Terraformã«ãŠã‘ã‚‹OPAã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ - Qiitaã¯ã˜ã‚ã« ã“ã®è¨˜äº‹ã¯CyberAgent Group SRE Advent Calendar 2023ã®18日目ã®è¨˜äº‹ã§ã™ã€‚ Open Policy Agent(OPA)ã¯ã€JSONã‚„YAMLベースã®Infrastructure as Code(IaC)管ç†ã«ãŠã„ã¦ã€è¿‘年広ã用ã„られるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚特ã«ã€Kubernetesã®ãƒžãƒ‹ãƒ•ã‚§ã‚¹ãƒˆã«å¯¾ã™ã‚‹OPAã¨GateKeeperã®å°Žå…¥ãŒæ¨™æº–化ã•ã‚Œã¤ã¤ã‚ã‚Šã¾ã™ã€‚一方ã§ã€Terraformã®ã‚ˆã†ãªã€è¤‡é›‘ãªã‚¯ãƒ©ã‚¦ãƒ‰ã‚¤ãƒ³ãƒ•ãƒ©ã®è¨˜è¿°ã«é•·ã‘ãŸãƒ„ールã¨ã®çµ±åˆã¯ã€ã¾ã 挑戦的ã§ã‚ã‚Šã€å®Ÿéš›ã®é€£æºä¾‹ã¯å°‘ãªã„状æ³ã§ã™ã€‚Terraform Cloudã‚„Styraã¨ã®çµ„ã¿åˆã‚ã›ã§ã®åˆ©ç”¨äº‹ä¾‹ã¯å˜åœ¨ã—ã¾ã™ãŒã€ç´”粋ãªTerraform環境（例ãˆã°ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ãŒS3ã®å ´åˆï¼‰ã§ã®OPAã®æ´»ç”¨ã¯ã€ã¾ã ãã‚Œã»ã©å¤šãã¯ã‚ã‚Šã¾ã›ã‚“。ã“ã®è¨˜äº‹ã§ã¯ã€Terraform環境ã§ã®OPAã®ãƒ¦
Terraformã®ãƒ¬ãƒ“ューを自動化ã™ã‚‹ãŸã‚ã«ã€Conftestã‚’å°Žå…¥ã—ã¦Github Actionsã§CIã¾ã§è¨å®šã—ã¦ã¿ã‚‹ - nariã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°å‚™å¿˜éŒ²
{{#tags}}- {{label}}
{{/tags}}