インフラをTerraformで一元管理する

FROM ubuntu:22.04

# 環境変数
ENV LANG=ja_JP.UTF-8 \
    TF_VERSION=1.9.8 \
    AWS_CLI_URL=https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip \
    HADOLINT_VERSION=v2.12.0

# システムのアップデートと基本ツールのインストール
RUN apt-get update && \
    apt-get upgrade -y && \
    apt-get install -y --no-install-recommends \
        less \
        vim \
        curl \
        unzip \
        git \
        make \
        locales \
        ca-certificates \
        openssh-client && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# ロケールの設定
RUN locale-gen ${LANG} en_US.UTF-8 && \
    update-locale LANG=${LANG} && \
    update-ca-certificates

# AWS CLI v2 のインストール
WORKDIR /tmp/awscli
RUN curl --silent --show-error --fail "$AWS_CLI_URL" -o "awscliv2.zip" && \
    unzip -q awscliv2.zip && \
    ./aws/install && \
    rm -rf awscliv2.zip aws

# Terraform のインストール
WORKDIR /tmp/terraform
RUN curl --silent --show-error --fail -L "https://releases.hashicorp.com/terraform/${TF_VERSION}/terraform_${TF_VERSION}_linux_amd64.zip" -o "terraform.zip" && \
    unzip -q -d /usr/local/bin/ terraform.zip && \
    rm terraform.zip

# git-secrets のインストール
WORKDIR /tmp/git-secrets
RUN git clone https://github.com/awslabs/git-secrets.git . && \
    make install && \
    rm -rf /tmp/git-secrets

# hadolint のインストール
WORKDIR /tmp/hadolint
RUN curl --silent --show-error --fail -L "https://github.com/hadolint/hadolint/releases/download/${HADOLINT_VERSION}/hadolint-Linux-x86_64" -o /usr/local/bin/hadolint && \
    chmod +x /usr/local/bin/hadolint

# vscode ユーザー作成と初期設定
WORKDIR /workspace
RUN adduser --disabled-password --gecos "" vscode && \
    mkdir -p /home/vscode/.aws /workspace && \
    chown -R vscode:vscode /home/vscode /workspace

# 初期化スクリプトのコピー
COPY .docker/terraform/init.sh /usr/local/bin/init.sh
RUN chmod +x /usr/local/bin/init.sh

# 作業ディレクトリ設定
USER vscode
WORKDIR /workspace

# エントリーポイントの設定
ENTRYPOINT ["/usr/local/bin/init.sh"]

services:
    terraform:
        container_name: 'terraform'
        image: local/terraform
        build:
            context: .
            dockerfile: .docker/terraform/Dockerfile
        volumes:
            - .:/workspace
            - ./.docker/terraform/.aws/config.default:/home/vscode/.aws/config
            - ./.docker/terraform/.aws/credentials.default:/home/vscode/.aws/credentials
        environment:
            - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
            - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
        tty: true

#!/bin/bash

# AWS Config の設定
if [[ ! -f /home/vscode/.aws/config ]]; then
    mv /home/vscode/.aws/config.default /home/vscode/.aws/config
fi

# AWS Credentials の設定
if [[ ! -f /home/vscode/.aws/credentials ]]; then
    mv /home/vscode/.aws/credentials.default /home/vscode/.aws/credentials
    sed -i "s/<access-key>/\${AWS_ACCESS_KEY_ID}/g" /home/vscode/.aws/credentials
    sed -i "s/<secret-key>/\${AWS_SECRET_ACCESS_KEY}/g" /home/vscode/.aws/credentials
fi

# シェルを起動
exec bash

aws error initializing resources in service accessanalyzer, err: operation error AccessAnalyzer: ListAnalyzers, failed to resolve service endpoint, an AWS region is required, but was not found

$ terraformer import aws -r="ec2_instance,s3" --regions=ap-northeast-1

$ cd generated/aws/ec2_instance
$ tfenv use 0.13.7
$ terraform 0.13upgrade
$ terraform init
$ terraform plan
$ terraform apply

$ tfenv use 0.14.11
$ terraform init
$ terraform plan
$ terraform apply

$ tfenv use 1.9.8
$ terraform init
$ terraform plan
$ terraform apply