Taipei HashiCorp User Group Meetup #1, 20180118

1. Terraform

2. About me
Alan Chen
Architect @ AMIS
https://github.com/alanchchen/
golang, ethereum, blockchain, cryptocurrency, docker,
kubernetes, helm, terraform, and microservices.

3. Why Terraform?
Infrastructure as Code
Infrastructure as code (IaC) is the process of managing and
provisioning computer data centers through machine-readable
definition files, rather than physical hardware configuration or
interactive configuration tools.

4. Why Terraform?
What have you done?

5. Why Terraform?
Declarative vs. Imperative
resource "azurerm_resource_group" "test"
{
name = "testResourceGroup1"
location = "West US"
}
#!/bin/sh
az group create
—name testResourceGroup1
—location "WestUS"

6. Why Terraform?
Various Providers

7. Terminal
$ terraform init -backend-config="..."
$ terraform plan
$ terraform apply
$ terraform destroy
Most Common Commands

8. provider "azurerm" {
version = "~> 0.2"
subscription_id = "${var.subscription_id}"
client_id = "${var.client_id}"
client_secret = "${var.client_secret}"
tenant_id = "${var.tenant_id}"
}
main.tf
Azure Resource Manager Provider
https://www.terraform.io/docs/providers/azurerm/index.html
Authenticating using a Service Principal
https://www.terraform.io/docs/providers/azurerm/authenticating_via_service_princi
pal.html
Provider - Terraform with Microsoft Azure

9. Terminal
$ az login
$ az account list
[
{
"cloudName": "AzureCloud",
"id": “SUBSCRIPTION_ID”,
"isDefault": false,
"name": "Microsoft Azure Sponsorship",
"state": "Enabled",
"tenantId": “…”,
"user": {
"name": “alan@am.is",
"type": "user"
}
}
]
Azure CLI
$ az account set --subscription="SUBSCRIPTION_ID"

10. Terminal
$ az ad sp create-for-rbac --role="Contributor" --
scopes="/subscriptions/SUBSCRIPTION_ID"
{
"appId": "00000000-0000-0000-0000-000000000000",
"displayName": "azure-cli-2017-06-05-10-41-15",
"name": "http://azure-cli-2017-06-05-10-41-15",
"password": "0000-0000-0000-0000-000000000000",
"tenant": "00000000-0000-0000-0000-000000000000"
}
Azure CLI

11. Azure Cloud Shell

12. Terminal
$ cat ~/.terraform/azure_cred.env
# Azure CLI
export ARM_SUBSCRIPTION_ID="…"
export ARM_CLIENT_ID="…"
export ARM_CLIENT_SECRET="…"
export ARM_TENANT_ID="…"
# Terraform
export TF_VAR_subscription_id="$ARM_SUBSCRIPTION_ID"
export TF_VAR_client_id="$ARM_CLIENT_ID"
export TF_VAR_client_secret="$ARM_CLIENT_SECRET"
export TF_VAR_tenant_id="$ARM_TENANT_ID"
Provider - Terraform with Microsoft Azure
$ source ~/.terraform/azure_cred.env

13. terraform {
backend "azurerm" {
key = "dev.terraform.tfstate"
storage_account_name = "abcd1234"
container_name = "tfstate"
access_key = "..."
}
}
main.tf
Backend - Microsoft Azure Storage

14. Backend - Microsoft Azure Storage
Do NOT interrupt terraform apply when using Azure Storage as backend
State file may be locked
AZURE_STORAGE_ACCOUNT="..." AZURE_STORAGE_KEY="..." az storage blob lease release --lease-id "..." --blob-name "..." --container-name "..."

15. resource "azurerm_container_service" "k8s" {
name = "${var.name}"
location = "${azurerm_resource_group.rsg.location}"
resource_group_name = "${azurerm_resource_group.rsg.name}"
orchestration_platform = "Kubernetes"
master_profile {
count = "${var.master_count}"
dns_prefix = "${var.name}"
}
linux_profile {
admin_username = "${var.username}"
ssh_key {
key_data = "${file("${var.ssh_key_path}")}"
}
}
agent_pool_profile {
name = "default"
count = "${var.slave_count}"
dns_prefix = "${var.name}-agent"
vm_size = "${var.vm_size}"
}
…
}
azure_container_service.tf
Microsoft Azure Container Service(ACS) with Terraform

16. Microsoft Azure Container Service(ACS) with Terraform
• Deployment succeeds =
Kubernetes is ready?
• Azure Container Service hacking?

17. Microsoft Azure Container Service(AKS) with Terraform
How about AKS?
https://github.com/terraform-providers/terraform-provider-azurerm/pull/693

18. We are hiring !
AMIS 帳聯網路科技
• 帳聯網
• 共識演算法 (Consensus Algorithm)
• 區塊鏈即服務 (Blockchain as a Service)
誠徵
• Blockchain Engineer
http://github.com/golangtw/jobs/issues/4
http://github.com/getamis