{"id":48951,"date":"2023-07-11T07:46:38","date_gmt":"2022-11-28T22:29:02","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/"},"modified":"2024-04-30T12:59:18","modified_gmt":"2024-04-30T04:59:18","slug":"%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/","title":{"rendered":"\u4f7f\u7528Terraform\u6784\u5efaGKE"},"content":{"rendered":"<h1>\u9996\u5148<\/h1>\n<p>\u5728\u6784\u5efaGKE\u65f6\uff0c\u6211\u4eec\u60f3\u8981\u7ba1\u7406\u5b9e\u9645\u5e94\u7528\u7684\u8bbe\u7f6e\uff0c\u56e0\u6b64\u6211\u4eec\u5c06\u4f7f\u7528Terraform\u6765\u6784\u5efaGKE\u3002<br \/>\nTerraform\u63d0\u4f9b\u4e86GKE\u6a21\u5757\uff0c\u4f46\u8fd9\u6b21\u6211\u4eec\u5c06\u4f7f\u7528\u539f\u59cb\u7684Terraform\u8fdb\u884c\u6784\u5efa\u3002<\/p>\n<p>\u5728\u64b0\u5199\u672c\u6587\u7ae0\u65f6\uff0c\u6211\u4eec\u53c2\u8003\u4e86\u5728JapanContainerDays v18.12\u4e0a\u63d0\u51fa\u7684&#8221;showKs&#8221; Terraform\u7684\u5b58\u50a8\u5e93\u3002\u975e\u5e38\u611f\u8c22\u4f60\u4eec\u3002<\/p>\n<p>GitHub &#8211; containerdaysjp\/showks-terraform: \u7528\u4e8e\u914d\u7f6eshowk\u73af\u5883\u7684Terraform\u914d\u7f6e\u3002<\/p>\n<p>\u6211\u8ba4\u4e3a\u8fd8\u6709\u5176\u4ed6\u5145\u6ee1\u4e91\u539f\u751f\u5143\u7d20\u7684\u5b58\u50a8\u5e93\uff0c\u975e\u5e38\u503c\u5f97\u53c2\u8003\u3002<\/p>\n<p>\u65e5\u672c\u96c6\u88c5\u7bb1\u5929- GitHub<\/p>\n<p>\u90a3\u4e48\uff0c\u8ba9\u6211\u4eec\u8bd5\u7740\u4f7f\u7528 Teraform \u6765\u6784\u5efa GKE \u5e76\u90e8\u7f72 Guestbook \u5e94\u7528\u7a0b\u5e8f\uff0c\u5e76\u8fdb\u884c\u64cd\u4f5c\u786e\u8ba4\u3002<\/p>\n<h1>\u73af\u5883<\/h1>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">macOS High Sierra Version 10.13.6<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Terraform v0.11.13<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Homebrew 2.0.6<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Google Cloud SDK 240.0.0<\/ul>\n<h1>\u5b89\u88c5 Google Cloud SDK\u3002<\/h1>\n<p>\u8bf7\u53c2\u8003\u4e0b\u9762\u7684\u6587\u6863\uff0c\u5b89\u88c5 Google Cloud SDK \u5e76\u8fdb\u884c\u9879\u76ee\u8bbe\u7f6e\u3002<br \/>\nGoogle Cloud SDK \u6587\u6863<\/p>\n<h1>\u542f\u7528 API.<\/h1>\n<p>\u542f\u7528\u4ee5\u4e0b\u7684 API\u3002<\/p>\n<ul class=\"post-ul\">Kubernetes Engine API<\/ul>\n<p>\u4f7f\u7528\u4e0b\u5217\u6307\u4ee4\u5c06API\u542f\u7528\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>gcloud services <span class=\"nb\">enable<\/span> <span class=\"se\">\\<\/span>\r\n    container.googleapis.com\r\n<\/code><\/pre>\n<h1>\u5b89\u88c5 Terraform<\/h1>\n<p>\u6211\u5011\u5c07\u5b89\u88dd Terraform\u3002<br \/>\n\u9019\u6b21\u6211\u5011\u5c07\u5728 Mac \u74b0\u5883\u4e2d\u4f7f\u7528 Homebrew \u9032\u884c\u5b89\u88dd\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>brew <span class=\"nb\">install <\/span>terraform\r\n<\/code><\/pre>\n<h1>\u521b\u5efa Terraform \u670d\u52a1\u5e10\u6237<\/h1>\n<p>\u521b\u5efa\u7528\u4e8e Terraform \u4f7f\u7528\u7684\u670d\u52a1\u5e10\u53f7\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ GCP_PROJECT<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>gcloud info <span class=\"nt\">--format<\/span><span class=\"o\">=<\/span><span class=\"s1\">'value(config.project)'<\/span><span class=\"si\">)<\/span>\r\n<span class=\"nv\">$ TERRAFORM_SA<\/span><span class=\"o\">=<\/span>terraform-service-account\r\n\r\n<span class=\"nv\">$ <\/span>gcloud iam service-accounts create <span class=\"nv\">$TERRAFORM_SA<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--project<\/span><span class=\"o\">=<\/span><span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--display-name<\/span> <span class=\"nv\">$TERRAFORM_SA<\/span>\r\n<\/code><\/pre>\n<p>\u7ed9\u521b\u5efa\u7684 Terraform \u670d\u52a1\u5e10\u6237\u5206\u914d\u4ee5\u4e0b\u89d2\u8272\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">roles\/iam.serviceAccountUser<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">roles\/compute.admin<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">roles\/storage.admin<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">roles\/container.clusterAdmin<\/ul>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ TERRAFORM_SA_EMAIL<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>gcloud iam service-accounts list <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--project<\/span><span class=\"o\">=<\/span><span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--filter<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"displayName:<\/span><span class=\"nv\">$TERRAFORM_SA<\/span><span class=\"s2\">\"<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--format<\/span><span class=\"o\">=<\/span><span class=\"s1\">'value(email)'<\/span><span class=\"si\">)<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects add-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/iam.serviceAccountUser <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects add-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/compute.admin <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects add-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/storage.admin <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects add-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/container.clusterAdmin <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n<\/code><\/pre>\n<h1>\u521b\u5efa\u4e00\u4e2a\u7528\u4e8e\u7ba1\u7406.tfstate\u6587\u4ef6\u7684Google Cloud Storage\u5b58\u50a8\u6876\u3002<\/h1>\n<p>\u5728Terraform\u4e2d\uff0c\u6211\u4eec\u4f7f\u7528\u6269\u5c55\u540d\u4e3a.tfstate\u7684\u6587\u4ef6\u6765\u7ba1\u7406\u6240\u7ba1\u7406\u8d44\u6e90\u7684\u72b6\u6001\u3002<br \/>\n\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u8fd9\u4e9b\u6587\u4ef6\u4fdd\u5b58\u5728\u672c\u5730\uff0c\u4f46\u7531\u4e8e\u65e0\u6cd5\u5171\u4eab\uff0c\u6240\u4ee5\u6211\u4eec\u5c06\u5176\u4fdd\u5b58\u5728\u8fdc\u7a0b\u3002<br \/>\n\u672c\u6b21\u6211\u4eec\u5c06\u4f7f\u7528Google Cloud Storage\uff08GCS\uff09\u4f5c\u4e3a\u8fdc\u7a0b\u5b58\u50a8\u5e93\u6765\u7ba1\u7406.tfstate\u6587\u4ef6\u3002<br \/>\n\u8bf7\u6ce8\u610f\uff0c\u5b58\u50a8\u6876\u540d\u79f0\u5fc5\u987b\u5728\u6574\u4e2aGCS\u4e2d\u662f\u552f\u4e00\u7684\u3002<br \/>\n\u6211\u4eec\u793a\u4f8b\u4e2d\u4f7f\u7528\u4e86tf-state-prod\u4f5c\u4e3a\u5b58\u50a8\u6876\u540d\u79f0\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ GCS_CLASS<\/span><span class=\"o\">=<\/span>multi_regional\r\n<span class=\"nv\">$ GCS_BUCKET<\/span><span class=\"o\">=<\/span>tf-state-prod\r\n\r\n<span class=\"nv\">$ <\/span>gsutil mb <span class=\"nt\">-p<\/span> <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"nt\">-c<\/span> <span class=\"nv\">$GCS_CLASS<\/span> <span class=\"nt\">-l<\/span> asia gs:\/\/<span class=\"nv\">$GCS_BUCKET<\/span>\/\r\n<\/code><\/pre>\n<h1>\u521b\u5efa.tf\u6587\u4ef6<\/h1>\n<h2>\u58f0\u660e\u53d8\u91cf<\/h2>\n<p>\u521b\u5efa variables.tf \u6587\u4ef6\u6765\u5b9a\u4e49\u5728\u5404\u4e2a\u8d44\u6e90\u4e2d\u6240\u9700\u7684\u53d8\u91cf\u3002<br \/>\n\u4f7f\u7528 GKE \u7684\u7248\u672c\u662f\u5728\u64b0\u5199\u65f6\uff082019\/03\uff09\u7684\u6700\u65b0\u7248\u672c 1.12.6-gke.7\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nx\">variable<\/span> <span class=\"s2\">\"project\"<\/span> <span class=\"p\">{}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"cluster_name\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"cluster\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"location\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"asia-northeast1-a\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"network\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"default\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"primary_node_count\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"3\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"machine_type\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"n1-standard-1\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"min_master_version\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"1.12.6-gke.7\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">variable<\/span> <span class=\"s2\">\"node_version\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">default<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"1.12.6-gke.7\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n<\/code><\/pre>\n<h2>\u5b9a\u4e49GCP\u7684\u63d0\u4f9b\u5546\u4fe1\u606f<\/h2>\n<p>\u5728\u4f7f\u7528GCP\u63d0\u4f9b\u5546\u65f6\uff0c\u6211\u4eec\u9700\u8981\u521b\u5efa\u4e00\u4e2aprovider.tf\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nx\">provider<\/span> <span class=\"s2\">\"google\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">project<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.project}\"<\/span>\r\n  <span class=\"nx\">region<\/span>  <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.location}\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n<\/code><\/pre>\n<h2>\u5b9a\u4e49\u540e\u7aef<\/h2>\n<p>\u521b\u5efa\u4e00\u4e2a\u540d\u4e3abackend.tf\u7684\u6587\u4ef6\u6765\u5b9a\u4e49\u7ba1\u7406.tfstate\u6587\u4ef6\u7684\u540e\u7aef\u3002\u5728\u672c\u4f8b\u4e2d\uff0c\u5c06\u4f7f\u7528GCS\u4f5c\u4e3a\u540e\u7aef\u3002<br \/>\n\u8bf7\u6307\u5b9a\u4e00\u4e2a\u4e8b\u5148\u521b\u5efa\u7684GCS\u5b58\u50a8\u6876\u7684\u540d\u79f0\u4f5c\u4e3abucket_name\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nx\">terraform<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">backend<\/span> <span class=\"s2\">\"gcs\"<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">bucket<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"tf-state-prod\"<\/span>\r\n    <span class=\"nx\">prefix<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"terraform\/state\"<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n<\/code><\/pre>\n<h2>\u5b9a\u4e49GKE<\/h2>\n<p>\u6211\u4eec\u6765\u521b\u5efa\u4e00\u4e2a\u7528\u4e8e\u5b9a\u4e49GKE\u7684gke.tf\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nx\">resource<\/span> <span class=\"s2\">\"google_container_cluster\"<\/span> <span class=\"s2\">\"primary\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">name<\/span>     <span class=\"p\">=<\/span> <span class=\"s2\">\"primary-${var.cluster_name}\"<\/span>\r\n  <span class=\"nx\">location<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.location}\"<\/span>\r\n\r\n  <span class=\"nx\">remove_default_node_pool<\/span> <span class=\"p\">=<\/span> <span class=\"kc\">true<\/span>\r\n  <span class=\"nx\">initial_node_count<\/span>       <span class=\"p\">=<\/span> <span class=\"mi\">1<\/span>\r\n\r\n  <span class=\"nx\">network<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.network}\"<\/span>\r\n\r\n  <span class=\"nx\">min_master_version<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.min_master_version}\"<\/span>\r\n  <span class=\"nx\">node_version<\/span>       <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.node_version}\"<\/span>\r\n\r\n  <span class=\"nx\">master_auth<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">username<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"\"<\/span>\r\n    <span class=\"nx\">password<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"\"<\/span>\r\n\r\n    <span class=\"nx\">client_certificate_config<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"nx\">issue_client_certificate<\/span> <span class=\"p\">=<\/span> <span class=\"kc\">false<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"nx\">resource<\/span> <span class=\"s2\">\"google_container_node_pool\"<\/span> <span class=\"s2\">\"primary_nodes\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">name<\/span>       <span class=\"p\">=<\/span> <span class=\"s2\">\"primary-${var.cluster_name}-nodes\"<\/span>\r\n  <span class=\"nx\">location<\/span>   <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.location}\"<\/span>\r\n  <span class=\"nx\">cluster<\/span>    <span class=\"p\">=<\/span> <span class=\"s2\">\"${google_container_cluster.primary.name}\"<\/span>\r\n  <span class=\"nx\">node_count<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.primary_node_count}\"<\/span>\r\n\r\n  <span class=\"nx\">management<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">auto_repair<\/span> <span class=\"p\">=<\/span> <span class=\"kc\">true<\/span>\r\n  <span class=\"p\">}<\/span>\r\n\r\n  <span class=\"nx\">node_config<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">oauth_scopes<\/span> <span class=\"p\">=<\/span> <span class=\"p\">[<\/span>\r\n      <span class=\"s2\">\"https:\/\/www.googleapis.com\/auth\/devstorage.read_only\"<\/span><span class=\"p\">,<\/span>\r\n      <span class=\"s2\">\"https:\/\/www.googleapis.com\/auth\/logging.write\"<\/span><span class=\"p\">,<\/span>\r\n      <span class=\"s2\">\"https:\/\/www.googleapis.com\/auth\/monitoring\"<\/span><span class=\"p\">,<\/span>\r\n      <span class=\"s2\">\"https:\/\/www.googleapis.com\/auth\/service.management.readonly\"<\/span><span class=\"p\">,<\/span>\r\n      <span class=\"s2\">\"https:\/\/www.googleapis.com\/auth\/servicecontrol\"<\/span><span class=\"p\">,<\/span>\r\n      <span class=\"s2\">\"https:\/\/www.googleapis.com\/auth\/trace.append\"<\/span><span class=\"p\">,<\/span>\r\n    <span class=\"p\">]<\/span>\r\n\r\n    <span class=\"nx\">machine_type<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"${var.machine_type}\"<\/span>\r\n\r\n    <span class=\"nx\">metadata<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"nx\">disable<\/span><span class=\"err\">-<\/span><span class=\"nx\">legacy<\/span><span class=\"err\">-<\/span><span class=\"nx\">endpoints<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"true\"<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n<\/code><\/pre>\n<h2>\u521b\u5efa GKE<\/h2>\n<p>\u521b\u5efaTerraform\u670d\u52a1\u8d26\u53f7\u7684json\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ TERRAFORM_SA_DEST<\/span><span class=\"o\">=<\/span>~\/.gcp\/terraform-service-account.json\r\n\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">mkdir<\/span> <span class=\"nt\">-p<\/span> <span class=\"si\">$(<\/span><span class=\"nb\">dirname<\/span> <span class=\"nv\">$TERRAFORM_SA_DEST<\/span><span class=\"si\">)<\/span>\r\n\r\n<span class=\"nv\">$ TERRAFORM_SA_EMAIL<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>gcloud iam service-accounts list <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--filter<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"displayName:<\/span><span class=\"nv\">$TERRAFORM_SA<\/span><span class=\"s2\">\"<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--format<\/span><span class=\"o\">=<\/span><span class=\"s1\">'value(email)'<\/span><span class=\"si\">)<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud iam service-accounts keys create <span class=\"nv\">$TERRAFORM_SA_DEST<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--iam-account<\/span> <span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n<\/code><\/pre>\n<p>\u5c06\u521b\u5efa\u7684\u670d\u52a1\u5e10\u53f7\u7684 JSON \u6587\u4ef6\u8def\u5f84\u8bbe\u7f6e\u4e3a GOOGLE_APPLICATION_CREDENTIALS \u73af\u5883\u53d8\u91cf\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">export <\/span><span class=\"nv\">GOOGLE_APPLICATION_CREDENTIALS<\/span><span class=\"o\">=<\/span><span class=\"nv\">$TERRAFORM_SA_DEST<\/span>\r\n<\/code><\/pre>\n<p>\u6839\u636eTerraform\u7684\u914d\u7f6e\u8fdb\u884c\u521d\u59cb\u8bbe\u7f6e\u3002\u5728\u8fd9\u4e2a\u9636\u6bb5\uff0c.tfstate\u6587\u4ef6\u5c06\u88ab\u90e8\u7f72\u5230GCS\u4e0a\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>terraform init\r\n<\/code><\/pre>\n<p>\u5728\u521b\u5efaGKE\u4e4b\u524d\uff0c\u5fc5\u987b\u5c06variables.tf\u6587\u4ef6\u4e2d\u672a\u5b9a\u4e49\u9ed8\u8ba4\u503c\u7684\u503c\u8bbe\u7f6e\u4e3a\u73af\u5883\u53d8\u91cf\u3002<br \/>\n\u672a\u5b9a\u4e49\u9ed8\u8ba4\u503c\u7684\u53d8\u91cf\u53ef\u4ee5\u901a\u8fc7\u547d\u4ee4\u884c\u53c2\u6570\u6216terraform.tfvars\u6587\u4ef6\u8fdb\u884c\u4f20\u9012\u3002<br \/>\n\u5bf9\u4e8e\u73af\u5883\u53d8\u91cf\uff0c\u53d8\u91cf\u540d\u7684\u524d\u7f00\u5fc5\u987b\u4e3aTF_VAR_\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">export <\/span><span class=\"nv\">TF_VAR_project<\/span><span class=\"o\">=<\/span><span class=\"nv\">$GCP_PROJECT<\/span>\r\n<\/code><\/pre>\n<p>\u9996\u5148\uff0c\u4f7f\u7528 terraform plan \u547d\u4ee4\u786e\u8ba4\u66f4\u6539\u5185\u5bb9\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>terraform plan\r\n<\/code><\/pre>\n<p>\u5982\u679c\u6ca1\u6709\u95ee\u9898\uff0c\u6211\u4eec\u5c06\u4f7f\u7528 terraform apply \u547d\u4ee4\u6765\u521b\u5efa GKE\u3002<br \/>\n\u6211\u4eec\u8981\u6267\u884c yes \u786e\u8ba4\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>terraform apply\r\n<\/code><\/pre>\n<h1>\u90e8\u7f72\u5e76\u786e\u8ba4Guestbook\u5e94\u7528\u7a0b\u5e8f\u3002<\/h1>\n<p>\u4f7f\u7528Terraform\u521b\u5efa\u7684GKE\u4e0a\u5c06\u90e8\u7f72\u4ee5\u4e0b\u5b58\u50a8\u5e93\u4e2d\u7684Guestbook\u5e94\u7528\u7a0b\u5e8f\u3002<br \/>\nGitHub &#8211; kubernetes\/examples: Kubernetes\u5e94\u7528\u7a0b\u5e8f\u793a\u4f8b\u6559\u7a0b<\/p>\n<p>\u5728\u90e8\u7f72\u4e4b\u524d\uff0c\u83b7\u53d6\u9884\u5148\u521b\u5efa\u7684 GKE \u96c6\u7fa4\u7684\u8eab\u4efd\u9a8c\u8bc1\u4fe1\u606f\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>gcloud container clusters get-credentials primary-cluster\r\n<\/code><\/pre>\n<h2>\u5b89\u88c5 Redis \u4e3b\u670d\u52a1\u5668<\/h2>\n<p>\u8bbf\u5ba2\u7559\u8a00\u7c3f\u5e94\u7528\u7a0b\u5e8f\u4f7f\u7528Redis\u3002<br \/>\n\u6570\u636e\u5199\u5165Redis\u4e3b\u670d\u52a1\u5668\uff0c\u7136\u540e\u4eceRedis\u5de5\u4f5c\u670d\u52a1\u5668\u8bfb\u53d6\u6570\u636e\u3002<\/p>\n<h3>\u90e8\u7f72 Redis \u4e3b\u8282\u70b9<\/h3>\n<p>\u90e8\u7f72Redis\u4e3b\u8282\u70b9\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> https:\/\/raw.githubusercontent.com\/kubernetes\/examples\/master\/guestbook\/redis-master-deployment.yaml\r\n<\/code><\/pre>\n<p>\u7b49\u5f85\u76f4\u5230\u521b\u5efa\u7684 Pod \u7684\u8fd0\u884c\u72b6\u6001\u4e3a 1\/1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get po\r\nNAME                            READY   STATUS              RESTARTS   AGE\r\nredis-master-57fc67768d-75dlf   1\/1     Running             0          22s\r\n<\/code><\/pre>\n<p>\u8bf7\u786e\u8ba4\u4ece\u663e\u793a\u7684 Pod \u540d\u4e2d\u53ef\u4ee5\u770b\u5230 Redis master \u7684\u65e5\u5fd7\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl logs <span class=\"nt\">-f<\/span> redis-master-57fc67768d-75dlf\r\n<\/code><\/pre>\n<h3>\u521b\u5efaRedis\u4e3b\u8282\u70b9\u670d\u52a1<\/h3>\n<p>\u521b\u5efa Redis \u4e3b\u8282\u70b9\u670d\u52a1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> https:\/\/raw.githubusercontent.com\/kubernetes\/examples\/master\/guestbook\/redis-master-service.yaml\r\n<\/code><\/pre>\n<p>\u786e\u8ba4Redis\u4e3b\u670d\u52a1\u5668\u7684\u670d\u52a1\u5df2\u7ecf\u521b\u5efa\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get svc\r\nNAME           TYPE        CLUSTER-IP      EXTERNAL-IP   PORT<span class=\"o\">(<\/span>S<span class=\"o\">)<\/span>    AGE\r\nkubernetes     ClusterIP   10.55.240.1     &lt;none&gt;        443\/TCP    22m\r\nredis-master   ClusterIP   10.55.245.172   &lt;none&gt;        6379\/TCP   52s\r\n<\/code><\/pre>\n<h2>\u8bbe\u7f6eRedis worker<\/h2>\n<p>Redis\u5de5\u4f5c\u8fdb\u7a0b\u53ef\u4ee5\u521b\u5efa\u591a\u4e2a\u526f\u672c\u4ee5\u63d0\u9ad8\u53ef\u7528\u6027\u3002<\/p>\n<h3>Redis worker \u7684\u90e8\u7f72<\/h3>\n<p>\u90e8\u7f72Redis\u5de5\u4f5c\u5668\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> https:\/\/raw.githubusercontent.com\/kubernetes\/examples\/master\/guestbook\/redis-slave-deployment.yaml\r\n<\/code><\/pre>\n<p>\u7b49\u5f85\u521b\u5efa\u7684Pod\u8fd0\u884c\u72b6\u6001\u53d8\u4e3a1\/1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get po\r\nNAME                            READY   STATUS    RESTARTS   AGE\r\nredis-master-57fc67768d-75dlf   1\/1     Running   0          15m\r\nredis-slave-57f9f8db74-fx2d7    1\/1     Running   0          14s\r\nredis-slave-57f9f8db74-gwmgk    1\/1     Running   0          14s\r\n<\/code><\/pre>\n<h3>\u521b\u5efaRedis worker\u670d\u52a1<\/h3>\n<p>\u521b\u5efaRedis\u4e3b\u670d\u52a1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> https:\/\/raw.githubusercontent.com\/kubernetes\/examples\/master\/guestbook\/redis-slave-service.yaml\r\n<\/code><\/pre>\n<p>\u786e\u8ba4 Redis \u4e3b\u8282\u70b9\u670d\u52a1\u5df2\u521b\u5efa\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get svc\r\nNAME           TYPE        CLUSTER-IP      EXTERNAL-IP   PORT<span class=\"o\">(<\/span>S<span class=\"o\">)<\/span>    AGE\r\nkubernetes     ClusterIP   10.55.240.1     &lt;none&gt;        443\/TCP    28m\r\nredis-master   ClusterIP   10.55.245.172   &lt;none&gt;        6379\/TCP   6m41s\r\nredis-slave    ClusterIP   10.55.255.148   &lt;none&gt;        6379\/TCP   12s\r\n<\/code><\/pre>\n<h2>\u8bbe\u5b9a Guestbook \u7684\u524d\u7aef\u5e94\u7528\u7a0b\u5e8f<\/h2>\n<p>\u542f\u52a8Guestbook\u7684Web\u670d\u52a1\u5668\u3002<br \/>\n\u524d\u7aef\u662f\u4e00\u4e2a\u7531PHP\u5f00\u53d1\u7684\u5e94\u7528\u7a0b\u5e8f\u3002<br \/>\n\u6839\u636e\u8bfb\u5199\u64cd\u4f5c\uff0c\u4e0eRedis\u4e3b\u8282\u70b9\u548cRedis\u5de5\u4f5c\u8282\u70b9\u8fdb\u884c\u901a\u4fe1\u3002<\/p>\n<h3>\u524d\u7aef\u5e94\u7528\u7a0b\u5e8f\u7684\u90e8\u7f72\u3002<\/h3>\n<p>\u90e8\u7f72\u524d\u7aef\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> https:\/\/raw.githubusercontent.com\/kubernetes\/examples\/master\/guestbook\/frontend-deployment.yaml\r\n<\/code><\/pre>\n<p>\u76f4\u5230\u521b\u5efa\u7684Pod\u53d8\u4e3a1\/1\u8fd0\u884c\u72b6\u6001\u4e4b\u524d\uff0c\u5c06\u7b49\u5f85\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get po <span class=\"nt\">-l<\/span> <span class=\"nv\">app<\/span><span class=\"o\">=<\/span>guestbook <span class=\"nt\">-l<\/span> <span class=\"nv\">tier<\/span><span class=\"o\">=<\/span>frontend\r\nNAME                        READY   STATUS    RESTARTS   AGE\r\nfrontend-654c699bc8-4qjpc   1\/1     Running   0          37s\r\nfrontend-654c699bc8-rqznb   1\/1     Running   0          37s\r\nfrontend-654c699bc8-txsvq   1\/1     Running   0          37s\r\n<\/code><\/pre>\n<h3>\u521b\u5efa\u524d\u7aef\u5e94\u7528\u7a0b\u5e8f\u670d\u52a1<\/h3>\n<p>\u9700\u8981\u5c06\u7559\u8a00\u7c3f\u7684\u524d\u7aef\u516c\u5f00\u7ed9\u5916\u90e8\uff0c\u56e0\u6b64\u9700\u8981\u5c06\u670d\u52a1\u914d\u7f6e\u7684 type \u8bbe\u7f6e\u4e3a LoadBalancer\uff0c\u4ee5\u4fbf\u5916\u90e8\u53ef\u4ee5\u53d1\u51fa\u8bf7\u6c42\u3002<\/p>\n<p>\u5728\u524d\u7aef\u670d\u52a1\u7684yaml\u6587\u4ef6\uff08frontend-service.yaml\uff09\u4e2d\u8fdb\u884c\u5982\u4e0b\u64cd\u4f5c\uff1a\u4e0b\u8f7d\u6587\u4ef6\uff0c\u5e76\u53d6\u6d88\u6ce8\u91catype: LoadBalancer\u8fd9\u4e00\u884c\uff0c\u540c\u65f6\u5c06type: NodePort\u6ce8\u91ca\u6389\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>wget https:\/\/raw.githubusercontent.com\/kubernetes\/examples\/master\/guestbook\/frontend-service.yaml\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sed<\/span> <span class=\"nt\">-i<\/span> <span class=\"s2\">\"\"<\/span> <span class=\"nt\">-e<\/span> <span class=\"s2\">\"s\/# type: LoadBalancer\/type: LoadBalancer\/\"<\/span> frontend-service.yaml\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sed<\/span> <span class=\"nt\">-i<\/span> <span class=\"s2\">\"\"<\/span> <span class=\"nt\">-e<\/span> <span class=\"s2\">\"s\/type: NodePort\/# type: NodePort\/\"<\/span> frontend-service.yaml\r\n<\/code><\/pre>\n<p>\u4f7f\u7528\u5df2\u7f16\u8f91\u7684frontend-service.yaml\u6587\u4ef6\u521b\u5efa\u670d\u52a1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> frontend-service.yaml\r\n<\/code><\/pre>\n<p>\u786e\u8ba4\u524d\u7aef\u5e94\u7528\u7a0b\u5e8f\u670d\u52a1\u7684\u521b\u5efa\u3002<br \/>\n\u7b49\u5f85\u670d\u52a1\u7684EXTERNAL-IP\u663e\u793a\u51fa\u6765\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get svc frontend\r\nNAME       TYPE           CLUSTER-IP      EXTERNAL-IP     PORT<span class=\"o\">(<\/span>S<span class=\"o\">)<\/span>        AGE\r\nfrontend   LoadBalancer   10.55.244.103   35.187.206.29   80:31533\/TCP   47s\r\n<\/code><\/pre>\n<h2>\u8bbf\u95ee\u7559\u8a00\u7c3f\u5e94\u7528\u7a0b\u5e8f<\/h2>\n<p>\u5f53\u60a8\u4ece\u6d4f\u89c8\u5668\u8fde\u63a5\u5230EXTERNAL-IP\u7684IP\u5730\u5740\u65f6\uff0c\u5c06\u663e\u793a\u4ee5\u4e0b\u7684Guestbook\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"Guestbook \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d8820913a08637a6c21a0\/101-0.png\" alt=\"Guestbook \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\" \/><\/div>\n<p>\u6211\u5df2\u7ecf\u4f7f\u7528Terraform\u5728GKE\u4e0a\u90e8\u7f72\u4e86Guestbook\u5e94\u7528\uff0c\u5e76\u786e\u8ba4\u5176\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n<h1>\u5220\u9664\u5df2\u521b\u5efa\u7684\u8d44\u6e90<\/h1>\n<p>\u5220\u9664\u5df2\u521b\u5efa\u7684\u8d44\u6e90\u3002<\/p>\n<h2>\u5220\u9664\u7559\u8a00\u7c3f\u5e94\u7528<\/h2>\n<p>\u5220\u9664\u524d\u7aef\u5e94\u7528\u7a0b\u5e8f\u7684\u670d\u52a1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl delete svc frontend\r\n<\/code><\/pre>\n<p>\u7531\u4e8e\u5220\u9664\u547d\u4ee4\u6267\u884c\u540e\uff0c\u670d\u52a1\u9700\u8981\u4e00\u4e9b\u65f6\u95f4\u624d\u80fd\u88ab\u5220\u9664\uff0c\u8bf7\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u786e\u8ba4\u662f\u5426\u5df2\u88ab\u5220\u9664\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>gcloud compute forwarding-rules list\r\n<\/code><\/pre>\n<h2>\u5220\u9664 GKE \u96c6\u7fa4<\/h2>\n<p>\u4f7f\u7528 Terraform \u5220\u9664\u521b\u5efa\u7684 GKE \u96c6\u7fa4\u3002<br \/>\n\u8f93\u5165&#8221;\u662f&#8221;\u786e\u8ba4\u5220\u9664\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>terraform destroy\r\n<\/code><\/pre>\n<h2>\u5220\u9664 GCS \u5b58\u50a8\u6876<\/h2>\n<p>\u5220\u9664 GCS \u5b58\u50a8\u6876\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>gsutil <span class=\"nb\">rm<\/span> <span class=\"nt\">-r<\/span> gs:\/\/<span class=\"nv\">$GCS_BUCKET<\/span>\/\r\n<\/code><\/pre>\n<h2>\u5220\u9664\u670d\u52a1\u5e10\u53f7<\/h2>\n<p>\u5220\u9664\u4e0e\u670d\u52a1\u8d26\u6237\u5173\u8054\u7684\u89d2\u8272\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>gcloud projects remove-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/iam.serviceAccountUser <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects remove-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/compute.admin <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects remove-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/storage.admin <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>gcloud projects remove-iam-policy-binding <span class=\"nv\">$GCP_PROJECT<\/span> <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--role<\/span> roles\/container.clusterAdmin <span class=\"se\">\\<\/span>\r\n    <span class=\"nt\">--member<\/span> serviceAccount:<span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n<\/code><\/pre>\n<p>\u6211\u5011\u5c07\u522a\u9664\u670d\u52d9\u5e33\u865f\u3002<br \/>\n\u4f7f\u7528 &#8220;y&#8221; \u9032\u884c\u522a\u9664\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>gcloud iam service-accounts delete <span class=\"nv\">$TERRAFORM_SA_EMAIL<\/span>\r\n<\/code><\/pre>\n<h1>\u8bf7\u53c2\u9605<\/h1>\n<p>\u4f9b\u5e94\u5546\uff1a\u8c37\u6b4c\u4e91\u5e73\u53f0 &#8211; HashiCorp\u7684Terraform<br \/>\n\u5c1d\u8bd5\u4f7f\u7528Terraform\u5728GCP\u73af\u5883\u4e2d\u6784\u5efa | GMO\u5408\u4f5c\u4f19\u4f34\u6280\u672f\u535a\u5ba2 byGMO<br \/>\n\u4e91\u5b58\u50a8\u6587\u6863 | \u4e91\u5b58\u50a8<br \/>\n\u4f7f\u7528Redis\u548cPHP\u521b\u5efa\u7559\u8a00\u7c3f | Kubernetes\u5f15\u64ce\u6559\u7a0b<br \/>\nGitHub &#8211; containerdaysjp\/showks-terraform\uff1a\u4f7f\u7528Terraform\u914d\u7f6e\u63d0\u4f9bshowk\u73af\u5883\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u9996\u5148 \u5728\u6784\u5efaGKE\u65f6\uff0c\u6211\u4eec\u60f3\u8981\u7ba1\u7406\u5b9e\u9645\u5e94\u7528\u7684\u8bbe\u7f6e\uff0c\u56e0\u6b64\u6211\u4eec\u5c06\u4f7f\u7528Terraform\u6765\u6784\u5efaGKE\u3002 Terraf [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-48951","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f7f\u7528Terraform\u6784\u5efaGKE - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efagke\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528Terraform\u6784\u5efaGKE\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u5728\u6784\u5efaGKE\u65f6\uff0c\u6211\u4eec\u60f3\u8981\u7ba1\u7406\u5b9e\u9645\u5e94\u7528\u7684\u8bbe\u7f6e\uff0c\u56e0\u6b64\u6211\u4eec\u5c06\u4f7f\u7528Terraform\u6765\u6784\u5efaGKE\u3002 Terraf [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efagke\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-28T22:29:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-30T04:59:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d8820913a08637a6c21a0\/101-0.png\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/\",\"name\":\"\u4f7f\u7528Terraform\u6784\u5efaGKE - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-11-28T22:29:02+00:00\",\"dateModified\":\"2024-04-30T04:59:18+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528Terraform\u6784\u5efaGKE\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528Terraform\u6784\u5efaGKE - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efagke\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528Terraform\u6784\u5efaGKE","og_description":"\u9996\u5148 \u5728\u6784\u5efaGKE\u65f6\uff0c\u6211\u4eec\u60f3\u8981\u7ba1\u7406\u5b9e\u9645\u5e94\u7528\u7684\u8bbe\u7f6e\uff0c\u56e0\u6b64\u6211\u4eec\u5c06\u4f7f\u7528Terraform\u6765\u6784\u5efaGKE\u3002 Terraf [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efagke\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-11-28T22:29:02+00:00","article_modified_time":"2024-04-30T04:59:18+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d8820913a08637a6c21a0\/101-0.png"}],"author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/","name":"\u4f7f\u7528Terraform\u6784\u5efaGKE - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-11-28T22:29:02+00:00","dateModified":"2024-04-30T04:59:18+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528Terraform\u6784\u5efaGKE"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%bagke\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=48951"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48951\/revisions"}],"predecessor-version":[{"id":92052,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48951\/revisions\/92052"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=48951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=48951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=48951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}