Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Kubukeka sengathi abathuthukisi be-Terraform banikeza imikhuba engcono kakhulu yokusebenza nengqalasizinda ye-AWS. Kukhona i-nuance nje. Ngokuhamba kwesikhathi, inani lezindawo liyakhula, ngayinye inezici zayo. Cishe ikhophi yesitaki sohlelo lokusebenza ivela endaweni engumakhelwane. Futhi ikhodi ye-Terraform idinga ukukopishwa ngokucophelela futhi ihlelwe ngokuvumelana nezidingo ezintsha noma yenziwe ikhekheba leqhwa.

Umbiko wami mayelana namaphethini ku-Terraform ukuze ulwe nesiphithiphithi kanye nesimiso sokwenziwa mathupha kumaphrojekthi amakhulu namade.

Ividiyo:

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngineminyaka engu-40, ngineminyaka engu-20 ngiku-IT. Ngisebenze kwa-Ixtens iminyaka engu-12. Sibambe iqhaza ekuthuthukisweni okuqhutshwa yi-ecommerce. Futhi bengilokhu ngizijwayeza i-DevOps iminyaka emi-5.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Indaba yami izoba ngesipiliyoni sami kuphrojekthi enkampanini engingeke ngilisho igama layo, ngicashe ngesivumelwano sokungadaluli.

Izinombolo kusilayidi zikhonjisiwe ukuze kuqondwe isikali sephrojekthi. Futhi konke engizokusho ngokulandelayo kuhlobene ne-Amazon.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngijoyine le phrojekthi eminyakeni engu-4 edlule. Nokulungiswa kabusha kwengqalasizinda kwase kushubile ngenxa yokuthi umsebenzi wawusukhulile. Futhi amaphethini ayesetshenziswa ayengasafaneleki. Futhi uma kubhekwa konke ukukhula okuhleliwe kwephrojekthi, kwakudingeka ukuza nento entsha.

Sibonga uMatvey, ositshele izolo ngokwenzeka eDodo Pizza. Yilokhu okwenzeka lapha eminyakeni engu-4 edlule.

Onjiniyela beza futhi baqala ukwenza ikhodi yengqalasizinda.

Izizathu ezisobala kakhulu zokuthi kungani lokhu kwakudingeka kwakuyisikhathi sokumaketha. Bekudingeka ukuqinisekisa ukuthi ithimba le-DevOps belingelona ibhodlela ngesikhathi sokukhishwa. Futhi phakathi kwezinye izinto, i-Terraform ne-Puppet yasetshenziswa ezingeni lokuqala.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

I-Terraform iphrojekthi yomthombo ovulekile evela ku-HashiCorp. Futhi kulabo abangazi nokuthi kuyini lokhu, amaslayidi ambalwa alandelayo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ingqalasizinda njengekhodi isho ukuthi singachaza ingqalasizinda yethu futhi sicele amarobhothi athile ukuthi aqinisekise ukuthi siyazithola izinsiza esizichazile.

Isibonelo, sidinga umshini obonakalayo. Sizochaza futhi sengeze amapharamitha amaningana adingekayo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngemuva kwalokhu, sizomisa ukufinyelela ku-Amazon kukhonsoli. Futhi sizocela uhlelo lweTerraform. Uhlelo lwe-Terraform luzothi: “Kulungile, singakwenzela insiza yakho lezi zinto.” Futhi okungenani insiza eyodwa izokwengezwa. Futhi azikho izinguquko ezilindelekile.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Uma usujabule ngakho konke, ungacela i-Terraform ukuthi ifake isicelo futhi i-Terraform izokwakhela isibonelo, futhi uzothola umshini obonakalayo efwini lakho.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngaphezu kwalokho iphrojekthi yethu iyathuthuka. Sengeza izinguquko ezithile lapho. Sicela ezinye izimo, sengeza imingenelo engama-53.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Futhi siyaphinda. Sicela uhlele. Siyabona ukuthi yiziphi izinguquko ezihleliwe. Sifaka isicelo. Futhi yile ndlela ingqalasizinda yethu ekhula ngayo.

I-Terraform isebenzisa okuthile okubizwa ngokuthi amafayela wombuso. Okusho ukuthi, ugcina zonke izinguquko eziya e-Amazon efayeleni lapho insiza ngayinye oyichazile, kunezinsiza ezihambisanayo ezakhiwe e-Amazon. Ngakho-ke, lapho incazelo yensiza ishintsha, iTerraform yazi kahle ukuthi yini okufanele ishintshwe e-Amazon.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Lawa mafayela esimo ekuqaleni bekungamafayela nje. Futhi sazigcina ku-Git, okwakungelula neze. Omunye njalo ukhohlwe ukwenza izinguquko, futhi kwaphakama izingxabano eziningi.

Manje kungenzeka ukusebenzisa i-backend, i.e. I-Terraform icacisiwe ukuthi yiliphi ibhakede nokuthi ifayela lesimo kufanele ligcinwe ngasiphi isihluthulelo. Futhi iTerraform ngokwayo izonakekela ukuthola leli fayela lombuso, yenza yonke imilingo futhi ibuyisele umphumela wokugcina.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ingqalasizinda yethu iyakhula. Nansi ikhodi yethu. Futhi manje asifuni nje ukudala umshini obonakalayo, sifuna ukuba nendawo yokuhlola.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

I-Terraform ikuvumela ukuthi udale into efana nemojuli, okungukuthi, chaza into efanayo kwenye ifolda.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Futhi, isibonelo, ekuhloleni, shayela le mojula futhi uthole into efanayo njengokuthi senze i-Terraform isebenze kumojula ngokwayo. Ukuze kuhlolwe kuzoba khona le khodi.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngokukhiqiza, singathumela izinguquko ezithile lapho, ngoba ekuhloleni asidingi izimo ezinkulu; ekukhiqizeni, izimo ezinkulu ziwusizo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Bese ngibuyela kuphrojekthi. Kwakuwumsebenzi onzima, ingqalasizinda ehleliwe yayinkulu kakhulu. Futhi kwakudingeka ngandlela-thile ukubeka yonke ikhodi ukuze kube lula kuwo wonke umuntu: kokubili kulabo abenza isondlo kule khodi kanye nalabo abenza izinguquko. Futhi kwakuhlelwe ukuthi noma yimuphi umthuthukisi angahamba ayolungisa ingqalasizinda njengoba kudingeka engxenyeni yakhe yesikhulumi.

Lesi yisihlahla somkhombandlela esituswa yi-HashiCorp ngokwayo uma unephrojekthi enkulu futhi kunengqondo ukuhlukanisa yonke ingqalasizinda ibe yizicucu ezincane, futhi uchaze ucezu ngalunye kufolda ehlukile.

Ukuba nomtapo wezincwadi obanzi wezinsiza, ungashayela cishe into efanayo ekuhlolweni nasekukhiqizeni.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Esimweni sethu, lokhu bekungafaneleki ngokuphelele, ngoba isitaki sokuhlola sonjiniyela noma sokuhlola bekufanele sitholwe ngendlela elula. Kodwa ngangingafuni ukudabula amafolda futhi ngiwasebenzise ngokulandelana okudingekayo, futhi ngikhathazeke ngokuthi i-database izovuka, bese kuvela isibonelo esisebenzisa le database. Ngakho-ke, konke ukuhlola kwethulwe kufolda eyodwa. Amamojula afanayo abizwa lapho, kodwa konke kwenziwa ngokugijima okukodwa.

I-Terraform inakekela zonke izidingo. Futhi njalo idala izinsiza ngokulandelana ukuze ukwazi ukuthola ikheli le-IP, isibonelo, esibonelweni esisha esisanda kwakhiwa, futhi uthole leli kheli le-IP kurekhodi le-route53.

Ngaphezu kwalokho, isiteji sikhulu kakhulu. Futhi ukwethula isitaki sokuhlola, ngisho noma kuyihora, noma amahora angu-8, kuwumsebenzi obiza kakhulu.

Futhi sizenzele ngokuzenzakalelayo lolu daba. Futhi umsebenzi kaJenkins wasivumela ukuthi siqhube isitaki. Kuyo, kwakudingeka uqalise isicelo sokudonsa ngezinguquko umthuthukisi afuna ukuzihlola, ucacise zonke izinketho ezidingekayo, izingxenye, nobukhulu. Uma efuna ukuhlolwa kokusebenza, khona-ke angathatha izimo ezengeziwe. Uma nje edinga ukuhlola ukuthi ifomu elithile liyavuleka, khona-ke angase aqale ngeholo elincane. Futhi ukhombise ukuthi iqoqo liyadingeka noma cha, njll.

UJenkins wabe esephusha umbhalo wegobolondo, owashintsha kancane ikhodi kufolda yeTerraform. Ngakhipha amafayela angadingekile futhi ngengeza amafayela adingekayo. Bese kuthi ngokugijima okukodwa kwe-Terraform faka isitaki saphakanyiswa.

Bese kuba nezinye izinyathelo engingafuni ukungena kuzo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngenxa yokuthi ukuze kuhlolwe sasidinga okunye okukhethwa kukho okuthe xaxa kunasekukhiqizweni, kwakudingeka senze amakhophi amamojula ukuze kulawa makhophi sengeze lezo zici ezazidingeka ekuhlolweni kuphela.

Futhi kwenzeka ukuthi ekuhloleni ngingathanda ukuhlola lezo zinguquko ezizogcina zingene ekukhiqizeni. Kodwa empeleni, into eyodwa ihlolwe, futhi enye ehluke kancane yasetshenziswa ekukhiqizeni. Futhi kwaba nekhefu elincane ephethinini lapho ekukhiqizeni zonke izinguquko zasetshenziswa ithimba lokusebenza. Futhi ngezinye izikhathi kwavela ukuthi lezo zinguquko okwakufanele zisuke ekuhlolweni ziye ekukhiqizeni zahlala kwenye inguqulo.

Ngaphezu kwalokho, kube nenkinga enkulu kangangokuthi kwanezelwa isevisi entsha, eyayihluke kancane kunesevele ikhona. Futhi esikhundleni sokushintsha imojuli ekhona, bekufanele senze ikhophi yayo futhi sengeze izinguquko ezidingekayo.

Empeleni, iTerraform ayilona ulimi lwangempela. Lesi isimemezelo. Uma sidinga ukumemezela okuthile, siyakumemezela. Futhi konke kuyasebenza.

Ngesinye isikhathi, lapho kuxoxwa ngesicelo sami sokudonsa, omunye wozakwethu wathi asikho isidingo sokudala amakhekheba eqhwa. Ngazibuza ukuthi usho ukuthini. Kukhona iqiniso lesayensi lokuthi awekho amakhekheba eqhwa amabili afanayo emhlabeni, wonke ahluke kancane. Futhi lapho nje ngizwa lokhu, ngezwa ngokushesha isisindo esigcwele sekhodi ye-Terraform. Ngoba ngesikhathi kudingekile ukususa inguqulo iye enguqulweni, i-Terraform yayidinga izinguquko zeketango, okungukuthi ikhodi yayingasahambelani nenguqulo elandelayo. Futhi kwakudingeka senze isicelo sokudonsa, esihlanganisa cishe ingxenye yamafayela engqalasizinda, ukuze silethe ingqalasizinda enguqulweni elandelayo yeTerraform.

Futhi ngemva kokuvela kweqhwa elinjalo, yonke ikhodi ye-Terraform esasiyiguqule yaba inqwaba enkulu, enkulu yeqhwa.

Kunjiniyela wangaphandle ongaphandle komsebenzi, lokhu akusho lutho kuye, ngoba wenze isicelo sokudonsa, insiza yakhe yaqala. Futhi yilokho kuphela, akusekho ukukhathazeka kwakhe. Futhi ithimba le-DevOps, elenza isiqiniseko sokuthi konke KULUNGILE, liyadingeka ukwenza zonke lezi zinguquko. Futhi izindleko zalezi zinguquko zenyuka kakhulu, kakhulu ngekhekheba leqhwa ngalinye elengeziwe.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Kunendaba emayelana nokuthi umfundi engqungqutheleni udweba kanjani imibuthano emibili ephelele ngoshoki ebhodini. Futhi uthisha uyamangala ukuthi wakwazi kanjani ukudweba ngokushelela kangaka ngaphandle kwekhampasi. Umfundi uyaphendula: “Kulula kakhulu, ngachitha iminyaka emibili ebuthweni ngiphendula umshini wokugaya inyama.”

Futhi eminyakeni emine ngibambe iqhaza kulo msebenzi, bengilokhu ngenza i-Terraform cishe iminyaka emibili. Futhi, kunjalo, nginamaqhinga, iseluleko esithile sendlela yokwenza lula ikhodi ye-Terraform, ngisebenze nayo njengolimi lokuhlela futhi nginciphise umthwalo kubathuthukisi okufanele bagcine le khodi isesikhathini.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Into yokuqala engingathanda ukuqala ngayo i-Symlinks. I-Terraform inekhodi eminingi ephindaphindwayo. Isibonelo, ucingo oluya kumhlinzeki cishe kuzo zonke izindawo lapho sakha khona ucezu lwengqalasizinda luyafana. Futhi kunengqondo ukuyibeka kufolda ehlukile. Futhi nomaphi lapho umhlinzeki edingeka khona ukwenza ama-Symlink kuleli fayela.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Isibonelo, ekukhiqizeni usebenzisa indima yokuthatha, ekuvumela ukuthi uthole amalungelo okufinyelela kwenye i-akhawunti ye-Amazon yangaphandle. Futhi ngemva kokushintsha ifayela elilodwa, bonke abasele esihlahleni sensiza bazoba namalungelo adingekayo ukuze iTerraform yazi ukuthi iyiphi ingxenye ye-Amazon okufanele ifinyelele.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngabe ama-Symlink ahluleka kuphi? Njengoba ngishilo, i-Terraform inamafayela wombuso. Futhi zipholile kakhulu, zipholile. Kodwa into ewukuthi iTerraform iqala i-backend kwasekuqaleni. Futhi akakwazi ukusebenzisa noma yikuphi okuguquguqukayo kulawa mapharamitha; kufanele ngaso sonke isikhathi abhalwe embhalweni.

Futhi ngenxa yalokho, lapho othile enza insiza entsha, ukopisha enye yekhodi kwamanye amafolda. Futhi angase enze iphutha ngokhiye noma ngebhakede. Isibonelo, wenza into ye-sandbox kusuka ku-sandbox, abese eyenza ekukhiqizeni. Futhi ngakho-ke kungase kuvele ukuthi ibhakede ekukhiqizeni lizosetshenziswa kusuka ku-sandbox. Yebo, bazoyithola ngokushesha. Kuzokwazi ukulungisa lokhu ngandlela thile, kodwa noma kunjalo kuwukumosha isikhathi futhi, ngokwezinga elithile, izinsiza.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Yini esingayenza ngokulandelayo? Ngaphambi kokusebenza neTerraform, udinga ukuyiqala. Ekuqaliseni, i-Terraform ilanda wonke ama-plugin. Ngesinye isikhathi bahlukana besuka ku-monolith baye ku-microservice architecture eyengeziwe. Futhi udinga njalo ukwenza i-Terraform init ukuze idonse wonke amamojula, wonke ama-plugin.

Futhi ungasebenzisa iskripthi segobolondo, okuthi, okokuqala, sithole zonke izinto eziguquguqukayo. Iskripthi segobolondo asikhawulelwe nganoma iyiphi indlela. Futhi, okwesibili, izindlela. Uma ngaso sonke isikhathi sisebenzisa indlela esendaweni yokugcina izinto njengokhiye wefayela lombuso, ngakho-ke, ngokufanele, iphutha lapha lizosuswa.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngingayithola kuphi idatha? Ifayela le-JSON. I-Terraform ikuvumela ukuthi ubhale ingqalasizinda hhayi kuphela nge-hcl (Ulimi Lokucushwa Kwe-HashiCorp), kodwa naku-JSON.

I-JSON ifundeka kalula kumbhalo wegobolondo. Ngokufanelekile, ungabeka ifayela lokucushwa ngebhakede endaweni ethile. Futhi sebenzisa leli bhakede kukhodi ye-Terraform kanye neskripthi segobolondo ukuze uqalise.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Kungani kubalulekile ukuba nebhakede leTerraform? Ngoba kukhona into efana namafayela wombuso akude. Okusho ukuthi, lapho ngiphakamisa insiza ethile, ukuze ngitshele i-Amazon: "Ngicela uphakamise isibonelo," ngidinga ukucacisa imingcele eminingi edingekayo.

Futhi lezi zihlonzi zigcinwa kwenye ifolda. Futhi ngingahamba ngithi: “I-Terraform, ngicela ugijimele kufayela lesifundazwe laleyo nsiza futhi ungitholele lezi zihlonzi.” Futhi ngaleyo ndlela ubunye obuthile buvela phakathi kwezifunda noma izindawo ezihlukene.

Akwenzeki ngaso sonke isikhathi ukusebenzisa ifayela lesimo esikude. Isibonelo, udale i-VPC ngesandla. Futhi ikhodi ye-Terraform eyenza i-VPC idala ama-VPC ahlukene kangangokuthi kuzothatha isikhathi eside kakhulu futhi kuzodingeka ulungise enye kwenye, ukuze ukwazi ukusebenzisa iqhinga elilandelayo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Okusho ukuthi, yenza imojuli ebonakala yenza i-VPC futhi, njengokungathi, ikunikeza izihlonzi, kodwa empeleni kukhona ifayela elinamanani aqinile angasetshenziswa ukudala isibonelo esifanayo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Akudingekile ngaso sonke isikhathi ukulondoloza ifayela lesimo efwini. Isibonelo, lapho uhlola amamojula, ungasebenzisa ukuqaliswa kwe-backend, lapho ifayela lizogcinwa khona kudiski ngesikhathi sokuhlolwa.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Manje kancane mayelana nokuhlola. Yini ongayihlola ku-Terraform? Mhlawumbe kuningi okungenzeka, kodwa ngizokhuluma ngalezi zinto ezi-4.

I-HashiCorp inokuqonda ukuthi ikhodi ye-Terraform kufanele ifomethwe kanjani. Futhi iTerraform fmt ikuvumela ukuthi ufomethe ikhodi oyihlelayo ngokwale nkolelo. Ngokufanelekile, ukuhlolwa kufanele kuhlole ukuthi ukufometha kuyahambisana yini nalokho i-HashiCorp eyashiyelwa yona, ukuze kungabikho isidingo sokushintsha indawo yabakaki, njll.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Okulandelayo yi-Terraform qinisekisa. Yenza okungaphezu kokuhlola i-syntax - ala, noma ngabe bonke abakaki babhanqiwe. Yini ebalulekile lapha? Ingqalasizinda yethu inkulu kakhulu. Kukhona obaba abaningi abahlukene kuyo. Futhi kuzo zonke udinga ukusebenzisa i-Terraform qinisekisa.

Ngokufanelekile, ukusheshisa ukuhlola, sisebenzisa izinqubo eziningi ngokuhambisana sisebenzisa ukuhambisana.

Ukufana kuyinto epholile kakhulu, kusebenzise.

Kodwa ngaso sonke isikhathi lapho i-Terraform iqala, iya ku-HashiCorp futhi ibuze, “Iziphi izinguqulo zakamuva ze-plugin? Ne-plugin enginayo kunqolobane - ingabe iyona elungile noma engalungile?" Futhi lokhu kwehle kuzo zonke izinyathelo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Uma utshela i-Terraform ukuthi akuphi ama-plugin, i-Terraform izothi: “Kulungile, lena cishe into yakamuva ekhona. Ngeke ngiye ndawo, ngizoqala ngokushesha ukuqinisekisa ikhodi yakho yeTerraform.”

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ukuze ugcwalise ifolda ngama-plugin adingekayo, sinekhodi ye-Terraform elula kakhulu edinga ukuqaliswa. Lapha, kunjalo, udinga ukucacisa bonke abahlinzeki ukuthi ngandlela thile babambe iqhaza kukhodi yakho, ngaphandle kwalokho i-Terraform izothi: "Angimazi umhlinzeki othile ngoba akekho kunqolobane."

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Okulandelayo uhlelo lweTerraform. Njengoba ngishilo, intuthuko i-cyclical. Senza izinguquko kukhodi. Futhi-ke udinga ukuthola ukuthi yiziphi izinguquko ezihlelelwe ingqalasizinda.

Futhi lapho ingqalasizinda inkulu kakhulu, ungashintsha imojuli eyodwa, ulungise indawo ethile yokuhlola noma isifunda esithile futhi uphule esomakhelwane. Ngakho-ke, uhlelo lwe-Terraform kufanele lwenziwe kuyo yonke ingqalasizinda futhi lubonise ukuthi yiziphi izinguquko ezihleliwe.

Ungakwenza lokhu ngobuhlakani. Isibonelo, sibhale umbhalo wePython oxazulula ukuncika. Futhi kuye ngokuthi yini eshintshiwe: imojula ye-Terraform noma ingxenye ethile nje, yenza izinhlelo zawo wonke amafolda ancike.

Izinhlelo ze-terraform kufanele zenziwe ngokucelwa. Okungenani yilokho esikwenzayo.

Vele, kuhle ukwenza izivivinyo kulo lonke ushintsho, kukho konke ukuzibophezela, kepha izinhlelo ziyinto ebiza kakhulu. Futhi esicelweni sokudonsa sithi, "Ngicela unginikeze izinhlelo." Irobhothi liyaqala. Futhi ithumela imibono noma inamathisele zonke izinhlelo ezilindelekile ezinguqukweni zakho.

Uhlelo luyinto ebiza kakhulu. Kuthatha isikhathi ngoba iTerraform iya e-Amazon futhi ibuze, “Ingabe lesi sibonelo sisekhona? Ingabe le-autoscale inamapharamitha afanayo ncamashi?” Futhi ukuze ukusheshise lokhu, ungasebenzisa ipharamitha efana ne-refresh=false. Lokhu kusho ukuthi i-Terraform izolanda isimo ku-S3. Futhi izokholelwa ukuthi umbuso uzofana ncamashi nalokho okuse-Amazon.

Uhlelo olunjalo lwe-Terraform luhamba ngokushesha kakhulu, kodwa umbuso kufanele uhambisane nengqalasizinda yakho, okungukuthi endaweni ethile, ngesinye isikhathi ukuvuselela kwe-Terraform kufanele kuqale. Ukuvuselela kabusha kwe-Terraform kwenza lokho kanye: isimo sifana nalokho okukungqalasizinda yangempela.

Futhi sidinga ukukhuluma ngokuphepha. Yilapho okwakufanele siqale khona. Lapho osebenzisa khona i-Terraform ne-Terraform isebenza engqalasizinda yakho kuba sengozini. Okusho ukuthi, empeleni wenza ikhodi. Futhi uma isicelo sokudonsa siqukethe uhlobo oluthile lwekhodi enonya, khona-ke singenziwa kungqalasizinda enokufinyelela okuningi. Ngakho-ke qaphela lapho usebenzisa uhlelo lwe-Terraform.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Into elandelayo engithanda ukukhuluma ngayo ukuhlola idatha yomsebenzisi.

Iyini idatha yomsebenzisi? E-Amazon, lapho sakha isibonelo, singathumela incwadi ethile nesibonelo - idatha ye-meta. Uma isibonelo siqala, ngokuvamile i-cloud init ihlala ikhona kulezi zimo. I-Cloud init ifunda le ncwadi bese ithi: “Kulungile, namuhla ngiyisilinganisi somthwalo.” Futhi ngokuvumelana nalezi zivumelwano wenza ezinye izenzo.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Kodwa, ngeshwa, lapho senza uhlelo lwe-Terraform kanye ne-Terraform isebenze, idatha yomsebenzisi ibukeka njengalolu hlobo lwezinombolo. Okusho ukuthi, umane akuthumelele i-hashi. Futhi konke ongakubuka ohlelweni ukuthi kuzoba khona izinguquko noma ukuthi i-hashi izohlala ifana.

Futhi uma ungakunaki lokhu, khona-ke ifayela lombhalo eliphukile lingase liphele e-Amazon, engqalasizinda yangempela.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Kungenjalo, lapho wenza, awukwazi ukucacisa hhayi yonke ingqalasizinda, kodwa isifanekiso kuphela. Futhi kukhodi ithi: "Ngicela ubonise lesi sifanekiso esikrinini sami." Futhi ngenxa yalokho, ungathola ukuphrinta kokuthi idatha yakho izobukeka kanjani ku-Amazon.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Enye inketho ukusebenzisa imojuli ukukhiqiza idatha yomsebenzisi. Uzosebenzisa le mojuli. Uthola ifayela kudiski. Qhathanisa nereferensi. Ngakho-ke, uma umfana othile enquma ukulungisa idatha yomsebenzisi kancane, ukuhlolwa kwakho kuzothi: "Kulungile, kukhona izinguquko lapha nalapha - lokhu kuvamile."

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Into elandelayo engithanda ukukhuluma ngayo i-Automate Terraform application.

Yiqiniso, kuyethusa ngempela ukwenza i-Terraform isebenze kumodi ezenzakalelayo, ngoba ubani owaziyo ukuthi yiziphi izinguquko ezifikile lapho nokuthi zingalimaza kanjani ingqalasizinda ephilayo.

Ngendawo yokuhlola, konke lokhu kujwayelekile. Okusho ukuthi, umsebenzi odala indawo yokuhlola yilokho okudingwa yibo bonke abathuthukisi. Futhi inkulumo enjengokuthi “konke kungisebenzele” ayiyona i-meme ehlekisayo, kodwa iwubufakazi bokuthi umuntu wadideka, waphakamisa isitaki, futhi wenza izivivinyo ezithile kulesi sitaki. Futhi wenza isiqiniseko sokuthi konke kuhamba kahle lapho wathi: “Kulungile, ikhodi engiyikhiphayo ihloliwe.”

Emkhiqizweni, i-sandbox nakwezinye izindawo ezibaluleke kakhulu kwezamabhizinisi, ungasebenzisa izinsiza ezithile ngokuphepha ngoba akubangeli ukuthi kufe noma ubani. Lawa: amaqembu e-autoscale, amaqembu okuvikela, izindima, i-route53, nohlu lapho lungaba lukhulu kakhulu. Kodwa hlala ubhekile ukuthi kwenzekani, funda imibiko yohlelo lokusebenza oluzenzakalelayo.

Lapho kuyingozi noma kwesabisa khona ukufaka isicelo, isibonelo, uma lezi ezinye izinsiza eziphikelelayo ezivela kusizindalwazi, thola imibiko yokuthi kunezinguquko ezingasetshenziswanga engxenyeni ethile yengqalasizinda. Futhi unjiniyela, ngaphansi kokugadwa, uqala imisebenzi ukuze ayifake noma ayenze kukhonsoli yakhe.

I-Amazon inento efana nokuvikelwa kokunqamula. Futhi ingakuvikela kwezinye izimo ezinguqukweni ezingadingeki kuwe. Okusho ukuthi, uTerraform waya e-Amazon wathi: “Ngidinga ukubulala lesi senzakalo ukuze ngenze esinye.” Futhi i-Amazon ithi: “Uxolo, hhayi namuhla. Sinokuvikelwa kokunqanyulwa."

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Futhi uqweqwe lukashukela ekhekheni luwukwenza kahle ikhodi. Uma sisebenza ngekhodi ye-Terraform, kufanele sidlulisele inombolo enkulu kakhulu yamapharamitha kumojula. Lawa amapharamitha adingekayo ukuze wakhe uhlobo oluthile lwensiza. Futhi ikhodi iphenduka ibe izinhlu ezinkulu zamapharamitha adinga ukudluliswa kusuka kumojula kuye kumojula, isuka kumojula iye kumamojula, ikakhulukazi uma amamojula efakwe isidleke.

Futhi kunzima kakhulu ukufunda. Kunzima kakhulu ukubukeza lokhu. Futhi kaningi kuvela ukuthi amanye amapharamitha ayabuyekezwa futhi awawona ngempela adingekayo. Futhi lokhu kubiza isikhathi nemali ukulungisa kamuva.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ngakho-ke, ngiphakamisa ukuthi usebenzise into efana nepharamitha eyinkimbinkimbi ehlanganisa umuthi othile wamanani. Okusho ukuthi, udinga uhlobo oluthile lwefolda lapho unawo wonke amanani ongathanda ukuba nawo endaweni ethile.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Futhi ngokubiza le moduli, ungathola isihlahla esikhiqizwa kumojula eyodwa evamile, okungukuthi, kumojula evamile esebenza ngokufanayo kuyo yonke ingqalasizinda.

Kule mojula ungenza izibalo ezithile usebenzisa isici sakamuva ku-Terraform njengabantu bendawo. Bese-ke, ngokukhipha okukodwa, unikeze ipharamitha eyinkimbinkimbi, engabandakanya ama-hashes ahlukahlukene, njll.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Lapha kulapho ngigcine khona konke ukutholwa okuhle kakhulu. Futhi ngingathanda ukuxoxa indaba ngoColumbus. Lapho efuna imali yohambo lwakhe lokuthola i-India (njengoba ayecabanga ngaleso sikhathi), akekho owayemkholwa futhi babecabanga ukuthi kwakungenakwenzeka. Wabe esethi: “Qiniseka ukuthi iqanda aliwi.” Bonke abamabhange, abacebile kakhulu futhi mhlawumbe abantu abahlakaniphile, bazama ngandlela-thile ukubeka iqanda, futhi lalilokhu liwa. UColumbus wabe esethatha iqanda walicindezela kancane. Igobolondo lashwabana futhi iqanda lahlala linganyakazi. Bathi, "O, lokho kulula kakhulu!" Futhi uColumbus waphendula: “Yebo, kulula kakhulu. Futhi uma ngivula i-India, wonke umuntu uzosebenzisa lo mzila wezohwebo. "

Futhi lokhu engiqeda ukukutshela kona cishe kuyizinto ezilula neziwubala. Futhi uma ufunda ngazo futhi uqala ukuzisebenzisa, zilandelana. Ngakho zuza. Futhi uma lezi kuyizinto ezijwayelekile ngokuphelele kuwe, okungenani uyazi ukuthi ungabeka kanjani iqanda ukuze lingawi.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Ake sibone:

  • Zama ukugwema amakhekheba eqhwa. Futhi amakhekheba eqhwa ambalwa, izinsiza ezimbalwa ozozidinga ukuze wenze noma yiziphi izinguquko kuyo yonke ingqalasizinda yakho enkulu.
  • Izinguquko eziqhubekayo. Okusho ukuthi, uma izinguquko ezithile zenzeka kukhodi, udinga ukuletha ingqalasizinda yakho ekuhambisaneni nalezi zinguquko ngokushesha okukhulu. Akufanele kube nesimo lapho othile eza ezobheka i-Elasticsearch ngemva kwezinyanga ezimbili noma ezintathu, enze uhlelo lwe-Terraform, futhi kunenqwaba yezinguquko abengazilindele. Futhi kuthatha isikhathi esiningi ukubuyisela yonke into ngohlelo.
  • Ukuhlolwa kanye ezishintshayo. Lapho ikhodi yakho ihlanganiswa nokuhlola nezici, yilapho uba nokuqiniseka okwengeziwe kokuthi wenza yonke into ngendlela efanele. Futhi ukulethwa okuzenzakalelayo kuzokwandisa ukuzethemba kwakho izikhathi eziningi.
  • Ikhodi yokuhlola nezindawo zokukhiqiza kufanele icishe ifane. Empeleni, ngoba ukukhiqizwa kusahluka kancane futhi kusazoba nama-nuances athile azodlulela ngale kwendawo yokuhlola. Kodwa noma kunjalo, ukuhlanganisa noma ukususa, lokhu kungaqinisekiswa.
  • Futhi uma unekhodi eningi ye-Terraform futhi kuthatha isikhathi esiningi ukugcina le khodi isesikhathini, ngakho-ke akukephuzi kakhulu ukuyiphinda futhi uyifake esimweni esihle.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

  • Ingqalasizinda engaguquki. Ukulethwa kwe-AMI ngesikhathi.
  • Isakhiwo se-route53 uma unokuningi okufakiwe futhi ufuna ukuthi kulandelelane.
  • Ukulwa nemikhawulo yesilinganiso se-API. Kulapho i-Amazon ithi, "Yilokho kuphela, angisakwazi ukwamukela ezinye izicelo, ngicela ulinde." Kanti ingxenye yehhovisi ilindile kuze kube izokwazi ukwethula ingqalasizinda yayo.
  • Izimo ze-Spot. I-Amazon akuwona umcimbi oshibhile futhi amabala akuvumela ukuthi wonge okuningi. Futhi lapho ungatshela wonke umbiko ngakho.
  • Ezokuphepha kanye nezindima ze-IAM.
  • Ukusesha izinsiza ezilahlekile, uma unezimo zemvelaphi engaziwa e-Amazone, zidla imali. Ngisho noma izimo zibiza u-$100-150 ngenyanga, lokho kungaphezu kuka-$1 ngonyaka. Ukuthola izinsiza ezinjalo kuyibhizinisi elinenzuzo.
  • Nezimo ezigodliwe.

Amaphethini ku-Terraform ukuze alwe nesiphithiphithi nesimiso sokwenziwa mathupha. UMaxim Kostrikin (Ixtens)

Kuphelele kimi lokho. I-Terraform ipholile kakhulu, uyayisebenzisa. Ngiyabonga!

Imibuzo yakho

Siyabonga ngombiko! Ifayela lakho lesimo liku-S3, kodwa uyixazulula kanjani inkinga yokuthi abantu abambalwa bangathatha leli fayela lesimo futhi bazame ukunweba?

Okokuqala nje, asijahile. Okwesibili, kukhona amafulegi, lapho sibika khona ukuthi sisebenza ngocezu oluthile lwekhodi. Okungukuthi, naphezu kokuthi ingqalasizinda inkulu kakhulu, lokhu akusho ukuthi kukhona umuntu ohlale esebenzisa okuthile. Futhi lapho kunesigaba esisebenzayo, lokhu bekuyinkinga; sigcine amafayela wesimo ku-Git. Lokhu kwakubalulekile, ngaphandle kwalokho othile wayezokwenza ifayela lesifundazwe, futhi kwakudingeka siwahlanganise mathupha ukuze yonke into iqhubeke. Manje ayikho inkinga enjalo. Ngokuvamile, i-Terraform ixazulule le nkinga. Futhi uma okuthile kushintsha njalo, khona-ke ungasebenzisa izingidi, ezivimbela lokho okushilo.

Ingabe usebenzisa umthombo ovulekile noma ibhizinisi?

Alikho ibhizinisi, okungukuthi yonke into ongaya futhi uyilande mahhala.

Igama lami nginguStanislav. Bengifuna ukwengeza okuncane. Ukhulume ngesici se-Amazon esikuvumela ukuthi wenze isigameko singabulali. Lokhu futhi kuyi-Terraform ngokwayo; ebhulokhini le-Life Second ungacacisa ukuvinjelwa kwezinguquko noma ukuvinjelwa kokucekelwa phansi.

Isikhathi sasilinganiselwe. Iphuzu elihle.

Bengifuna nokubuza izinto ezimbili. Okokuqala, ukhulume ngokuhlolwa. Ingabe usebenzise noma imaphi amathuluzi okuhlola? Ngezwa nge-plugin ye-Test Kitchen. Mhlawumbe kukhona okunye. Futhi ngingathanda ukubuza mayelana namagugu endawo. Ahluke kanjani ngokuyisisekelo kokuthi Okuguquguqukayo Kokufaka? Futhi kungani ngingakwazi ukuhlukanisa okuthile Ngamanani Endawo kuphela? Ngizamile ukuthola lesi sihloko, kodwa ngandlela-thile angikwazanga ukukuthola ngokwami.

Singakhuluma kabanzi ngaphandle kwaleli gumbi. Amathuluzi ethu okuhlola azenzele wona ngokuphelele. Akukho okuzohlolwa. Ngokuvamile, kunezinketho lapho ukuhlolwa okuzenzakalelayo kuthathwa ingqalasizinda ndawana thize, kuhlole ukuthi kulungile, bese kucekela phansi yonke into ngombiko wokuthi ingqalasizinda yakho isesimeni esihle. Asinakho lokhu ngoba izitaki zokuhlola zenziwa nsuku zonke. Futhi lokho kwanele. Futhi uma into iqala ukuphuka, izoqala ukuphuka ngaphandle kokuthi siyihlole kwenye indawo.

Mayelana Namagugu endawo, asiqhubeke nengxoxo ngaphandle kwegumbi.

Sawubona! Siyabonga ngombiko! Inolwazi kakhulu. Uthe unezinhlobo eziningi zekhodi yokuchaza ingqalasizinda. Ingabe ucabange ukukhiqiza le khodi?

Umbuzo omuhle, ngiyabonga! Iphuzu liwukuthi uma sisebenzisa ingqalasizinda njengekhodi, sicabanga ukuthi sibheka ikhodi futhi siqonde ukuthi iyiphi ingqalasizinda elele ngemuva kwaleyo khodi. Uma ikhodi yenziwe, khona-ke sidinga ukucabanga ukuthi iyiphi ikhodi ezokhiqizwa ukuze siqonde ukuthi hlobo luni lwengqalasizinda ezoba khona. Kuphakathi kokuthi sikhiqiza ikhodi, siyayenza, futhi empeleni kwenzeka into efanayo. Ngakho sayilandela indlela esiyibhalile, sayithola. Amajeneretha engeziwe avele kamuva lapho siqala ukuwenza. Futhi kwase kwephuze kakhulu ukushintsha.

Ingabe kukhona okuzwile mayelana ne-jsonnet?

Cha

Bheka, lokhu kuyinto epholile kakhulu. Ngibona isimo esithile lapho ungasisebenzisa khona futhi ukhiqize ukwakheka kwedatha.

Amajeneretha mahle uma unawo, njengasehlaya ngomshini wokushefa. Okusho ukuthi, okokuqala ubuso buhlukile, kodwa-ke wonke umuntu unobuso obufanayo. Amajeneretha asebenza kahle kakhulu. Kodwa, ngeshwa, ubuso bethu buhluke kancane. Lokhu kuyinkinga.

Bheka nje. Ngiyabonga!

Igama lami nginguMaxim, ngivela eSberbank. Ukhulume kancane ngokuthi ubuzama kanjani ukuletha i-Terraform okulingana nolimi lokuhlela. Akulula yini ukusebenzisa i-Ansible?

Lezi yizinto ezihluke kakhulu. Ungakha izinsiza ku-Ansible, futhi iPuppet ingakha izinsiza e-Amazon. Kepha iTerraform iqonde ngqo phezulu.

Ingabe une-Amazon kuphela?

Akukhona ukuthi sine-Amazon kuphela. Cishe sine-Amazon kuphela. Kepha isici esibalulekile ukuthi iTerraform iyakhumbula. Ku-Ansible, uma uthi: "Nginike izikhathi ezi-5," kuzophakama, bese uthi: "Futhi manje ngidinga ezi-3." Futhi uTerraform uzothi: "Kulungile, ngizobulala aba-2," futhi u-Ansible uzothi: "Kulungile, nangu u-3 wakho." Isamba esingu-8.

Sawubona! Siyabonga ngombiko wakho! Kwakujabulisa kakhulu ukuzwa ngeTerraform. Ngingathanda ngokushesha ukubeka amazwana amancane mayelana neqiniso lokuthi iTerraform ayikabi nakho ukukhululwa okuzinzile, ngakho phatha iTerraform ngokuqaphela okukhulu.

I-spoon enhle yesidlo sakusihlwa. Okusho ukuthi, uma udinga isixazululo, ngezinye izikhathi ubeka into engazinzile, njll., kodwa iyasebenza futhi yasisiza.

Umbuzo yilokhu. Usebenzisa i-backend ekude, usebenzisa i-S 3. Kungani ungasebenzisi i-backend esemthethweni?

Okusemthethweni?

I-Terraform Cloud.

Wavela nini?

Cishe ezinyangeni ezi-4 ezedlule.

Ukube yayivele eminyakeni emi-4 edlule, mhlawumbe ngabe ngiwuphendule umbuzo wakho.

Sekuvele kunomsebenzi owakhelwe ngaphakathi kanye nezingidi, futhi ungagcina ifayela lesimo. Izame. Kodwa nami angikayihloli.

Sihamba ngesitimela esikhulu esihamba ngesivinini esikhulu. Futhi awukwazi nje ukuthatha izimoto ezimbalwa uzilahle.

Ukhulume ngamakhekheba eqhwa, kungani ungasebenzisi igatsha? Kungani kungenzeki ngaleyo ndlela?

Indlela yethu ukuthi ingqalasizinda yonke isendaweni eyodwa yokugcina izinto. I-Terraform, i-Puppet, yonke imibhalo ehlobene nalokhu ngandlela thize, yonke isendaweni eyodwa yokugcina. Ngale ndlela singaqinisekisa ukuthi izinguquko ezikhulayo ziyahlolwa ngokulandelana. Ukube bekuyinqwaba yamagatsha, iphrojekthi enjalo bekungeke kwenzeke ukuyinakekela. Kudlula izinyanga eziyisithupha, futhi ziyehluka kangangokuthi kuwuhlobo oluthile lwesijeziso. Yilokhu ebengifuna ukukubalekela ngaphambi kokulungisa kabusha.

Ngakho akusebenzi?

Lokhu akusebenzi nhlobo.

Egatsheni ngisika i-slide sefolda. Okusho ukuthi, uma wenzela isitaki ngasinye sokuhlola, isibonelo, ithimba A linefolda yalo, ithimba B linefolda yalo, khona-ke lokhu nakho akusebenzi. Sakhe ikhodi yemvelo yokuhlola ehlanganisiwe eyayivumelana nezimo ukuze ivumelane nawo wonke umuntu. Okusho ukuthi, sinikeze ikhodi eyodwa.

Sawubona! Igama lami nginguYura! Siyabonga ngombiko! Umbuzo mayelana namamojula. Uthi usebenzisa amamojula. Uyixazulula kanjani inkinga uma izinguquko zenziwe kwimojuli eyodwa engahambisani noshintsho lomunye umuntu? Ingabe ngandlela thile uhumusha amamojula noma uzama ukuletha i-wunderwaffle ukuze uhlangabezane nezidingo ezimbili?

Lena inkinga enkulu yenqwaba yeqhwa. Yilokhu esibhekana nakho lapho ushintsho oluthile olungenacala lungaphula ingxenye ethile yengqalasizinda. Futhi lokhu kuzobonakala kuphela ngemva kwesikhathi eside.

Okusho ukuthi, ayikaxazululwa okwamanje?

Wenza amamojula jikelele. Gwema amakhekheba eqhwa. Futhi konke kuzohamba kahle. Ingxenye yesibili yombiko imayelana nendlela yokugwema lokhu.

Sawubona! Siyabonga ngombiko! Ngingathanda ukucacisa. Emuva kwesigcawu kwakunenqwaba engize ngayo. Ihlanganiswe kanjani i-Puppet kanye nokusabalalisa indima?

Idatha yomsebenzisi.

Okusho ukuthi, uvele ukhafule ifayela bese ulenza ngandlela thize?

Idatha yomsebenzisi inothi, okungukuthi uma senza i-clone yesithombe, u-Daemon uphakama lapho futhi, ezama ukuthola ukuthi ungubani, ufunda inothi ukuthi uyisilinganisi somthwalo.

Okusho ukuthi, ingabe lolu uhlobo oluthile lwenqubo ehlukene enikezwayo?

Asizange sikusungule. Siyayisebenzisa.

Sawubona! Nginombuzo nje mayelana nomsebenzisi - idatha. Ushilo ukuthi kunezinkinga lapho, umuntu angase athumele okuthile endaweni engafanele. Ingabe ikhona indlela yokugcina idatha yomsebenzisi ku-Git efanayo, ukuze kuhlale kucacile ukuthi idatha yomsebenzisi isho ukuthini?

Senza idatha yomsebenzisi kusuka kusifanekiso. Okusho ukuthi, inani elithile lokuguquguquka lisetshenziswa lapho. Futhi iTerraform ikhiqiza umphumela wokugcina. Ngakho-ke, awukwazi nje ukubuka isifanekiso bese usho ukuthi kuzokwenzekani, ngoba zonke izinkinga zihlobene nokuthi umthuthukisi ucabanga ukuthi udlulisa intambo kulokhu okuguquguqukayo, kodwa i-array isetshenziswa lapho. Futhi yena-bam kanye nami-s'bani-bani, ukuthi-nokuthi, umugqa olandelayo, nakho konke kwaphuka. Uma lokhu kuyinsiza entsha futhi umuntu ayicoshe futhi abone ukuthi kukhona okungasebenzi, khona-ke ixazululwa ngokushesha. Futhi uma leli qembu le-autoscale libuyekezwa, khona-ke ngesikhathi esithile izimo eqenjini le-autoscale ziqala ukushintshwa. Futhi, kukhona okungasebenzi. Ibuhlungu.

Kuvele ukuthi isixazululo kuphela ukuhlola?

Yebo, uyayibona inkinga, ungeza izinyathelo zokuhlola lapho. Okusho ukuthi, okukhiphayo kungabuye kuhlolwe. Mhlawumbe akulula kangako, kodwa ungaphinda ubeke amamaki - hlola ukuthi idatha yomsebenzisi ibethelwe lapha.

Igama lami nginguTimur. Kuhle kakhulu ukuthi kunemibiko yokuthi ungayihlela kanjani kahle i-Terraform.

Angikaqali nokuqala.

Ngicabanga ukuthi mhlawumbe engqungqutheleni elandelayo kuzoba khona. Nginombuzo olula. Kungani ubhala ngokuqinile inani kumojuli ehlukile kunokusebenzisa ama-tfvars, okungukuthi kungani imojuli enamanani ingcono kune-tfvars?

Okungukuthi, kufanele ngibhale lapha (isilayidi: Ukukhiqiza/imvelo/izilungiselelo.tf): isizinda = ukuguquguquka, isizinda se-vpcnetwork, i-vpcnetwork eguquguqukayo kanye nama-stvars - ngingathola into efanayo?

Yilokho kanye esikwenzayo. Sibhekisela kumojula yomthombo wokulungiselelwa, isibonelo.

Eqinisweni, lokhu kuyi-tfvars enjalo. I-Tfvars ilula kakhulu endaweni yokuhlola. Nginama-tfvars ezimweni ezinkulu, ezincane. Futhi ngaphonsa ifayela elilodwa kufolda. Futhi ngakuthola engangikufuna. Uma sisika ingqalasizinda, sifuna ukuthi sikwazi ukubheka futhi siqonde konke ngokushesha. Futhi ngakho-ke kuvela ukuthi udinga ukubheka lapha, bese ubheka ama-tfvars.

Kungenzeka yini ukuba konke endaweni eyodwa?

Yebo, i-tfvars yilapho unekhodi eyodwa. Futhi isetshenziswa ezindaweni eziningana ezahlukene ezinama-nuances ahlukene. Bese uphonsa ama-tfvars futhi uthole ama-nuances akho. Futhi siyingqalasizinda njengekhodi ngendlela yayo emsulwa. Ngabheka ngaqonda.

Sawubona! Ingabe uke wahlangabezana nezimo lapho umhlinzeki wamafu ephazamisa okwenzile i-Terraform? Ake sithi sihlela imethadatha. Kukhona okhiye be-ssh. Futhi i-Google ihlezi ibeka imethadatha yayo nokhiye bayo lapho. Futhi iTerraform ibhala njalo ukuthi inezinguquko. Ngemva kokugijima ngakunye, ngisho noma kungashintshi lutho, uhlale ethi uzowubuyekeza lo mkhakha manje.

Ngokhiye, kodwa yebo, ingxenye yengqalasizinda ithintwa yile nto, okungukuthi i-Terraform ayikwazi ukushintsha lutho. Nathi ngeke sishintshe lutho ngezandla zethu. Sizohlala nayo okwamanje.

Okusho ukuthi, uhlangabezane nento efana nale, kodwa awuzange uqhamuke nalutho, uyenza kanjani futhi uzenzele yena?

Ngeshwa yebo.

Sawubona! Igama lami ngingu-Starkov Stanislav. Imeyili. ru Iqembu. Uyixazulula kanjani inkinga yokukhiqiza ithegi..., uyidlulisa kanjani ngaphakathi? Njengoba ngikuqonda, ngokusebenzisa Umsebenzisi - idatha yokucacisa igama lomsingathi, vula i-Puppet? Futhi ingxenye yesibili yombuzo. Uyixazulula kanjani le nkinga nge-SG, i.e. uma ukhiqiza i-SG, izehlakalo ezingamakhulu zohlobo olufanayo, yiliphi igama elilungile lazo?

Lezo zimo ezibaluleke kakhulu kithi, siziqamba kahle. Lezo ezingadingeki, kukhona inothi lokuthi leli yiqembu le-autoscale. Futhi ngokombono ungakwazi ukuyibethela phansi futhi uthole entsha.

Ngokuqondene nenkinga ngethegi, ayikho inkinga enjalo, kodwa kunomsebenzi onjalo. Futhi sisebenzisa amathegi kakhulu, kakhulu, ngoba ingqalasizinda inkulu futhi iyabiza. Futhi sidinga ukubheka ukuthi imali iya kuphi, ngakho amathegi asivumela ukuthi sihlukanise ukuthi kwashonaphi. Futhi, ngokufanele, ukucinga okuthile okusho ukuthi kusetshenziswe imali eningi lapha.

Umbuzo wawumayelana nani?

Uma i-SG idala amakhulukhulu ezimo, ingabe zidinga ukuhlukaniswa ngandlela thize?

Cha, ungakwenzi. Esikhathini ngasinye kune-ejenti ebika ukuthi nginenkinga. Uma i-ejenti ibika, kusho ukuthi umenzeli uyazi ngaye futhi, okungenani, ikheli lakhe lasesizindeni se-inthanethi likhona. Usuvele ubalekele. Okwesibili, sisebenzisa i-Consul for Discovery, lapho uKubernetes engekho. Futhi i-Consul iphinde ibonise ikheli le-IP lesibonelo.

Okungukuthi, ingabe ugxile ngokukhethekile ku-IP, hhayi egameni lomsingathi?

Akunakwenzeka ukuzulazula ngegama lomsingathi, i.e. maningi. Kukhona izihlonzi eziyisibonelo - i-AE, njll. Ungayithola ndawana thize, ungayiphonsa ekusesheni.

Sawubona! Ngabona ukuthi iTerraform iyinto enhle, eyenzelwe amafu.

Hhayi kuphela.

Lona umbuzo ongithakaselayo. Uma unquma ukuthutha, yithi, ku-Bare Metal en masse nazo zonke izimo zakho? Ingabe kuzoba nezinkinga? Noma usazosebenzisa eminye imikhiqizo, isibonelo, i-Ansible efanayo eshiwo lapha?

I-Ansible incane ngokunye. Okusho ukuthi, i-Ansible isivele iyasebenza uma isibonelo sesiqalile. Futhi iTerraform isebenza ngaphambi kokuqala kwesibonelo. Ukushintshela ku-Bare Metal - cha.

Hhayi manje, kodwa ibhizinisi lizofika lithi: "Woza."

Ukushintshela kwelinye ifu - yebo, kodwa kukhona iqhinga elihluke kancane lapha. Udinga ukubhala ikhodi ye-Terraform ngendlela yokuthi ungakwazi ukushintshela kwelinye ifu ngomzamo omncane.

Ekuqaleni, umsebenzi wawubekwe ukuthi ingqalasizinda yethu yonke i-agnostic, okungukuthi noma yiliphi ifu kufanele lifanele, kodwa ngesinye isikhathi ibhizinisi layeka futhi lathi: “Kulungile, eminyakeni engu-N ezayo ngeke siye ndawo, singasebenzisa izinsiza. kusuka e-Amazon"

I-Terraform ikuvumela ukuthi udale imisebenzi ye-Front-End, ulungiselele i-PagerDuty, idokhumenti yedatha, njll. Inemisila eminingi. Angakwazi ukulawula umhlaba wonke.

Siyabonga ngombiko! Sengiphinde ngisebenzisa iTerraform iminyaka emi-4 manje. Esigabeni sokushintshela ku-Terraform, kungqalasizinda, kuya encazelweni echazayo, besibhekene nesimo lapho othile enza okuthile ngesandla, futhi uzama ukwenza uhlelo. Futhi ngithole uhlobo oluthile lwephutha lapho. Ubhekana kanjani nezinkinga ezinjalo? Uzithola kanjani izinsiza ezilahlekile ezisohlwini?

Ikakhulukazi ngezandla nangamehlo ethu, uma sibona okuthile okungajwayelekile embikweni, khona-ke sihlaziya okwenzeka lapho, noma simane sibulale. Ngokuvamile, izicelo zokudonsa ziyinto evamile.

Uma kunephutha, uyabuyisela emuva? Uke wazama ukwenza lokhu?

Cha, lesi yisinqumo somuntu ngaleso sikhathi lapho ebona inkinga.

Source: www.habr.com