGPSN
    3FHJTUSZͷ.PEVMFΛར༻ - terraform-aws-modules/ecs/aws - terraform-aws-modules/ecr/aws - terraform-aws-modules/autoscaling/aws - terraform-aws-modules/security-group/aws

    - terraform-aws-modules/alb/aws - terraform-aws-modules/acm/aws - terraform-aws-modules/route53/aws 5FSSBGPSNͷ࣮૷

19. ͨͲΓண͍ͨߏ੒ ίϛϡχςΟʹΑͬͯϝϯςφϯε͞ΕΔ
    5FSSBGPSN
    .PEVMFͱ(JU)VC
    "DUJPOTͰ
    $*$%·ͰؚΊͨ&$4ΞϓϦέʔγϣϯΛ࣮૷ʂ
    ίϛϡχςΟʹײँʂ