Infrastructure as Code 入門

Infrastructure as Code（IaC）讓基礎設施管理變得可重複、可版本控制。

核心概念

• 宣告式：描述期望狀態，工具負責達成
• 冪等性：多次執行結果一致
• 版本控制：基礎設施變更可追溯

Terraform 範例

provider "aws" {
  region = "ap-northeast-1"
}

resource "aws_instance" "web" {
  ami           = "ami-0c55b159cbfafe1f0"
  instance_type = "t3.micro"

  tags = {
    Name = "web-server"
  }
}

Ansible 範例

- name: Setup web server
  hosts: webservers
  become: yes
  tasks:
    - name: Install nginx
      apt:
        name: nginx
        state: present

    - name: Start nginx
      service:
        name: nginx
        state: started
        enabled: yes

工具比較