ใช้ Terraform ทำ Blue-Green Deployment แบบง่ายๆ

➜ terraform tree -L 2 . ├── app │ ├── bootstrap.sh │ └── main.tf └── base ├── bootstrap.sh └── main.tf 2 directories, 4 files 

#!/bin/sh rm -rf /var/lib/cloud/* sudo apt-get update -y curl -fsSL https://get.docker.com -o get-docker.sh sh get-docker.sh sudo usermod -aG docker ubuntu sudo curl -L "https://github.com/docker/compose/releases/download/1.25.5/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose sudo chmod +x /usr/local/bin/docker-compose 

# base/main.tf provider "aws" { access_key = var.access_key_id secret_key = var.secret_access_id region = var.region } variable "access_key_id" { type = string description = "AWS Access Key ID" } variable "secret_access_id" { type = string description = "AWS Secret" } variable "region" { type = string default = "ap-southeast-1" description = "AWS Region" } variable "product_area" { type = string default = "lost-in-space" description = "Product Area" } variable "environment" { type = string default = "dev" description = "Product Environment" } resource "aws_vpc" "lost_in_space" { assign_generated_ipv6_cidr_block = true cidr_block = "10.30.0.0/21" enable_dns_hostnames = true enable_dns_support = true tags = { Name = var.product_area environment = var.environment product-area = var.product_area } } resource "aws_internet_gateway" "lost_in_space_internet_gateway" { vpc_id = aws_vpc.lost_in_space.id tags = { Name = "${var.product_area}-internet-gateway" environment = var.environment product-area = var.product_area } } resource "aws_subnet" "lost_in_space_public_subnet_zone_a" { vpc_id = aws_vpc.lost_in_space.id assign_ipv6_address_on_creation = true availability_zone = "${var.region}a" cidr_block = "10.30.0.0/24" ipv6_cidr_block = cidrsubnet(aws_vpc.lost_in_space.ipv6_cidr_block, 8, 0) tags = { Name = "${var.product_area}-public-subnet-zone-a" environment = var.environment product-area = var.product_area } } resource "aws_route_table" "lost_in_space_public_route_table" { vpc_id = aws_vpc.lost_in_space.id route { cidr_block = "0.0.0.0/0" gateway_id = aws_internet_gateway.lost_in_space_internet_gateway.id } tags = { Name = "${var.product_area}-public-route-table" environment = var.environment product-area = var.product_area } } resource "aws_route_table_association" "lost_in_space_public_route_table_association_zone_a" { subnet_id = aws_subnet.lost_in_space_public_subnet_zone_a.id route_table_id = aws_route_table.lost_in_space_public_route_table.id } resource "aws_security_group" "lost_in_space" { name = "lost-in-space-dev" description = "Security group for Lost In Space (dev)" vpc_id = aws_vpc.lost_in_space.id ingress { from_port = 22 to_port = 22 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] description = "Allow SSH inbound traffic" } ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] description = "Allow HTTP inbound traffic" } ingress { from_port = 443 to_port = 443 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] description = "Allow HTTPS inbound traffic" } ingress { from_port = 5432 to_port = 5432 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] description = "Allow PostgreSQL inbound traffic" } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] description = "Allow Internet Outbound" } tags = { Name = "lost-in-space-dev" environment = var.environment product-area = var.product_area } } resource "aws_alb" "lost_in_space" { name = "lost-in-space-dev" security_groups = [aws_security_group.lost_in_space.id] subnets = [aws_subnet.lost_in_space_public_subnet_zone_a.id, aws_subnet.lost_in_space_public_subnet_zone_b.id] enable_deletion_protection = true idle_timeout = 300 tags = { Name = "lost-in-space-dev" environment = var.environment product-area = var.product_area } } resource "aws_alb_target_group" "lost_in_space" { name = "lost-in-space-alb-target" port = 80 protocol = "HTTP" vpc_id = aws_vpc.lost_in_space.id stickiness { type = "lb_cookie" cookie_duration = 3600 } health_check { path = "/" port = 80 } } resource "aws_alb_listener" "listener_http" { load_balancer_arn = aws_alb.lost_in_space.arn port = "80" protocol = "HTTP" default_action { target_group_arn = aws_alb_target_group.lost_in_space.arn type = "forward" } } 

# app/main.tf provider "aws" { access_key = var.access_key_id secret_key = var.secret_access_id region = var.region } variable "access_key_id" { type = string description = "AWS Access Key ID" } variable "secret_access_id" { type = string description = "AWS Secret" } variable "region" { type = string default = "ap-southeast-1" description = "AWS Region" } variable "product_area" { type = string default = "lost-in-space" description = "Product Area" } variable "environment" { type = string default = "dev" description = "Product Environment" } variable "infrastructure_version" { type = string description = "Infrastructure Version" } data "aws_alb_target_group" "lost_in_space" { name = "lost-in-space-alb-target" } data "aws_subnet" "selected" { filter { name = "tag:Name" values = ["${var.product_area}-public-subnet-zone-a"] } } data "aws_security_group" "selected" { filter { name = "tag:Name" values = ["lost-in-space-dev"] } } resource "aws_alb_target_group_attachment" "lost_in_space_target_group_attachment" { target_group_arn = data.aws_alb_target_group.lost_in_space.arn target_id = aws_instance.lost_in_space.id port = 80 } resource "aws_instance" "lost_in_space" { associate_public_ip_address = true subnet_id = data.aws_subnet.selected.id security_groups = [data.aws_security_group.selected.id] ami = "ami-09a4a9ce71ff3f20b" instance_type = "t2.medium" key_name = "rocket-dev" user_data = file("bootstrap.sh") root_block_device { volume_type = "gp2" volume_size = 30 } volume_tags = { Name = "lost-in-space-dev" environment = var.environment product-area = var.product_area } tags = { Name = "lost-in-space-dev" InfrastructureVersion = var.infrastructure_version environment = var.environment product-area = var.product_area } lifecycle { create_before_destroy = true } }