terraform 阿里云基本使用

Posted 2020-10-12 rongfengliang-荣锋亮

1. 预备环境

安装了terraform 的软件的操作系统（windows linux mac 均可）
具有阿里云账户的 access_key  secret_key

2. 配置

// terraform 的配置相对比较随意，但是有几个必须注意的，文件后缀 tf 文件名不需要进行特殊说明
// 以下为我使用aliyun 提供的provider 进行的使用
说明：
app.tf // 资源创建的定义
va.tf  // 变量的定义

app.tf

# Configure the Alicloud Provider
provider "alicloud" {
  access_key = "${var.access_key}"
  secret_key = "${var.secret_key}"
  region     = "${var.region}"
}

# Create a web server
resource "alicloud_instance" "web" {
  # cn-beijing
  provider          = "alicloud"
  availability_zone = "cn-beijing-b"
  image_id          = "ubuntu_140405_32_40G_cloudinit_20161115.vhd"

  #  instance_network_type = "Classic"
  internet_charge_type  = "PayByBandwidth"

  instance_type        = "ecs.n1.medium"
  io_optimized         = "optimized"
  system_disk_category = "cloud_efficiency"
  security_groups      = ["${alicloud_security_group.default.id}"]
  instance_name        = "web"
}

# Create security group
resource "alicloud_security_group" "default" {
  name        = "default"
  provider    = "alicloud"
  description = "default"
}

上面的代码比较简单，就是声明了，需要创建的esc 实例的信息 包括区域、网络类型、镜像id、默认的安全策略

va.tf
variable "access_key" { default = "xxxxxxxxxxxxxxxxxxxxxxx"}
variable "secret_key" { default  = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}
variable "region" {
  default = "cn-beijing"
}

变量的定义，主要是key、区域

3. 使用

// 初始化 init
terraform init 
// 查看信息 plan
terraform plan 
// 进行资源创建
terraform apply 
// 释放资源
terraform  destroy

每个步骤的信息类似如下：
The following providers do not have any version constraints in configuration,
so the latest version was installed.

To prevent automatic upgrades to new major versions that may contain breaking
changes, it is recommended to add version = "..." constraints to the
corresponding provider blocks in configuration, with the constraint strings
suggested below.

* provider.alicloud: version = "~> 0.1"

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.


Refreshing Terraform state in-memory prior to plan...
The refreshed state will be used to calculate this plan, but will not be
persisted to local or remote state storage.


------------------------------------------------------------------------

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  + alicloud_instance.web
      id:                   <computed>
      allocate_public_ip:   "false"
      availability_zone:    "cn-beijing-b"
      host_name:            <computed>
      image_id:             "ubuntu_140405_32_40G_cloudinit_20161115.vhd"
      instance_name:        "web"
      instance_type:        "ecs.n1.medium"
      internet_charge_type: "PayByBandwidth"
      io_optimized:         "optimized"
      private_ip:           <computed>
      public_ip:            <computed>
      security_groups.#:    <computed>
      status:               <computed>
      subnet_id:            <computed>
      system_disk_category: "cloud_efficiency"
      system_disk_size:     <computed>

  + alicloud_security_group.default
      id:                   <computed>
      description:          "default"
      name:                 "default"


Plan: 2 to add, 0 to change, 0 to destroy.

------------------------------------------------------------------------

Note: You didn\'t specify an "-out" parameter to save this plan, so Terraform
can\'t guarantee that exactly these actions will be performed if
"terraform apply" is subsequently run.



alicloud_security_group.default: Creating...
  description: "" => "default"
  name:        "" => "default"
alicloud_security_group.default: Creation complete after 1s (ID: sg-2ze0dkuqzl6tfr1pfuul)
alicloud_instance.web: Creating...
  allocate_public_ip:         "" => "false"
  availability_zone:          "" => "cn-beijing-b"
  host_name:                  "" => "<computed>"
  image_id:                   "" => "ubuntu_140405_32_40G_cloudinit_20161115.vhd"
  instance_name:              "" => "web"
  instance_type:              "" => "ecs.n1.medium"
  internet_charge_type:       "" => "PayByBandwidth"
  io_optimized:               "" => "optimized"
  private_ip:                 "" => "<computed>"
  public_ip:                  "" => "<computed>"
  security_groups.#:          "" => "1"
  security_groups.3325292532: "" => "sg-2ze0dkuqzl6tfr1pfuul"
  status:                     "" => "<computed>"
  subnet_id:                  "" => "<computed>"
  system_disk_category:       "" => "cloud_efficiency"
  system_disk_size:           "" => "<computed>"
alicloud_instance.web: Still creating... (10s elapsed)
alicloud_instance.web: Still creating... (20s elapsed)
alicloud_instance.web: Still creating... (30s elapsed)
alicloud_instance.web: Still creating... (40s elapsed)
alicloud_instance.web: Still creating... (50s elapsed)
alicloud_instance.web: Still creating... (1m0s elapsed)
alicloud_instance.web: Creation complete after 1m2s (ID: i-2ze64rcu238frkzql1sf)

Apply complete! Resources: 2 added, 0 changed, 0 destroyed.

alicloud_security_group.default: Refreshing state... (ID: sg-2ze0dkuqzl6tfr1pfuul)
alicloud_instance.web: Refreshing state... (ID: i-2ze64rcu238frkzql1sf)

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  - destroy

Terraform will perform the following actions:

  - alicloud_instance.web

  - alicloud_security_group.default


Plan: 0 to add, 0 to change, 2 to destroy.

Do you really want to destroy?
  Terraform will destroy all your managed infrastructure, as shown above.
  There is no undo. Only \'yes\' will be accepted to confirm.

  Enter a value: yes

alicloud_instance.web: Destroying... (ID: i-2ze64rcu238frkzql1sf)
alicloud_instance.web: Still destroying... (ID: i-2ze64rcu238frkzql1sf, 10s elapsed)
alicloud_instance.web: Destruction complete after 11s
alicloud_security_group.default: Destroying... (ID: sg-2ze0dkuqzl6tfr1pfuul)
alicloud_security_group.default: Destruction complete after 1s

Destroy complete! Resources: 2 destroyed.

4. 阿里云管理界面的显示效果

 

 

5. 总结

总的来说还是比较简单的，使用起来也比较方便，对于多云管理方便了好多，同时结合每个云厂商的实际
最佳实践，可以子啊我们的实际产品开发商，降低对于云厂商的较大依赖，同时可以方便的进行管理
目前发现的一些问题：
文档上有些还不是很全、部分文档更新不及时。
同时在积极适应国际化市场，看齐国际厂商上，给予阿里一个大大的赞，希望国内的一些搞云的公司和学习下。

6. 参考资料

https://www.terraform.io/intro/getting-started/build.html
https://www.terraform.io/docs/providers/alicloud/r/instance.html#internet_charge_type
http://www.infoq.com/cn/news/2015/05/hashimoto-modern-datacenter
http://www.infoq.com/cn/news/2017/10/terraform-multicloud-advances