Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kubonakala ngathi abaphuhlisi beTerraform babonelela ngezona ndlela zilungileyo zokusebenza kunye neziseko zophuhliso ze-AWS. Kukho i-nuance nje. Ngokuhamba kwexesha, inani leemo engqongileyo liyanda, nganye ineempawu zayo. Phantse ikopi yesitaki sesicelo ibonakala kwingingqi ekufutshane. Kwaye ikhowudi yeTerraform kufuneka ikopishwe ngononophelo kwaye ihlelwe ngokweemfuno ezintsha okanye yenziwe kwikhephu.

Intetho yam malunga neepateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla kwiiprojekthi ezinkulu nezinde.

Ividiyo:

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ndineminyaka engama-40, ndikwi-IT iminyaka engama-20. Ndisebenze kwa-Ixtens iminyaka eyi-12. Sizibandakanye nophuhliso lwe-ecommerce. Kwaye bendiziqhelanisa neDevOps iminyaka emi-5.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ibali lam liya kuba malunga namava am kwiprojekthi kwinkampani endingayi kuthetha igama layo, ifihla emva kwesivumelwano sokungabhengezi.

Amanani akwisilayidi abonisiwe ukuze kuqondwe isikali seprojekthi. Kwaye yonke into endiza kuyithetha ngokulandelayo inxulumene neAmazon.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ndajoyina le projekthi kwiminyaka eyi-4 eyadlulayo. Kwaye ukulungiswa kwakhona kweziseko zophuhliso kwakuguquguquka ngokupheleleyo kuba iprojekthi yayikhulile. Kwaye iipateni ezazisetyenziswa zazingasafaneleki. Kwaye ngenxa yokukhula okucwangcisiweyo kweprojekthi, kwakuyimfuneko ukuza nento entsha.

Enkosi kuMatvey, osixelele izolo okwenzeka eDodo Pizza. Oku kwenzeka apha kwiminyaka eyi-4 eyadlulayo.

Abaphuhlisi beza kwaye baqala ukwenza ikhowudi yeziseko zophuhliso.

Ezona zizathu zicacileyo zokuba kutheni le nto yayifuneka yayilixesha lokuthengisa. Kwakuyimfuneko ukuqinisekisa ukuba iqela le-DevOps lalingelona ibhotile ngexesha lokukhutshwa. Kwaye phakathi kwezinye izinto, iTerraform kunye nePuppet zazisetyenziswa kwinqanaba lokuqala.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

I-Terraform yiprojekthi yomthombo ovulekileyo ovela kwi-HashiCorp. Kwaye kwabo bangazi nokuba yintoni le, izilayidi ezimbalwa ezilandelayo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Iziseko zophuhliso njengekhowudi zithetha ukuba singakwazi ukuchaza amaziko ethu kwaye sicele iirobhothi ezithile ukuba ziqinisekise ukuba siyazifumana izixhobo esizichazileyo.

Umzekelo, sifuna umatshini wenyani. Siza kuchaza kwaye songeze iiparamitha ezininzi ezifunekayo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Emva koku, siya kuqwalasela ukufikelela kwiAmazon kwikhonsoli. Kwaye siya kucela isicwangciso seTerraform. Isicwangciso seTerraform siya kuthi: "Kulungile, singakwenzela ezi zinto kwisixhobo sakho." Kwaye ubuncinane omnye umthombo uya kongezwa. Kwaye akukho zinguqu zilindelekileyo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Nje ukuba wonwabe ngayo yonke into, unokucela iTerraform ukuba ifake isicelo kwaye iTerraform iya kukwenzela umzekelo, kwaye uya kufumana umatshini obonakalayo kwilifu lakho.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ngaphaya koko iprojekthi yethu iyaphuhla. Songeza utshintsho apho. Sicela eminye imizekelo, songeza amangenelo angama-53.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwaye siyaphinda. Nceda ucwangcise. Siyabona ukuba zeziphi iinguqu ezicwangcisiweyo. Sifaka isicelo. Kwaye le yindlela iziseko zethu ezisisiseko ezikhula ngayo.

I-Terraform isebenzisa into ebizwa ngokuba ziifayile zelizwe. Oko kukuthi, zonke iinguqu eziya kwi-Amazon zigcinwa kwifayile apho kwisixhobo ngasinye osichazile, kukho izixhobo ezihambelanayo ezenziwe kwi-Amazon. Ke, xa inkcazo yesixhobo itshintsha, iTerraform iyazi kakuhle into ekufuneka itshintshwe eAmazon.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ezi fayile zikarhulumente ekuqaleni bezizifayile nje. Kwaye sazigcina eGit, nto leyo yayingeyongozi kakhulu. Umntu wayesoloko elibala ukwenza utshintsho, kwaye kwavela iingxabano ezininzi.

Ngoku kunokwenzeka ukusebenzisa i-backend, oko kukuthi, i-Terraform icacisiwe ukuba yeyiphi ibhakethi kunye neyiphi iqhosha lefayile yelizwe ekufuneka igcinwe. Kwaye iTerraform ngokwayo iya kukhathalela ukufumana le fayile yelizwe, yenza yonke imilingo kwaye ibuyisele umphumo wokugqibela.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Iziseko zethu zophuhliso ziyakhula. Nantsi ikhowudi yethu. Kwaye ngoku asifuni nje ukwenza umatshini wenyani, sifuna ukuba nendawo yovavanyo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

I-Terraform ikuvumela ukuba wenze into efana nemodyuli, oko kukuthi, chaza into enye kwenye incwadi.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwaye, umzekelo, ekuvavanyeni, fowunela le modyuli kwaye ufumane into enye ngokungathi senze isicelo seTerraform kwimodyuli ngokwayo. Ukuvavanya kuya kubakho le khowudi.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwimveliso, sinokuthumela utshintsho oluthile apho, kuba kuvavanyo asifuni iimeko ezinkulu; kwimveliso, iimeko ezinkulu ziluncedo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwaye ke ndiya kubuyela kwiprojekthi. Yayingumsebenzi onzima, izakhiwo ezicwangcisiweyo zazinkulu kakhulu. Kwaye kwakuyimfuneko ngandlela-thile ukubeka yonke ikhowudi ukuze ilungele wonke umntu: bobabini abo benza isondlo kule khowudi kunye nabo benza utshintsho. Kwaye kwacwangciswa ukuba nawuphi na umphuhlisi angahamba kwaye alungise iziseko zophuhliso njengoko zifuneka kwinxalenye yakhe yeqonga.

Lo ngumthi wolawulo olucetyiswa nguHashiCorp ngokwalo ukuba uneprojekthi enkulu kwaye kunengqiqo ukwahlula isiseko sonke sibe ngamaqhekeza amancinci, kwaye uchaze isiqwenga ngasinye kwifolda eyahlukileyo.

Ukuba nethala leencwadi elibanzi lezixhobo, ungafowunela malunga nento enye ekuvavanyeni nasekuveliseni.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwimeko yethu, oku bekungafanelekanga ngokupheleleyo, kuba istaki sovavanyo sabaphuhlisi okanye sovavanyo kwafuneka sifumaneke ngendlela elula. Kodwa andizange ndifune ukuhamba kwiifolda kwaye ndisebenzise ngokulandelelana okufunekayo, kwaye ndikhathazeke ukuba i-database iya kuphakama, kwaye umzekelo osebenzisa le datha uya kuvuka. Ke ngoko, lonke uvavanyo lwaqaliswa kwifolda enye. Iimodyuli ezifanayo zabizwa apho, kodwa yonke into yenziwa ngexesha elinye.

I-Terraform inyamekela zonke izinto ezixhomekeke kuyo. Kwaye ihlala idala izixhobo ngokulandelelana ukuze ufumane idilesi ye-IP, umzekelo, ukusuka kumzekelo owenziwe ngokutsha, kwaye ufumane le dilesi ye-IP kwirekhodi ye-route53.

Ukongeza, iqonga likhulu kakhulu. Kwaye ukusungula isitaki sovavanyo, nokuba yiyure, nokuba ziiyure ezisi-8, sisenzo esibiza imali eninzi.

Kwaye sizenzele lo mba. Kwaye umsebenzi kaJenkins wasivumela ukuba siqhube istaki. Kuyo, bekuyimfuneko ukuqalisa isicelo sokutsala kunye notshintsho umphuhlisi afuna ukuluvavanya, ucacise zonke iinketho eziyimfuneko, amacandelo, kunye nemilinganiselo. Ukuba ufuna uvavanyo lokusebenza, ngoko unokuthatha iimeko ezininzi. Ukuba ufuna nje ukukhangela ukuba ifom ethile iyavuleka, ngoko unokuqala ubuncinane bomvuzo. Kwaye ubonise nokuba i-cluster iyadingeka okanye hayi, njl.

Kwaye emva koko uJenkins watyhala iskripthi seqokobhe, esiguqule kancinane ikhowudi kwifolda yeTerraform. Ndisuse iifayile ezingeyomfuneko kwaye ndongeza iifayile eziyimfuneko. Kwaye ke ngokubaleka kube kanye kweTerraform faka isitaki saphakanyiswa.

Kwaye ke kukho amanye amanyathelo endingafuni ukungena kuwo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ngenxa yokuba kuvavanyo sifuna ukhetho olungakumbi kunemveliso, kwafuneka senze iikopi zeemodyuli ukuze kwezi kopi zongeze ezo mpawu zazifuneka kuphela kuvavanyo.

Kwaye kwenzeka ukuba ekuvavanyeni ndifuna ukuvavanya olo tshintsho oluya kuthi ekugqibeleni lungene kwimveliso. Kodwa eneneni, into enye yavavanywa, kwaye eyahlukileyo kancinane yasetyenziswa kwimveliso. Kwaye kukho ikhefu elincinci kwipatheni yokuba kwimveliso zonke iinguqu zisetyenziswe liqela lokusebenza. Kwaye ngamanye amaxesha kwavela ukuba olo tshintsho bekufanele ukuba luhambe ukusuka kuvavanyo ukuya kwimveliso luhlala kwenye inguqulelo.

Ukongeza, bekukho ingxaki yokuba inkonzo entsha yongezwa, eyayahluke kancinane kwesele ikhona. Kwaye endaweni yokuguqula imodyuli esele ikhona, kuye kwafuneka senze ikopi yayo kwaye songeze utshintsho oluyimfuneko.

Ngokusisiseko, iTerraform ayilolwimi lokwenyani. Esi sisibhengezo. Ukuba sifuna ukubhengeza into, ngoko siyayibhengeza. Kwaye konke kuyasebenza.

Ngexesha elithile, xa esinye sezicelo zam zokutsalwa kwaxoxwa, omnye wabalingane bam wathi akukho mfuneko yokudala ama-snowflakes. Ndandizibuza ukuba uthetha ukuthini. Kukho inyani yesayensi yokuba akukho mahlwantsi ekhephu amabini afanayo emhlabeni, onke ahluke kancinane. Kwaye kamsinya nje ndakuva oku, ndakhawuleza ndaziva ubunzima obupheleleyo bekhowudi yeTerraform. Ngenxa yokuba xa kwakuyimfuneko ukusuka kwinguqulelo ukuya kwinguqulelo, iTerraform yayifuna utshintsho lwekhonkco lokuqhawula, oko kukuthi ikhowudi yayingasahambelani nenguqulelo elandelayo. Kwaye kwafuneka senze isicelo sokutsala, esigubungela phantse isiqingatha seefayile kwiziseko zophuhliso, ukwenzela ukuzisa isiseko kwinguqu elandelayo yeTerraform.

Kwaye emva kokuvela kwekhephu elinjalo, yonke ikhowudi yeTerraform esasiyiguqule yaba yimfumba enkulu, enkulu yekhephu.

Kumphuhlisi wangaphandle ongaphandle komsebenzi, oku akunamsebenzi kangako kuye, kuba wenze isicelo sokutsala, ubutyebi bakhe baqala. Kwaye kuphelele apho, ayiseyiyo inkxalabo yakhe kwakhona. Kwaye iqela le-DevOps, eliqinisekisa ukuba yonke into ilungile, iyadingeka ukwenza zonke ezi nguqu. Kwaye iindleko zolu tshintsho zinyuke kakhulu, kakhulu ngekhephu ngalinye elongezelelweyo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kukho ibali malunga nendlela umfundi kwisemina azoba ngayo izangqa ezibini ezigqibeleleyo ngetshokhwe ebhodini. Yaye utitshala wothukile ukuba akwazi ukuzoba kakuhle ngaphandle kwekhampasi. Lo mfundi uphendula athi: “Kulula gqitha, ndachitha iminyaka emibini emkhosini ndijika umatshini wokusila inyama.”

Kwaye kule minyaka mine ndibandakanyeka kule projekthi, bendisenza iTerraform malunga neminyaka emibini. Kwaye, ewe, ndinamaqhinga, ezinye iingcebiso malunga nendlela yokwenza lula ikhowudi yeTerraform, ndisebenze nayo njengolwimi lwenkqubo kunye nokunciphisa umthwalo kubaphuhlisi ekufuneka bagcine le khowudi isexesheni.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Into yokuqala endingathanda ukuqala ngayo yiSymlinks. I-Terraform inekhowudi eninzi ephindaphindiweyo. Umzekelo, umnxeba kumboneleli phantse kuyo yonke indawo apho sidala iqhekeza leziseko zophuhliso kuyafana. Kwaye kunengqiqo ukuyibeka kwifolda eyahlukileyo. Kwaye naphi na apho umboneleli efuneka ukuba enze iiSymlinks kule fayile.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ngokomzekelo, kwimveliso usebenzisa indima yokuthatha, ekuvumela ukuba ufumane amalungelo okufikelela kwi-akhawunti ye-Amazon yangaphandle. Kwaye emva kokutshintsha ifayile enye, zonke eziseleyo kumthi wemithombo ziya kuba namalungelo afunekayo ukuze iTerraform yazi ukuba leliphi icandelo leAmazon elinokufikelelwa kulo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ingaba iiSymlinks zisilela phi? Njengoko benditshilo, iTerraform ineefayile zikarhulumente. Kwaye zintle kakhulu, zipholile kakhulu. Kodwa eyona nto kukuba iTerraform iqalisa umva kwasekuqaleni. Kwaye akanakusebenzisa naziphi na iinguqu kwezi parameters; kufuneka zihlale zibhalwe ngokubhaliweyo.

Kwaye ngenxa yoko, xa umntu esenza isixhobo esitsha, ukhuphela enye ikhowudi kwezinye iifolda. Kwaye usenokwenza impazamo ngesitshixo okanye nge-emele. Ngokomzekelo, wenza into yebhokisi yesanti kwibhokisi yesanti, aze ayenze kwimveliso. Kwaye ke kuya kuvela ukuba ibhakethi kwimveliso iya kusetyenziswa kwibhokisi yesanti. Ngokuqinisekileyo, baya kuyifumana ngokukhawuleza. Kuya kwenzeka ukulungisa oku ngandlela-thile, kodwa nangona kunjalo yinkcitho yexesha kwaye, kwinqanaba elithile, izibonelelo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Yintoni esinokuyenza ngokulandelayo? Ngaphambi kokuba usebenze ngeTerraform, kufuneka uyiqalise. Ekuqaliseni, iTerraform ikhuphela zonke iiplagi. Ngexesha elithile bahlukana ukusuka kwi-monolith ukuya kwi-architecture ye-microservice. Kwaye uhlala ufuna ukwenza iTerraform init ukuze itsale zonke iimodyuli, zonke iiplagi.

Kwaye ungasebenzisa umbhalo weqokobhe, othi, okokuqala, ufumane zonke izinto eziguquguqukayo. Umbhalo weqokobhe awukhawulelwanga nangayiphi na indlela. Kwaye, okwesibini, iindlela. Ukuba sihlala sisebenzisa indlela ekwindawo yokugcina njengesitshixo kwifayile yelizwe, ngoko, ngokufanelekileyo, impazamo apha iya kupheliswa.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ndingayifumana phi idatha? JSON ifayile. I-Terraform ikuvumela ukuba ubhale izibonelelo kungekhona kuphela kwi-hcl (i-HashiCorp Configuration Language), kodwa nakwi-JSON.

I-JSON ifundeka lula kumbhalo weqokobhe. Ngokufanelekileyo, ungabeka ifayile yoqwalaselo ngebhakethi kwenye indawo. Kwaye sebenzisa eli bhakethi zombini kwikhowudi yeTerraform nakwiskripthi seqokobhe lokuqalisa.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kutheni kubalulekile ukuba nebhakethi leTerraform? Kuba kukho into efana neefayile ezikude. Oko kukuthi, xa ndiphakamisa isibonelelo, ukuze ndixelele i-Amazon: "Nceda uphakamise umzekelo," kufuneka ndichaze ezininzi iiparitha ezifunekayo.

Kwaye ezi zichongi zigcinwa kwenye incwadi eneenkcukacha. Kwaye ndingahamba ndithi: "Terraform, nceda ubaleke uye kwifayile yelizwe kwaloo mthombo kwaye undifumanele ezi zichongi." Kwaye ke umanyano oluthile luvela phakathi kwemimandla eyahlukeneyo okanye okusingqongileyo.

Akusoloko kusenzeka ukusebenzisa ifayile yendawo ekude. Umzekelo, wenze iVPC ngesandla. Kwaye ikhowudi yeTerraform eyenza iVPC idala iiVPC ezahlukeneyo kangangokuba kuya kuthatha ixesha elide kwaye kuya kufuneka ulungelelanise enye kwenye, ngoko ungasebenzisa iqhinga elilandelayo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Oko kukuthi, yenza imodyuli ebonakala ngathi yenza iVPC kwaye, njengokuba kunjalo, ikunika izichazi, kodwa eneneni kukho ifayile nje enamaxabiso aqinileyo anokusetyenziswa ukwenza umzekelo ofanayo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Akusoloko kuyimfuneko ukugcina ifayile yelizwe efini. Ngokomzekelo, xa uvavanya iimodyuli, ungasebenzisa ukuqaliswa kwe-backend, apho ifayile iya kugcinwa ngokulula kwidiski ngexesha lokuvavanya.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ngoku kancinci malunga novavanyo. Ungavavanya ntoni kwiTerraform? Mhlawumbi kuninzi kunokwenzeka, kodwa ndiza kuthetha ngezi zinto zi-4.

I-HashiCorp inokuqonda ukuba ikhowudi yeTerraform kufuneka ifomathiwe njani. Kwaye iTerraform fmt ikuvumela ukuba ufomethe ikhowudi oyihlelayo ngokwale nkolelo. Ngokufanelekileyo, iimvavanyo kufuneka zijonge ukuba ngaba ukufomatha kuhambelana noko HashiCorp ishiye, ukuze kungabikho mfuneko yokutshintsha indawo yezibiyeli, njl.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Okulandelayo kukuqinisekisa ngeTerraform. Yenza kancinane ngaphezu kokukhangela i-syntax - ala, nokuba zonke iiparenthesis zidityanisiwe. Yintoni ebalulekileyo apha? Iziseko zethu zophuhliso zibanzi kakhulu. Kukho ezininzi daddy ezahlukeneyo kuyo. Kwaye kwindawo nganye kufuneka uqhube ukuqinisekiswa kweTerraform.

Ngokufanelekileyo, ukukhawulezisa uvavanyo, siqhuba iinkqubo ezininzi ngaxeshanye sisebenzisa iparallel.

IParallel yinto epholileyo kakhulu, yisebenzise.

Kodwa ngalo lonke ixesha iTerraform iqalisa, iya kwiHashiCorp kwaye ibuze, “Zeziphi iinguqulelo zeplagin zamva nje? Kwaye iplagin endinayo kwi-cache- ingaba yeyona ilungileyo okanye ayilunganga? Kwaye oku kuye kwacotha kwinyathelo ngalinye.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ukuba uxelela iTerraform apho iiplagi zikhoyo, emva koko iTerraform iya kuthi: “Kulungile, le yeyona nto yamva nje ekhoyo. Andiyi ndawo, ndiza kuqala ngokuqinisekisa ikhowudi yakho yeTerraform. ”

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ukuze ugcwalise ifolda ngeeplagi eziyimfuneko, sinekhowudi yeTerraform elula kakhulu efuna ukuqaliswa. Apha, ngokuqinisekileyo, kufuneka ucacise bonke ababoneleli abathatha inxaxheba ngandlela-thile kwikhowudi yakho, ngaphandle koko iTerraform iya kuthi: "Andazi umnikezeli othile ngenxa yokuba ayikho kwi-cache."

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Okulandelayo yisicwangciso seTerraform. Njengoko benditshilo, uphuhliso lujikeleza. Senza utshintsho kwikhowudi. Kwaye ke kufuneka ufumanise ukuba loluphi utshintsho olucetywayo kwiziseko ezingundoqo.

Kwaye xa isiseko sikhulu kakhulu, ungatshintsha imodyuli enye, ulungise imeko-bume yovavanyo okanye ummandla othile kwaye waphule enye engummelwane. Ke ngoko, isicwangciso seTerraform kufuneka senziwe kwiziseko ezingundoqo kwaye sibonise ukuba zeziphi na iinguqu ezicwangcisiweyo.

Unokwenza oku ngobulumko. Umzekelo, sibhale iskripthi sePython esombulula ukuxhomekeka. Kwaye kuxhomekeke kwinto etshintshileyo: imodyuli yeTerraform okanye nje icandelo elithile, yenza izicwangciso zazo zonke iifolda ezixhomekeke.

Izicwangciso zeterraform kufuneka zenziwe ngesicelo. Ubuncinane yile nto siyenzayo.

Ewe kunjalo, kulungile ukwenza iimvavanyo kulo lonke utshintsho, kuzo zonke izibophelelo, kodwa izicwangciso zizinto ezibiza kakhulu. Kwaye kwisicelo sotsalo sithi, "Nceda undinike izicwangciso." Irobhothi iyaqala. Kwaye ithumela izimvo okanye uncamathisele zonke izicwangciso ezilindelekileyo kwiinguqu zakho.

Isicwangciso yinto ebiza kakhulu. Kuthatha ixesha kuba iTerraform iya eAmazon ibuze, “Ngaba lo mzekelo usekhona? Ngaba le autoscale ineeparamitha ezifanayo kanye? " Kwaye ukukhawulezisa oku, ungasebenzisa iparameter enje ngo refresh=false. Oku kuthetha ukuba iTerraform iyakukhuphela urhulumente kwi-S3. Kwaye iya kukholelwa ukuba urhulumente uya kuhambelana ngqo noko kukwiAmazon.

Isicwangciso esinjalo seTerraform sihamba ngokukhawuleza kakhulu, kodwa urhulumente kufuneka ahambelane nesiseko sakho, oko kukuthi, kwindawo ethile, ngamanye amaxesha ukuhlaziya iTerraform kufuneka kuqale. Uhlaziyo lweTerraform lwenza kanye loo nto: urhulumente uhambelana neyona nto ikhoyo.

Kwaye kufuneka sithethe ngokhuseleko. Kulapho kwafuneka siqale khona. Apho uqhuba iTerraform kunye neTerraform zisebenza kwiziseko zophuhliso kukho ubuthathaka. Oko kukuthi, usebenzisa ikhowudi. Kwaye ukuba isicelo sokutsala siqulethe uhlobo oluthile lwekhowudi ekhohlakeleyo, ngoko inokuphunyezwa kwisiseko esinokufikelela kakhulu. Ke lumka apho uqhuba khona isicwangciso seTerraform.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Into elandelayo endifuna ukuthetha ngayo kuvavanyo lwedatha yomsebenzisi.

Yintoni idatha yomsebenzisi? EAmazon, xa sisenza umzekelo, sinokuthumela ileta ethile ngomzekelo-idatha yemeta. Xa umzekelo uqalisa, ngokwesiqhelo icloud init ihlala ikhona kwezi meko. I-Cloud init ifunda le leta kwaye ithi: "Kulungile, namhlanje ndisisilinganisi somthwalo." Kwaye ngokungqinelana nale minqophiso wenza ezinye izenzo.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kodwa, ngelishwa, xa sisenza isicwangciso seTerraform kunye neTerraform iyasebenza, idatha-yabasebenzisi ijongeka ngolu hlobo lwamanani. Oko kukuthi, uthumela nje i-hash. Kwaye konke onokuthi ujonge kwisicwangciso kukuba kuya kubakho naluphi na utshintsho okanye ukuba i-hash iya kuhlala ifana.

Kwaye ukuba awuyihoyi le nto, ke enye ifayile yombhalo eyaphukileyo inokuphela kwiAmazon, kwisiseko sokwenyani.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kungenjalo, xa uphumeza, ungakhankanya hayi yonke isiseko, kodwa itemplate kuphela. Kwaye kwikhowudi ithi: "Nceda ubonise le template kwisikrini sam." Kwaye ngenxa yoko, unokufumana ukuprintwa kwedatha yakho eya kujongeka njani kwiAmazon.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Enye inketho kukusebenzisa imodyuli ukuvelisa idatha yomsebenzisi. Uya kusebenzisa le modyuli. Ufumana ifayile kwidiski. Thelekisa kunye nereferensi. Ke ngoko, ukuba umntu othile ugqiba kwelokuba alungise idatha yomsebenzisi kancinci, uvavanyo lwakho luya kuthi: "Kulungile, kukho utshintsho apha naphaya - oku kuqhelekile."

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Into elandelayo endifuna ukuthetha ngayo kukwenza isicelo se-Automate Terraform.

Ewe kunjalo, kuyothusa kakhulu ukwenza isicelo seTerraform kwimowudi ezenzekelayo, kuba ngubani owaziyo ukuba loluphi utshintsho olufikileyo apho kwaye lunokonakalisa kangakanani isiseko sokuphila.

Kwimeko yovavanyo, konke oku kuqhelekile. Oko kukuthi, umsebenzi odala imeko yovavanyo yinto efunwa ngabo bonke abaphuhlisi. Kwaye ibinzana elithi "yonke into indisebenzele" ayisiyo meme ehlekisayo, kodwa bubungqina bokuba umntu ubhidekile, waphakamisa istaki, kwaye waqhuba iimvavanyo ezithile kwesi sitaki. Kwaye waqinisekisa ukuba yonke into ilungile apho kwaye wathi: "Kulungile, ikhowudi endiyikhuphayo ivavanyiwe."

Kwimveliso, ibhokisi yesanti kunye nezinye iimeko ezibaluleke kakhulu kushishino, unokusebenzisa ngokuyinxenye ezinye izixhobo ngokukhuselekileyo kuba akubangeli ukuba nabani na abhubhe. Ezi zezi: amaqela e-autoscale, amaqela okhuseleko, iindima, indlela53, kunye noluhlu apho lunokuba lukhulu kakhulu. Kodwa gcina iliso kwinto eyenzekayo, funda iingxelo zesicelo esizenzekelayo.

Apho kuyingozi okanye kuyoyikisa ukufaka isicelo, umzekelo, ukuba ezi zizixhobo ezizingisileyo ezivela kwiziko ledatha, fumana iingxelo zokuba kukho utshintsho olungasetyenziswanga kwinxalenye yeziseko zophuhliso. Kwaye injineli, phantsi kweliso, iqala imisebenzi ukuyifaka okanye iyenze kwikhonsoli yakhe.

IAmazon inento efana nokuPhelisa ukhuseleko. Kwaye inokukhusela kwezinye iimeko kwiinguqu ezingafunekiyo kuwe. Oko kukuthi, uTerraform waya eAmazon waza wathi: “Ndifuna ukubulala esi siganeko ukuze ndenze esinye.” Kwaye iAmazon ithi: “Uxolo, hayi namhlanje. Sinokhuseleko lwe-terminate."

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwaye i-icing kwikhekhe kukuphucula ikhowudi. Xa sisebenza ngekhowudi yeTerraform, kufuneka sidlule inani elikhulu kakhulu leeparamitha kwimodyuli. Ezi ziiparamitha eziyimfuneko ukuze wenze uhlobo oluthile lomthombo. Kwaye ikhowudi ijika ibe luluhlu olukhulu lweeparameters ezifuna ukugqithiswa kwimodyuli ukuya kwimodyuli, ukusuka kwimodyuli ukuya kwimodyuli, ngakumbi ukuba iimodyuli zifakwe kwindlwana.

Kwaye kunzima kakhulu ukufunda. Kunzima kakhulu ukuphonononga oku. Kwaye kaninzi kuye kuvele ukuba ezinye iiparamitha zijongwa kwaye aziyiyo kanye le nto ifunekayo. Kwaye oku kudla ixesha kunye nemali ukulungisa kamva.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Ngoko ke, ndicebisa ukuba usebenzise into efana neparameter enzima ebandakanya umthi othile wexabiso. Oko kukuthi, ufuna uhlobo oluthile lwefolda apho unawo onke amaxabiso ongathanda ukuba nawo kwindawo ethile.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kwaye ngokubiza le modyuli, ungafumana umthi oveliswe kwimodyuli enye eqhelekileyo, oko kukuthi, kwimodyuli eqhelekileyo esebenza ngokufanayo kuyo yonke isiseko.

Kule modyuli ungenza izibalo usebenzisa uphawu lwamva nje lweTerraform njengabemi balapha. Kwaye ke, ngesiphumo esinye, nika iparameter entsonkothileyo, enokubandakanya uluhlu lweehashi, njl.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Apha kulapho zonke ezona zinto zingcono zifunyenweyo ndiphelile. Kwaye ndingathanda ukubalisa ibali malunga noColumbus. Xa wayekhangela imali yohambo lwakhe lokufumana iIndiya (njengoko wayecinga ngoko), akukho mntu wayemkholelwa yaye babecinga ukuba akunakwenzeka. Emva koko yathi: “Qinisekisa ukuba iqanda aliwi.” Bonke abagcini bebhanki, abazizityebi kakhulu kwaye mhlawumbi abantu abahlakaniphile, bazama ngandlela-thile ukubeka iqanda, kwaye laqhubeka liwa. Emva koko uColumbus wathabatha iqanda waza walicinezela kancinane. Iqokobhe lashwabana laza iqanda lahlala lingashukumi. Bathi, "Owu, ilula kakhulu!" Waza uColumbus waphendula wathi: “Ewe, ilula kakhulu. Kwaye xa ndivula iIndiya, wonke umntu uya kusebenzisa le ndlela yorhwebo. "

Kwaye le nto ndisandula ukukuxelela yona mhlawumbi ilula kwaye zizinto ezingenamsebenzi. Kwaye xa ufunda ngazo kwaye uqalise ukuzisebenzisa, kulandelelwano lwezinto. Ngoko sebenzisa ithuba. Kwaye ukuba ezi zizinto eziqhelekileyo ngokupheleleyo kuwe, ngoko ubuncinci uyazi indlela yokubeka iqanda ukuze lingawi.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Masishwankathele:

  • Zama ukuphepha amahlwantsi ekhephu. Kwaye amahlwantsi ekhephu ambalwa, izixhobo ezimbalwa oza kuzifuna ukwenza naluphi na utshintsho kwiziseko zakho ezinkulu.
  • Utshintsho oluqhubekayo. Oko kukuthi, xa utshintsho oluthile lwenzeka kwikhowudi, kufuneka uzise isiseko sakho sokuthobela olu tshintsho ngokukhawuleza. Akufuneki kubekho imeko apho umntu eze kujonga i-Elasticsearch kwiinyanga ezimbini okanye ezintathu kamva, enze isicwangciso seTerraform, kwaye kukho utshintsho oluninzi ebengalulindelanga. Kwaye kuthatha ixesha elininzi ukubuyisela yonke into ngolungelelwano.
  • Iimvavanyo kunye ne-automation. Okukhona ikhowudi yakho igutyungelwe ziimvavanyo kunye neempawu, kokukhona uqiniseka ngakumbi ukuba wenza yonke into ngokuchanekileyo. Kwaye ukuhanjiswa okuzenzekelayo kuya kwandisa ukuzithemba kwakho ngamaxesha amaninzi.
  • Ikhowudi yovavanyo kunye neemeko zemveliso kufuneka ziphantse zifane. Ngokwenyani, kuba imveliso isahluka kancinci kwaye kusekho ama-nuances aya kuthi adlulele ngaphaya kovavanyo. Kodwa nangona kunjalo, dibanisa okanye thabatha, oku kunokuqinisekiswa.
  • Kwaye ukuba unekhowudi yeTerraform eninzi kwaye kuthatha ixesha elininzi ukugcina le khowudi isexesheni, ke ayisokuze ibe mva kakhulu ukuyilungisa kwaye uyifumane ikwimo entle.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

  • Iziseko ezingundoqo ezingenakuguqulwa. Ukuhanjiswa kwe-AMI kwishedyuli.
  • Ulwakhiwo lwe-router53 xa unongeniso oluninzi kwaye ufuna lube lulandelelwano.
  • Ukulwa imida yereyithi ye-API. Kulapho iAmazon ithi, "Yiyo leyo, andikwazi kwamkela ezinye izicelo, nceda ulinde." Kwaye isiqingatha seofisi silinde de iqalise iziseko zayo.
  • Imizekelo. IAmazon ayingomsitho ungabizi kakhulu kwaye amabala akuvumela ukuba wonge kakhulu. Kwaye apho ungaxela yonke ingxelo malunga nayo.
  • Ukhuseleko kunye neendima ze-IAM.
  • Ukukhangela izibonelelo ezilahlekileyo, xa unemizekelo yemvelaphi engaziwayo e-Amazone, badla imali. Nokuba iimeko zibiza i-100-150 yeedola ngenyanga, ngaphezulu kwe-1 yeedola ngonyaka. Ukufumana izibonelelo ezinjalo lishishini elinengeniso.
  • Kwaye kugcinwe iimeko.

Iipateni kwiTerraform ukulwa nesiphithiphithi kunye nenkqubo yezandla. UMaxim Kostrikin (Ixtens)

Kuphelele kum. I-Terraform ipholile kakhulu, uyayisebenzisa. Enkosi!

Imibuzo yakho

Enkosi ngengxelo! Ifayile yakho yelizwe ikwi-S3, kodwa uyisombulula njani ingxaki yokuba abantu abaninzi bangathatha le fayile yelizwe kwaye bazame ukwandisa?

Okokuqala, asingxamanga. Okwesibini, kukho iiflegi, apho sibika ukuba sisebenza kwikhowudi ethile. Oko kukuthi, nangona isiseko sikhulu kakhulu, oku akuthethi ukuba umntu uhlala esebenzisa into ethile. Kwaye xa kukho isigaba esisebenzayo, le yayiyingxaki; sagcina iifayile zombuso kwiGit. Oku kwakubalulekile, kungenjalo umntu uza kwenza ifayile yelizwe, kwaye kwafuneka sidibanise ngesandla ukuze yonke into iqhubeke. Ngoku akukho ngxaki enjalo. Ngokubanzi, iTerraform yayisombulula le ngxaki. Kwaye ukuba kukho into ehlala iguquka, ngoko ungasebenzisa izitshixo, ezithintela oko uthe.

Ngaba usebenzisa umthombo ovulekileyo okanye ishishini?

Akukho shishini, okt yonke into onokuthi uhambe ngayo kwaye uyikhuphele simahla.

Igama lam ndinguStanislav. Bendifuna ukongeza kancinci. Uthethile ngenqaku leAmazon elikuvumela ukuba wenze umzekelo ungafezeki. Oku kwakhona kwiTerraform ngokwayo; kwibhlokhi yoBomi beSibini ungakhankanya ukuvalwa kotshintsho okanye ukuvalwa kwentshabalalo.

Ixesha lalilinganiselwe. Yipoyinti elungile.

Bendifuna nokubuza izinto ezimbini. Okokuqala, uthethe ngovavanyo. Ngaba usebenzise naziphi na izixhobo zokuvavanya? Ndeva nge-plugin ye-Test Kitchen. Mhlawumbi kukho enye into. Kwaye ndingathanda ukubuza malunga neeValues ​​zaseKhaya. Zahluke njani ngokusisiseko kwiiGuquguquko zeNgeniso? Kwaye kutheni ndingakwazi ukwenza parameteriza into kuphela ngamaXabiso eNdawo? Ndizamile ukufumanisa esi sihloko, kodwa ngandlel’ ithile andizange ndikwazi ukuziqonda ngokwam.

Singathetha ngakumbi ngaphandle kweli gumbi. Izixhobo zethu zokuvavanya zizenzele ngokupheleleyo. Akukho nto yokuvavanya. Ngokubanzi, kukho iinketho xa iimvavanyo ezizenzekelayo zithatha iziseko zophuhliso kwindawo ethile, khangela ukuba kulungile, kwaye utshabalalise yonke into ngengxelo yokuba iziseko zakho zisekwimo elungileyo. Asinayo le nto kuba izitaki zovavanyo ziqhutywa yonke imihla. Kwaye kwanele. Kwaye ukuba kukho into eqala ukuphuka, iya kuqala ukuphuka ngaphandle kokuba sihlolisise kwenye indawo.

Ngokuphathelele kwiMigangatho yaseKhaya, masiqhubeke nencoko ngaphandle kwegumbi.

Mholo! Enkosi ngengxelo! Inolwazi kakhulu. Utshilo ukuba unohlobo oluninzi olufanayo lwekhowudi yokuchaza isiseko. Ngaba ukhe wacinga ngokuvelisa le khowudi?

Umbuzo omkhulu, enkosi! Ingongoma kukuba xa sisebenzisa iziseko zophuhliso njengekhowudi, sicinga ukuba sijonge ikhowudi kwaye siqonde ukuba yeyiphi iziseko ezisemva kwaloo khowudi. Ukuba ikhowudi yenziwe, ngoko kufuneka sicinge ukuba yeyiphi ikhowudi eya kuveliswa ukuze siqonde ukuba luhlobo luni lweziseko eziya kubakho. Nokuba sivelisa ikhowudi, siyenze, kwaye kwenzeka into efanayo. Ngoko silandele indlela esiyibhalileyo, sayifumana. Iijenereyitha ezingakumbi zavela emva kwexesha elithile xa sasiqala ukuzenza. Kwaye kwakusele kusemva kwexesha kakhulu ukutshintsha.

Ngaba ukhe weva nto malunga nejsonnet?

No.

Khangela, le yinto epholileyo kakhulu. Ndibona imeko ethile apho ungayisebenzisa kwaye uvelise isakhiwo sedatha.

Iijenereyitha zilungile xa unazo, njengakwiqhula malunga nomatshini wokutsheva. Oko kukuthi, okokuqala ubuso buhluke, kodwa ke wonke umntu unobuso obufanayo. Iijenereyitha zisebenza kakuhle kakhulu. Kodwa, ngelishwa, ubuso bethu bahluke kancinane. Le yingxaki.

Jonga nje. Enkosi!

Igama lam nguMaxim, ndivela eSberbank. Uthethe kancinci malunga nendlela obuzama ngayo ukuzisa iTerraform kwilingana nolwimi lwenkqubo. Akulula ukusebenzisa i-Ansible?

Ezi zizinto ezahlukeneyo kakhulu. Unokwenza izixhobo kwi-Ansible, kwaye iPuppet inokudala izixhobo kwiAmazon. Kodwa iTerraform ibukhali ngokuthe ngqo.

Ngaba unayo kuphela iAmazon?

Akunjalo ukuba sineAmazon kuphela. Siphantse sibe neAmazon kuphela. Kodwa into ephambili kukuba iTerraform iyakhumbula. Kwi-Ansible, ukuba uthi: "Ndinike iimeko ezi-5," iya kuphakama, kwaye uthi: "Kwaye ngoku ndifuna i-3." Kwaye iTerraform iya kuthi: "Kulungile, ndiza kubulala i-2," kwaye u-Ansible uya kuthi: "Kulungile, nantsi i-3 yakho." Iyonke 8.

Mholo! Enkosi ngengxelo yakho! Kwakubangel’ umdla kakhulu ukuva ngeTerraform. Ndingathanda ukwenza uluvo oluncinci ngoko nangoko malunga nenyani yokuba iTerraform ayikabinalo ukhululo oluzinzileyo, ngoko ke yiphathe ngononophelo olukhulu iTerraform.

Icephe elilungileyo lokutya. Oko kukuthi, ukuba ufuna isisombululo, ngamanye amaxesha ubeka into engazinzanga, njl., kodwa iyasebenza kwaye yasinceda.

Umbuzo ngulo. Usebenzisa i-Remote backend, usebenzisa i-S 3. Kutheni ungasebenzisi i-backend esemthethweni?

Isemthethweni?

Terraform Cloud.

Wavela nini?

Malunga neenyanga ezi-4 ezidlulileyo.

Ukuba yayivele kwiminyaka eyi-4 eyadlulayo, mhlawumbi ngendiwuphendule umbuzo wakho.

Sele kukho umsebenzi owakhelwe-ngaphakathi kunye nezitshixo, kwaye ungagcina ifayile yelizwe. Zama. Kodwa nam khange ndiyivavanye.

Sihamba ngololiwe omkhulu ohamba ngesantya esiphezulu. Kwaye awukwazi ukuthatha nje iimoto ezimbalwa kwaye uzilahle kude.

Uthethe ngamaqhekeza ekhephu, kutheni ungasebenzisi isebe? Kwakutheni ukuze kungenzeki ngolo hlobo?

Indlela yethu yeyokuba zonke iziseko zophuhliso zikuvimba omnye. I-Terraform, i-Puppet, zonke izikripthi ezihambelana nale nto, zonke zikwindawo enye yokugcina. Ngale ndlela sinokuqinisekisa ukuba utshintsho olongezelelekileyo luyavavanywa enye emva kwenye. Ukuba ibiliqela lamasebe, iprojekthi enjalo ibinokuba nzima ukuyigcina. Kudlula iinyanga ezintandathu, kwaye ziyahlukana kangangokuba luhlobo nje lwesohlwayo. Yile nto bendifuna ukubaleka kuyo ngaphambi kokuba ndiphinde ndiyenze.

Ngoko ayisebenzi?

Oku akusebenzi konke konke.

Kwisebe ndisika isilayidi sefolda. Oko kukuthi, ukuba uyenza kwipaki yovavanyo ngalunye, umzekelo, iqela A linefolda yalo, iqela B linefolda yalo, ngoko ke oku akusebenzi. Senze ikhowudi yokusingqongileyo yovavanyo edibeneyo ebibhetyebhetye ngokwaneleyo ukuze ilungele wonke umntu. Oko kukuthi, sikhonze ikhowudi enye.

Mholo! Igama lam nguYura! Enkosi ngengxelo! Umbuzo malunga neemodyuli. Uthi usebenzisa iimodyuli. Uwusombulula njani umcimbi ukuba utshintsho lwenziwe kwimodyuli enye engahambelani notshintsho lomnye umntu? Ngaba ngandlela ithile uguqulela iimodyuli okanye uzama ukuzisa i-wunderwaffle ukuhlangabezana neemfuno ezimbini?

Le yingxaki enkulu yemfumba yekhephu. Yile nto sihlupheka ngayo xa utshintsho oluthile olungenabungozi lunokwaphula inxalenye yesiseko. Kwaye oku kuya kubonakala kuphela emva kwexesha elide.

Oko kukuthi, ayikasonjululwa okwangoku?

Wenza iimodyuli jikelele. Kuphephe amahlwantsi ekhephu. Kwaye yonke into iya kulunga. Isiqingatha sesibini sengxelo malunga nendlela yokuphepha oku.

Mholo! Enkosi ngengxelo! Ndingathanda ukucacisa. Emva komboniso kwakukho imfumba enkulu endize ngayo. Idityaniswa njani iPhepha kunye nokuhanjiswa kwendima?

Idatha yomsebenzisi.

Oko kukuthi, utshica ifayile kwaye uyiphumeze ngandlela thile?

Idatha yomsebenzisi inqaku, oko kukuthi xa senza i-clone yomfanekiso, i-Daemon iphakama apho kwaye, izama ukufumanisa ukuba ungubani, ifunda inqaku lokuba ungumlinganisi womthwalo.

Oko kukuthi, ngaba olu luhlobo oluthile lwenkqubo eyahlukileyo enikezelwayo?

Asizange siyile. Siyayisebenzisa.

Mholo! Ndinombuzo malunga noMsebenzisi-idatha. Uthe kukho iingxaki apho, ukuba umntu angathumela into kwindawo engeyiyo. Ngaba kukho indlela yokugcina idatha yomsebenzisi kwi-Git enye, ukuze ihlale icacile ukuba i-data-data ibhekisa kuyo?

Senza idatha yomsebenzisi kwitemplate. Oko kukuthi, inani elithile leenguqu zisetyenziswa apho. Kwaye iTerraform ivelisa umphumo wokugqibela. Ngoko ke, awukwazi ukujonga nje itemplate kwaye uthethe oko kuya kwenzeka, kuba zonke iingxaki zihambelana nento yokuba umthuthukisi ucinga ukuba udlula umtya kule ntlukwano, kodwa uluhlu lusetyenziswa apho. Kwaye yena-uBam kunye nam-ubani-bani-bani-bani-bani, umgca olandelayo, kwaye yonke into yaphuka. Ukuba lo ngumthombo omtsha kwaye umntu uyayithatha aze abone ukuba into ayisebenzi, ngoko ixazululwa ngokukhawuleza. Kwaye ukuba eli qela le-autoscale lihlaziywa, ngoko ngexesha elithile iimeko kwiqela le-autoscale ziqala ukutshintshwa. Kwaye, kukho into engasebenzi. Ibuhlungu.

Kuvela ukuba isisombululo kuphela kukuvavanya?

Ewe, uyayibona ingxaki, wongeza amanyathelo ovavanyo apho. Oko kukuthi, imveliso nayo inokuvavanywa. Mhlawumbi ayilunganga kangako, kodwa ungaphinda ubeke amanqaku- khangela ukuba uMsebenzisi-datha ubethelelwe apha.

Igama lam ndinguTimur. Kuhle kakhulu ukuba kukho iingxelo malunga nendlela yokulungelelanisa ngokufanelekileyo iTerraform.

andikaqali nokuqalisa.

Ndicinga ukuba mhlawumbi kwinkomfa elandelayo kuya kubakho. Ndinombuzo olula. Kutheni ugcina ixabiso kwimodyuli eyahlukileyo kunokusebenzisa i-tfvars, o.t. kutheni imodyuli enamaxabiso ingcono kune tfvars?

Oko kukuthi, kufuneka ndibhale apha (isilayidi: Imveliso / indalo / i-settings.tf): i-domain = i-variable, i-domain vpcnetwork, i-vpcnetwork eguquguqukayo kunye ne-stvars - ndingayifumana into efanayo?

Yiloo nto kanye esiyenzayo. Sibhekisa kwimodyuli yomthombo wolungiselelo, umzekelo.

Ngokusisiseko, le yi-tfvars enjalo. I-Tfvars ilungele kakhulu kwindawo yokuvavanya. Ndine-tfvars yeemeko ezinkulu, ezincinci. Kwaye ndajula ifayile enye kwifolda. Kwaye ndiyifumene into ebendiyifuna. Xa sisika iziseko zophuhliso, sifuna ukuba kwenzeke ukuba sijonge kwaye siqonde yonke into ngoko nangoko. Kwaye ke kuye kwavela ukuba kufuneka ujonge apha, emva koko ujonge i-tfvars.

Ngaba kunokwenzeka ukuba yonke into ibe kwindawo enye?

Ewe, i-tfvars kuxa unekhowudi enye. Kwaye isetyenziswa kwiindawo ezininzi ezahlukeneyo ezinama-nuances ahlukeneyo. Emva koko uya kuphosa i-tfvars kwaye ufumane ama-nuances akho. Kwaye sisisiseko njengekhowudi kwifomu yayo ecocekileyo. Ndajonga ndaqonda.

Mholo! Ngaba ukhe wadibana neemeko apho umboneleli welifu ephazamisana nento oyenzileyo iTerraform? Masithi sihlela imetadata. Kukho izitshixo ze-ssh. Kwaye uGoogle uhlala ebeka imetadata kunye nezitshixo zayo apho. Kwaye iTerraform ihlala ibhala ukuba ineenguqu. Emva kokubaleka nganye, nokuba akukho nto itshintshileyo, uhlala esithi uya kuyihlaziya le ntsimi ngoku.

Ngezitshixo, kodwa ewe, inxalenye yesiseko ichaphazeleka yile nto, oko kukuthi i-Terraform ayikwazi ukutshintsha nantoni na. Asikwazi ukutshintsha nantoni na ngezandla zethu. Siza kuhlala nayo okwangoku.

Oko kukuthi, udibene nento enje, kodwa awuzange ufike nantoni na, uyenza njani kwaye ayenze ngokwakhe?

Ngelishwa ewe.

Mholo! Igama lam ndinguStarkov Stanislav. Imeyile. ru Iqela. Uyisombulula njani ingxaki yokuvelisa ithegi kwi ..., uyidlula njani ngaphakathi? Njengoko ndiyiqonda, ngoMsebenzisi-idatha ukukhankanya igama longinginya, misela iPuppet? Kwaye inxalenye yesibini yombuzo. Uwusombulula njani lo mba kwi-SG, okt xa uvelisa i-SG, amakhulu eemeko zohlobo olufanayo, lithini igama elichanekileyo kubo?

Ezo ziganeko zibaluleke kakhulu kuthi, sizibiza kakuhle. Ezo zingafunekiyo, kukho inqaku lokuba eli liqela le-autoscale. Kwaye kwithiyori ungayibethelela phantsi kwaye ufumane entsha.

Ngokuphathelele ingxaki ngethegi, akukho ngxaki enjalo, kodwa kukho umsebenzi onjalo. Kwaye sisebenzisa iithegi kakhulu, kakhulu kakhulu, kuba izakhiwo zikhulu kwaye ziyabiza. Kwaye kufuneka sijonge apho imali iya khona, ke iithegi zisivumela ukuba sicazulule ukuba iye phi. Kwaye, ngokufanelekileyo, ukukhangela into ethetha ukuba imali eninzi ichithwa apha.

Wawungantoni omnye umbuzo?

Xa i-SG idala amakhulu eemeko, ngaba kufuneka bahlulwe ngandlela thile?

Hayi, musa. Kwimeko nganye kukho iarhente enika ingxelo yokuba ndinengxaki. Ukuba i-arhente ibika, ngoko i-arhente iyazi ngaye kwaye, ubuncinci, idilesi yakhe ye-IP ikhona. Uyakwazi ukubaleka. Okwesibini, sisebenzisa i-Consul yokuFumana, apho uKubernetes engekho. Kwaye u-Consul ubonisa idilesi ye-IP yomzekelo.

Oko kukuthi, ngaba ujolise ngokukodwa kwi-IP, kwaye kungekhona kwigama lomninimzi?

Akunakwenzeka ukuzulazula ngegama lenginginya, oko kukuthi, zininzi zazo. Kukho izifanisi zomzekelo - AE, njl. Ungayifumana kwindawo ethile, ungayiphosa kuphendlo.

Mholo! Ndabona ukuba iTerraform yinto entle, eyenzelwe amafu.

Hayi kuphela.

Lo ngumbuzo kanye onomdla kum. Ukuba uthatha isigqibo sokuhamba, yithi, kwi-Bare Metal en masse nazo zonke iimeko zakho? Ngaba kuya kubakho iingxaki? Okanye ngaba kusafuneka usebenzise ezinye iimveliso, umzekelo, i-Ansible efanayo ekhankanywe apha?

I-Ansible yinto encinci malunga nenye into. Oko kukuthi, i-Ansible sele isebenza xa umzekelo uqalile. Kwaye iTerraform isebenza ngaphambi kokuba umzekelo uqale. Ukutshintshela kwiBare Metal - hayi.

Hayi ngoku, kodwa ishishini liya kuza lithi: “Yiza.”

Ukutshintshela kwelinye ilifu - ewe, kodwa kukho iqhinga elahlukileyo apha. Kufuneka ubhale ikhowudi yeTerraform ngendlela yokuba utshintshele kwelinye ilifu ngomzamo omncinci.

Ekuqaleni, umsebenzi wawubekwe ukuba yonke isiseko sethu sasiyi-agnostic, oko kukuthi nayiphi na ifu kufuneka ifaneleke, kodwa ngaxa lithile ishishini liyeke kwaye lathi: "Kulungile, kwiminyaka eyi-N ezayo asiyi kuya ndawo, sinokusebenzisa iinkonzo. ukusuka eAmazon"

I-Terraform ikuvumela ukuba wenze imisebenzi ye-Front-End, uqwalasele i-PagerDuty, i-data doc, njl. Inemisila emininzi. Unako ukulawula ihlabathi liphela.

Enkosi ngengxelo! Ndikwasebenzisa iTerraform iminyaka emi-4 ngoku. Kwinqanaba lenguqu egudileyo ukuya kwi-Terraform, kwiziseko ezingundoqo, kwinkcazo echazayo, sasijongene nemeko apho umntu wenza into ethile ngesandla, kwaye uzama ukwenza isicwangciso. Kwaye ndifumene impazamo ethile apho. Uhlangabezana njani neengxaki ezinjalo? Uzifumana njani izixhobo ezilahlekileyo ezidwelisiweyo?

Ngokuyintloko ngezandla nangamehlo ethu, ukuba sibona into engaqhelekanga kwingxelo, ngoko sihlalutya okwenzekayo apho, okanye sisuka nje sibulale. Ngokubanzi, izicelo zokutsala ziyinto eqhelekileyo.

Ukuba kukho impazamo, uyabuyisela umva? Ngaba ukhe wazama ukwenza oku?

Hayi, esi sisigqibo somntu ngeli xesha xa ebona ingxaki.

umthombo: www.habr.com