Terraform与K8S结合体验

安装terraform

# 根据不同操作系统选择
https://www.terraform.io/downloads

terraform -version  # 查看版本

terraform连接k8s集群

https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/deployment_v1

# 2种方式
# kubeconfig path
provider "kubernetes" {
  config_path = "~/.kube/config"
}

# host and tls证书
provider "kubernetes" {
  host = "https://cluster_endpoint:port"

  client_certificate     = file("~/.kube/client-cert.pem")
  client_key             = file("~/.kube/client-key.pem")
  cluster_ca_certificate = file("~/.kube/cluster-ca-cert.pem")
}

创建ns初体验

• terraform init

mkdir terraform-k8s
cd terraform-k8s

vim provider.tf
provider "kubernetes" {
  config_path    = "~/.kube/config"
  config_context = "kubernetes-admin@cluster.local"
}

resource "kubernetes_namespace" "example" {
  metadata {
    name = "liyk-test"
  }
}

• terraform plan

# 集群context要写正确，可通过如下命令查看
kubectl config current-context

• terraform apply

创建deployment应用

resource "kubernetes_deployment_v1" "example" {
  metadata {
    name = "terraform-example"
    namespace = "liyk-test"
    labels = {
      test = "MyExampleApp"
    }
  }

  spec {
    replicas = 3

    selector {
      match_labels = {
        test = "MyExampleApp"
      }
    }

    template {
      metadata {
        labels = {
          test = "MyExampleApp"
        }
      }

      spec {
        container {
          image = "nginx:1.21.6"
          name  = "example"

          resources {
            limits = {
              cpu    = "0.5"
              memory = "512Mi"
            }
            requests = {
              cpu    = "250m"
              memory = "50Mi"
            }
          }

          liveness_probe {
            http_get {
              path = "/"
              port = 80

              http_header {
                name  = "X-Custom-Header"
                value = "Awesome"
              }
            }

            initial_delay_seconds = 3
            period_seconds        = 3
          }
        }
      }
    }
  }
}