Skip to main content

Pulumi


설치

AWS

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install
  • AWS Access Key ID and Access Key: IAM -> 사용자 -> <user> -> 보안 자격 증명 -> 액세스 키 만들기
aws configure --profile <profile>

S3

  • ACL 비활성화됨
  • 모든 퍼블릭 액세스 차단
  • 버킷 버전 관리 비활성화
  • 기본 암호화 활성화

Pulumi

curl -fsSL https://get.pulumi.com | sh
pulumi_config_passphrase
<암호>
# pulumi
export PULUMI_CONFIG_PASSPHRASE_FILE=<path>/pulumi_config_passphrase

또는

# pulumi
export PULUMI_CONFIG_PASSPHRASE=<암호>

Tutorial

Directory structure

test/
├── package.json
├── tsconfig.json
├── Pulumi.yaml
├── Pulumi.test.dev.yaml
└── src/
├── index.ts
├── variable.ts
└── ec2/
├── index.ts
└── ec2.ts

Project file(Pulumi.yaml)

Pulumi.yaml
name: <project>
runtime: nodejs
backend:
url: s3://<bucket>[?region=<region>&profile=<profile>]

Package file

package.json
{
"name": "<project>",
"main": "src/index.ts",
"devDependencies": {
"@types/node": "^14"
},
"dependencies": {
"@pulumi/aws": "^5.19.0",
"@pulumi/pulumi": "^3.45.0",
"tsconfig-paths": "^4.1.0"
}
}
tsconfig.json
{
"compilerOptions": {
"strict": true,
"outDir": "bin",
"target": "es2016",
"module": "commonjs",
"moduleResolution": "node",
"sourceMap": true,
"experimentalDecorators": true,
"pretty": true,
"noFallthroughCasesInSwitch": true,
"noImplicitReturns": true,
"forceConsistentCasingInFileNames": true,
"baseUrl": "./src",
"paths": {
"@src/*": ["./*"]
}
},
"files": ["src/index.ts"]
}

Stack Configuration file

pulumi stack init test.dev
Pulumi.test.dev.yaml
encryptionsalt: "*****"
config:
# pulumi.Config("aws")
aws:region: <region>
aws:profile: <profile>

IAC code

src/variable.ts
import * as pulumi from "@pulumi/pulumi";

export const stackName = pulumi.getStack();

// const config = new pulumi.Config();
src/ec2/ec2.ts
import * as aws from "@pulumi/aws";

import * as variable from "@src/variable";

const appServerName = "app-server";
new aws.ec2.Instance(appServerName, {
ami: "ami-090717c950a5c34d3",
instanceType: "t3.micro",
tags: {
Name: appServerName,
"loliot.net/stack": variable.stackName,
},
});
src/ec2/index.ts
import * as ec2_ from "./ec2";

ec2_;

export const ec2 = {};
src/index.ts
import { loadConfig, register } from "tsconfig-paths";

const tsConfig = loadConfig(".");
if (tsConfig.resultType === "failed") {
console.log("Could not load tsconfig to map paths, aborting.");
process.exit(1);
}
register({
baseUrl: tsConfig.absoluteBaseUrl,
paths: tsConfig.paths,
});

import { ec2 } from "./ec2";

export { ec2 };

Execution

pulumi refresh --skip-preview --yes
pulumi up
pulumi stack output
pulumi destroy --skip-preview
pulumi stack rm test.dev