{"id":49169,"date":"2023-11-26T10:20:00","date_gmt":"2024-02-02T01:52:26","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/"},"modified":"2024-05-04T10:50:51","modified_gmt":"2024-05-04T02:50:51","slug":"%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/","title":{"rendered":"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55."},"content":{"rendered":"<h1>\u9996\u5148<\/h1>\n<p>\u6211\u6700\u8fd1\u4f7f\u7528Terraform\u5728GitHub\u4e0a\u69cb\u5efa\u4e86\u4e00\u500b\u80fd\u5920\u7ba1\u7406Google Cloud DNS\u4e26\u5f9eWercker\u81ea\u52d5\u540c\u6b65\u7684\u74b0\u5883\uff0c\u5b83\u7684\u4fbf\u5229\u7a0b\u5ea6\u8b93\u6211\u611f\u5230\u975e\u5e38\u9a5a\u559c\u3002<\/p>\n<p>\u8fd9\u4e2a\u6709\u4e24\u4e2a\u4e3b\u8981\u7684\u76ca\u5904\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Terraform \u3068 Git \u306b\u3088\u308b DNS \u30ec\u30b3\u30fc\u30c9\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u7ba1\u7406<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">GitHub \u3068 Wercker \u306b\u3088\u308b\u81ea\u52d5\u53cd\u6620<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\u30c1\u30fc\u30e0\u958b\u767a\u306a\u3069\u3067\u8907\u6570\u4eba\u304c\u30ec\u30b3\u30fc\u30c9\u3092\u7ba1\u7406\u3059\u308b\u4e8b\u304c\u5bb9\u6613\u306b\u306a\u308b (Pull Request \u3092\u51fa\u3057\u3066\u3082\u3089\u3063\u3066\u30ec\u30d3\u30e5\u30fc\u5f8c\u306b master \u3078 merge \u3059\u308b\u3060\u3051)<\/ul>\n<p>\u56e0\u4e3a\u6211\u633a\u559c\u6b22\u8fd9\u4e2a\uff0c\u6240\u4ee5\u6211\u4f1a\u6574\u7406\u4e00\u4e0b\u6b65\u9aa4\u3002<\/p>\n<p>\u5047\u8bbe\u60a8\u5df2\u7ecf\u62e5\u6709 GCP \u5e10\u53f7\uff0c\u5e76\u4e14\u5df2\u7ecf\u521b\u5efa\u4e86\u9879\u76ee\u3002<br \/>\nhttps:\/\/console.cloud.google.com\/<\/p>\n<h2>\u5728\u4e2d\u56fd\uff0c\u6211\u6709\u4e00\u4e9b\u9119\u964b\u7684\u60f3\u6cd5\u3002<\/h2>\n<p>\u7b14\u8005\u4ee5\u524d\u4e00\u76f4\u4f7f\u7528Gehirn DNS\u3002\u8be5\u670d\u52a1\u53ef\u4ee5\u5728\u4e0d\u4f7f\u7528Git\u7b49\u81ea\u5df1\u7cfb\u7edf\u7684\u60c5\u51b5\u4e0b\u8fdb\u884cDNS\u8bb0\u5f55\u7684\u7248\u672c\u63a7\u5236\u3002\u6b64\u5916\uff0c\u8be5\u670d\u52a1\u8fd8\u63d0\u4f9b\u4e86API\uff0c\u5e76\u5177\u6709\u5728\u6307\u5b9a\u65f6\u95f4\u5207\u6362\u5230\u4efb\u610f\u7248\u672c\u7684\u529f\u80fd\uff08\u8fc1\u79fb\uff09\u3002<\/p>\n<p>\u6b64\u6b21\u8fc1\u79fb\u5230Google Cloud DNS\u7684\u539f\u56e0\u662f\uff0c\u6211\u4eec\u53ea\u4f7f\u7528\u4e86Gehirn DNS\u72ec\u6709\u7684\u529f\u80fd\uff0c\u5e76\u4e14\u7ecf\u8fc7\u5bf9\u5305\u62ecAmazon Route 53\u5728\u5185\u76843\u4e2a\u670d\u52a1\u7684\u6210\u672c\u4f30\u7b97\u540e\uff0cGoogle Cloud DNS\u662f\u6700\u4fbf\u5b9c\u7684\u3002<\/p>\n<p>\u5982\u679c\u60a8\u60f3\u8981\u65b9\u4fbf\u5730\u5728Web\u63a7\u5236\u53f0\u4e0a\u8fdb\u884cDNS\u8bb0\u5f55\u7684\u7248\u672c\u7ba1\u7406\uff0c\u5e76\u4e14\u53ea\u8981\u6709API\u53ef\u7528\uff0c\u65e0\u9700\u4f7f\u7528Terraform\uff0c\u90a3\u4e48Gehirn DNS\u53ef\u80fd\u4f1a\u66f4\u9002\u5408\u60a8\u3002<\/p>\n<h1>\u4f7f\u7528Terraform\u8fdb\u884cGoogle Cloud DNS\u7684\u914d\u7f6e\u3002<\/h1>\n<h2>\u6587\u4ef6\u7ed3\u6784<\/h2>\n<pre class=\"post-pre\"><code>\u252c .gitignore\r\n\u251c account.json\r\n\u251c dns_example_com.tf\r\n\u251c gcp.tf\r\n\u251c variables.tf\r\n\u2514 variables.tfvars\r\n<\/code><\/pre>\n<p>\u5982\u679ctf\u6587\u4ef6\u4f4d\u4e8e\u540c\u4e00\u76ee\u5f55\u4e2d\uff0c\u5219\u914d\u7f6e\u53ef\u4ee5\u81ea\u7531\u9009\u62e9\uff0c\u4ec5\u4f9b\u53c2\u8003\u3002<\/p>\n<pre class=\"post-pre\"><code>.*\r\n!.gitignore\r\n\r\n# Terraform\r\n*.log\r\n*.tfstate\r\n*.tfstate.backup\r\n\r\naccount.json\r\n<\/code><\/pre>\n<h2>\u8c37\u6b4c\u4f9b\u5e94\u5546\u7684\u8bbe\u7f6e<\/h2>\n<pre class=\"post-pre\"><code>provider \"google\" {\r\n  credentials = \"${file(\"account.json\")}\"\r\n  project     = \"${var.project}\"\r\n  region      = \"${var.region}\"\r\n}\r\n<\/code><\/pre>\n<h2>\u533a\u57df\u548c\u8bb0\u5f55\u7684\u8bbe\u7f6e<\/h2>\n<pre class=\"post-pre\"><code>resource \"google_dns_managed_zone\" \"example_com\" {\r\n  name        = \"example-com\"\r\n  dns_name    = \"example.com.\"\r\n}\r\n<\/code><\/pre>\n<p>\u8bf7\u6ce8\u610f\uff0cdns_name\u7684\u672b\u5c3e\u9700\u8981\u52a0\u4e0a\u4e00\u4e2a\u53e5\u70b9 (\u3002)\u3002<\/p>\n<h2>\u8a18\u9304\u7684\u8a2d\u5b9a<\/h2>\n<p>\u5c06\u5185\u5bb9\u8ffd\u52a0\u5230\u4e0e\u533a\u57df\u8bbe\u7f6e\u76f8\u540c\u7684\u6587\u4ef6\u4e2d\u3002<\/p>\n<pre class=\"post-pre\"><code>resource \"google_dns_record_set\" \"a_example_com\" {\r\n  managed_zone = \"${google_dns_managed_zone.example_com.name}\"\r\n  name         = \"${google_dns_managed_zone.appcloud_info.dns_name}\"\r\n  type         = \"A\"\r\n  ttl          = 300\r\n  rrdatas      = [\r\n    \"192.30.252.153\",\r\n    \"192.30.252.154\"\r\n  ]\r\n}\r\n<\/code><\/pre>\n<h2>\u53d8\u91cf<\/h2>\n<pre class=\"post-pre\"><code>variable \"region\" {\r\n  default = \"asia-northeast1\"\r\n}\r\nvariable \"project\" {}\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>project = \"project-id\"\r\n<\/code><\/pre>\n<p>\u7531\u4e8e\u8fd9\u6b21\u7684\u5730\u533a\u5c06\u4e0d\u4f1a\u6539\u53d8\u9664\u4e1c\u4eac\u5730\u533a\u4ee5\u5916\u7684\u4efb\u4f55\u5730\u65b9\uff0c\u6240\u4ee5\u6211\u4eec\u5c06\u8bbe\u7f6e\u9ed8\u8ba4\u503c\u3002<\/p>\n<h2>\u8eab\u4efd\u8ba4\u8bc1\u4fe1\u606f<\/h2>\n<p>\u521b\u5efa\u670d\u52a1\u5e10\u53f7\u5bc6\u94a5\uff08JSON\uff09\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/31-0.png\" alt=\"service account key\" \/><\/div>\n<p>\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u670d\u52a1\u5e10\u53f7\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/33-0.png\" alt=\"create service account\" \/><\/div>\n<p>\u5b8c\u6210\u540e\uff0c\u60a8\u53ef\u4ee5\u4ee5 JSON \u683c\u5f0f\u4e0b\u8f7d\u8ba4\u8bc1\u4fe1\u606f\uff0c\u7136\u540e\u5c06\u5176\u91cd\u547d\u540d\u4e3a account.json \u5e76\u653e\u7f6e\u5728\u76f8\u540c\u7684\u8def\u5f84\u4e0b\u3002<\/p>\n<h2>\u57df\u540d\u670d\u52a1\u5668<\/h2>\n<p>\u5728Google Cloud DNS\u548cAmazon Route 53\u4e2d\uff0c\u521b\u5efa\u65b0\u7684\u533a\u57df\u65f6\u4f1a\u5206\u914d\u57df\u540d\u670d\u52a1\u5668\u3002<\/p>\n<p>\u56e0\u6b64\uff0c\u82e5\u5728\u8d44\u6e90\u521b\u5efa\u540e\u8f93\u51fa\u540d\u79f0\u670d\u52a1\u5668\u5217\u8868\uff0c\u53ef\u4ee5\u8282\u7701\u6253\u5f00Web\u63a7\u5236\u53f0\u5e76\u8fdb\u884c\u786e\u8ba4\u7684\u529f\u592b\uff0c\u975e\u5e38\u65b9\u4fbf\u3002<\/p>\n<p>\u5c06\u5185\u5bb9\u6dfb\u52a0\u5230\u4e0eZone\u8bbe\u7f6e\u76f8\u540c\u7684\u6587\u4ef6\u4e2d\u3002<\/p>\n<pre class=\"post-pre\"><code>resource \"null_resource\" \"nameservers_example_com\" {\r\n  triggers {\r\n    name_servers = \"${join(\"\\n\", google_dns_managed_zone.example_com.name_servers)}\"\r\n  }\r\n\r\n  provisioner \"local-exec\" {\r\n    command = &lt;&lt;EOF\r\necho \"nameservers: ${google_dns_managed_zone.example_com.dns_name}\"\r\necho \"${self.triggers.name_servers}\"\r\nEOF\r\n  }\r\n}\r\n<\/code><\/pre>\n<h2>\u8ba1\u5212\u4e0e\u7533\u8bf7<\/h2>\n<p>\u5efa\u8bae\u60a8\u5728Mac\u4e0a\u4f7f\u7528brew\u6765\u5b89\u88c5Terraform\u3002<\/p>\n<pre class=\"post-pre\"><code>terraform plan -var-file=variables.tfvars\r\n<\/code><\/pre>\n<p>\u5982\u679c\u8bed\u6cd5\u6709\u95ee\u9898\uff0c\u5230\u4e86\u8fd9\u4e00\u6b65\u5c31\u4f1a\u51fa\u9519\u3002<br \/>\n\u5982\u679c\u786e\u8ba4\u6ca1\u6709\u95ee\u9898\uff0c\u5e76\u4e14\u53ef\u4ee5\u786e\u8ba4\u8d44\u6e90\u5df2\u7ecf\u66f4\u65b0\u4e86\uff0c\u5c31\u6267\u884c\u5e94\u7528\u3002<\/p>\n<pre class=\"post-pre\"><code>terraform apply -var-file=variables.tfvars\r\n<\/code><\/pre>\n<p>\u4ee5\u4e0b\u662f\u57df\u540d\u670d\u52a1\u5668\u5217\u8868\u7684\u8f93\u51fa\u7ed3\u679c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">null_resource.nameservers_example_com (local-exec): nameservers: example.com.\r\nnull_resource.nameservers_example_com (local-exec): ns-cloud-d1.googledomains.com.\r\nnull_resource.nameservers_example_com (local-exec): ns-cloud-d2.googledomains.com.\r\nnull_resource.nameservers_example_com (local-exec): ns-cloud-d3.googledomains.com.\r\nnull_resource.nameservers_example_com (local-exec): ns-cloud-d4.googledomains.com.\r\n<\/span><\/code><\/pre>\n<p>\u53ea\u8981\u5728\u672c\u5730\u6267\u884c\uff0c\u8fd9\u6837\u5c31\u5b8c\u6210\u4e86\u3002<\/p>\n<h1>\u5728Wercker\u4e0a\u81ea\u52d5\u90e8\u7f72<\/h1>\n<p>\u76ee\u524d\uff082017\u5e741\u6708\uff09\uff0c\u60a8\u53ef\u4ee5\u5728GitHub\u6216Bitbucket\u4e0a\u521b\u5efa\u4ee3\u7801\u5e93\u3002\u5982\u679c\u4f7f\u7528Wercker\uff0c\u5373\u4f7f\u662f\u79c1\u6709\u4ee3\u7801\u5e93\u4e5f\u53ef\u4ee5\u514d\u8d39\u4f7f\u7528\u3002<\/p>\n<h2>\u6587\u4ef6\u7ed3\u6784<\/h2>\n<pre class=\"post-pre\"><code>\u252c .gitignore\r\n\u251c account.json\r\n\u251c dns_example_com.tf\r\n\u251c gcp.tf\r\n\u251c gcs.tf\r\n\u251c variables.tf\r\n\u251c variables.tfvars\r\n\u2514 wercker.yml\r\n<\/code><\/pre>\n<p>\u8ffd\u52a0\u7684\u662f gcs.tf \u548c wercker.yml\u3002<\/p>\n<h2>\u9065\u8fdc\u7684\u56fd\u5ea6 de<\/h2>\n<p>\u5982\u679c\u5728\u672c\u5730\u6267\u884c\uff0c\u5219\u901a\u8fc7\u6587\u4ef6 terraform.tfstate \u4fdd\u5b58\u914d\u7f6e\u72b6\u6001\u3002\u8981\u5728\u672c\u5730\u4ee5\u5916\u6b63\u786e\u5730\u8fdb\u884c\u53cd\u6620\uff0c\u9700\u8981\u4ee5\u67d0\u79cd\u65b9\u5f0f\u540c\u6b65\u6b64\u72b6\u6001\u3002<br \/>\n\u8fd9\u5c31\u662f\u8fdc\u7a0b\u72b6\u6001\uff08remote state\uff09\u529f\u80fd\u3002<\/p>\n<p>\u8fdc\u7a0b\u72b6\u6001\u6709 S3 \u548c GCS\uff08Google Cloud Storage\uff09\u4f5c\u4e3a\u5176\u540e\u7aef\u3002\u5728\u8fd9\u91cc\u6211\u4eec\u9009\u62e9\u4e86 GCS\u3002<\/p>\n<h3>\u8fdc\u7a0b\u72b6\u6001\u540e\u7aef<\/h3>\n<pre class=\"post-pre\"><code>resource \"google_storage_bucket\" \"wercker_tfstate\" {\r\n  name          = \"${var.remote_state_bucket}\"\r\n  location      = \"${var.region}\"\r\n  storage_class = \"REGIONAL\"\r\n\r\n  provisioner \"local-exec\" {\r\n    # Enable versioning (not supported by terraform)\r\n    # https:\/\/cloud.google.com\/storage\/docs\/object-versioning\r\n    command = &lt;&lt;EOF\r\ngcloud auth activate-service-account --key-file account.json\r\ngsutil versioning set on \"${var.remote_state_bucket}\"\r\ngsutil versioning get \"${var.remote_state_bucket}\"\r\nEOF\r\n  }\r\n}\r\n<\/code><\/pre>\n<p>\u5f53\u72b6\u6001\u7531\u4e8e\u67d0\u79cd\u4e8b\u6545\u800c\u88ab\u9519\u8bef\u5730\u8986\u76d6\u65f6\uff0c\u6211\u4eec\u5c06\u8bbe\u7f6eGCS\u7248\u672c\u63a7\u5236\u529f\u80fd\u4f5c\u4e3a\u5e94\u5bf9\u63aa\u65bd\u3002\u7136\u800c\uff0c\u76ee\u524dterraform\u4e0d\u652f\u6301\u6b64\u529f\u80fd\uff0c\u6240\u4ee5\u6211\u4eec\u5c06\u4f7f\u7528local-exec provisioner\u76f4\u63a5\u6267\u884cgsutil\u547d\u4ee4\u4ee5\u542f\u7528\u5b83\u3002<\/p>\n<p>\u7136\u540e\uff0c\u5728 variables.tf \u548c variables.tfvars \u6587\u4ef6\u4e2d\u6dfb\u52a0 remote_state_bucket \u548c remote_state_path\u3002<\/p>\n<pre class=\"post-pre\"><code>variable \"region\" {\r\n  default = \"asia-northeast1\"\r\n}\r\nvariable \"project\" {}\r\nvariable \"remote_state_bucket\" {}\r\nvariable \"remote_state_path\" {\r\n  default = \"terraform.tfstate\"\r\n}\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>project = \"project-id\"\r\nremote_state_bucket  = \"bucket-name\"\r\n<\/code><\/pre>\n<p>\u203b \u5982\u679c\u6876\u540d\u5df2\u88ab\u5176\u4ed6\u7528\u6237\u6ce8\u518c\u4f7f\u7528\u76f8\u540c\u7684\u540d\u79f0\uff0c\u5219\u65e0\u6cd5\u4f7f\u7528\u3002\u9700\u8981\u8bbe\u7f6e\u4e3a\u4e0d\u91cd\u590d\u7684\u540d\u79f0\u3002<\/p>\n<h3>\u5728\u672c\u5730\u73af\u5883\u4e2d\u5c1d\u8bd5\u8fdc\u7a0b\u72b6\u6001<\/h3>\n<p>\u9996\u5148\uff0c\u4e3a\u4e86\u521b\u5efaGCS\u5b58\u50a8\u6876\uff0c\u8bf7\u5148\u8fdb\u884c\u7533\u8bf7\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">terraform plan -var-file=variables.tfvars\r\nterraform apply -var-file=variables.tfvars\r\n<\/span><\/code><\/pre>\n<p>\u7136\u540e\u8fd0\u884cterraform remote config\u6765\u540c\u6b65\u672c\u5730\u7684tfstate\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">terraform remote config \\\r\n          -backend=gcs \\\r\n          -backend-config='bucket=bucket_name' \\\r\n          -backend-config='path=terraform.tfstate' \\\r\n          -backend-config='project=project_id' \\\r\n          -backend-config=\"credentials=$<\/span><span class=\"o\">(<\/span><span class=\"nb\">cat <\/span>account.json<span class=\"o\">)<\/span><span class=\"s2\">\"\r\n<\/span><\/code><\/pre>\n<h2>\u521b\u5efa Wercker \u5e94\u7528<\/h2>\n<p>\u6ce8\u518c\u4ee3\u7801\u5e93\u5e76\u521b\u5efaWercker\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/72-0.png\" alt=\"make-my-app-public\" \/><\/div>\n<p>\u4e00\u65e6\u9009\u62e9\u4e86\u5c06\u6211\u7684\u5e94\u7528\u7a0b\u5e8f\u8bbe\u4e3a\u516c\u5f00\uff0c\u5373\u4f7f\u5b83\u4ee5\u524d\u662f\u4e00\u4e2a\u79c1\u6709\u4ed3\u5e93\uff0c\u4e5f\u4f1a\u88ab\u516c\u5f00\uff0c\u6240\u4ee5\u9700\u8981\u6ce8\u610f\u3002<\/p>\n<h2>\u6784\u5efa\u6b65\u9aa4\u7684\u8bbe\u7f6e<\/h2>\n<p>\u6211\u4eec\u5c06\u5728wercker.yml\u4e2d\u8fdb\u884c\u6784\u5efa\u548c\u90e8\u7f72\u7684\u8bbe\u7f6e\u3002<\/p>\n<p>\u5728 &#8220;build&#8221; \u8fc7\u7a0b\u4e2d\uff0c\u901a\u8fc7\u6267\u884c `terraform plan` \u547d\u4ee4\u6765\u9a8c\u8bc1 tf \u6587\u4ef6\uff0c\u5e76\u5728 &#8220;deploy&#8221; \u8fc7\u7a0b\u4e2d\u4f7f\u7528 `terraform apply` \u547d\u4ee4\u6765\u5b9e\u9645\u5e94\u7528\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"na\">box<\/span><span class=\"pi\">:<\/span> <span class=\"s\">python:2.7<\/span>\r\n\r\n<span class=\"na\">build<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">steps<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">script<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">generate account.json<\/span>\r\n      <span class=\"na\">code<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n        <span class=\"s\">cat &lt;&lt;EOF &gt; account.json<\/span>\r\n        <span class=\"s\">{<\/span>\r\n          <span class=\"s\">\"private_key\": \"$GCP_PRIVATE_KEY\",<\/span>\r\n          <span class=\"s\">\"client_email\": \"$GCP_CLIENT_EMAIL\"<\/span>\r\n        <span class=\"s\">}<\/span>\r\n        <span class=\"s\">EOF<\/span>\r\n\r\n    <span class=\"pi\">-<\/span> <span class=\"s\">ww24\/terraform<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">command<\/span><span class=\"pi\">:<\/span> <span class=\"s\">plan<\/span>\r\n      <span class=\"na\">var_file<\/span><span class=\"pi\">:<\/span> <span class=\"s\">variables.tfvars<\/span>\r\n      <span class=\"na\">remote_config<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n        <span class=\"s\">-backend=gcs \\<\/span>\r\n        <span class=\"s\">-backend-config='bucket=bucket_name' \\<\/span>\r\n        <span class=\"s\">-backend-config='path=terraform.tfstate' \\<\/span>\r\n        <span class=\"s\">-backend-config='project=project_id' \\<\/span>\r\n        <span class=\"s\">-backend-config='credentials={ \\<\/span>\r\n          <span class=\"s\">\"private_key\": \"$GCP_PRIVATE_KEY\", \\<\/span>\r\n          <span class=\"s\">\"client_email\": \"$GCP_CLIENT_EMAIL\" \\<\/span>\r\n        <span class=\"s\">}'<\/span>\r\n\r\n<span class=\"na\">deploy<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">steps<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">script<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">install gsutil<\/span>\r\n      <span class=\"na\">code<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n        <span class=\"s\">pip install gsutil<\/span>\r\n\r\n    <span class=\"pi\">-<\/span> <span class=\"s\">ww24\/terraform<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">command<\/span><span class=\"pi\">:<\/span> <span class=\"s\">apply<\/span>\r\n      <span class=\"na\">var_file<\/span><span class=\"pi\">:<\/span> <span class=\"s\">variables.tfvars<\/span>\r\n      <span class=\"na\">remote_config<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n        <span class=\"s\">-backend=gcs \\<\/span>\r\n        <span class=\"s\">-backend-config='bucket=bucket_name' \\<\/span>\r\n        <span class=\"s\">-backend-config='path=terraform.tfstate' \\<\/span>\r\n        <span class=\"s\">-backend-config='project=project_id' \\<\/span>\r\n        <span class=\"s\">-backend-config='credentials={ \\<\/span>\r\n          <span class=\"s\">\"private_key\": \"$GCP_PRIVATE_KEY\", \\<\/span>\r\n          <span class=\"s\">\"client_email\": \"$GCP_CLIENT_EMAIL\" \\<\/span>\r\n        <span class=\"s\">}'<\/span>\r\n<\/code><\/pre>\n<p>\u8bf7\u6839\u636e\u9700\u8981\u968f\u610f\u66f4\u6539bucket_name\u548cproject_id\u3002<\/p>\n<p>\u6211\u6b63\u5728\u4f7f\u7528ww24\/terraform\u5728\u5b89\u88c5Terraform\u5e76\u6267\u884cplan\u548capply\u3002<\/p>\n<p>\u901a\u8fc7\u5728 remote_config \u4e2d\u7f16\u5199 -backend \u6216 -backend-config\uff0c\u53ef\u4ee5\u786e\u4fdd\u5728\u6267\u884c plan \u6216 apply \u4e4b\u524d\u5fc5\u987b\u5148\u6267\u884c terraform remote config\u3002<\/p>\n<h2>\u5de5\u4f5c\u6d41\u7a0b\u7684\u8bbe\u7f6e de<\/h2>\n<p>\u5c06\u4e3b\u5206\u652f\u7684\u66f4\u6539\u914d\u7f6e\u4e3a\u5728\u53d1\u751f\u65f6\u8fdb\u884c\u90e8\u7f72\uff08\u4f7f\u7528terraform apply\uff09\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/83-0.png\" alt=\"image\" \/><\/div>\n<p>\u589e\u52a0\u65b0\u7684\u6d41\u6c34\u7ebf\u4ee5\u8fdb\u884c\u90e8\u7f72\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/85-0.png\" alt=\"image\" \/><\/div>\n<p>\u2193 pipeline \u6dfb\u52a0\u4e86\u90e8\u7f72\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/87-0.png\" alt=\"image\" \/><\/div>\n<p>\u70b9\u51fbWorkflow editor\u6784\u5efa\u53f3\u4fa7\u7684+\u6309\u94ae\uff0c\u7136\u540e\u5728branch\u4e2d\u9009\u62e9master\uff0c\u6267\u884c\u7ba1\u9053\u4e2d\u9009\u62e9deploy\uff0c\u5e76\u70b9\u51fbAdd\u6309\u94ae\u6dfb\u52a0\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/89-0.png\" alt=\"image\" \/><\/div>\n<p>\u5982\u679c\u6309\u7167\u4ee5\u4e0b\u65b9\u5f0f\u8fdb\u884c\u64cd\u4f5c\uff0c\u5de5\u4f5c\u6d41\u8bbe\u7f6e\u5c06\u5b8c\u6210\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/91-0.png\" alt=\"image\" \/><\/div>\n<h2>\u73af\u5883\u7684\u8bbe\u7f6e<\/h2>\n<p>\u7531\u4e8e\u65e0\u6cd5\u76f4\u63a5\u5c06\u8ba4\u8bc1\u4fe1\u606f\u653e\u5728wercker.yml\u6587\u4ef6\u4e2d\uff0c\u6240\u4ee5\u9700\u8981\u8bbe\u7f6e\u4e3a\u73af\u5883\u53d8\u91cf\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/94-0.png\" alt=\"image\" \/><\/div>\n<p>\u5982\u679c\u5c06\u9009\u9879&#8221;Protected&#8221;\u9009\u4e2d\uff0c\u57fa\u672c\u4e0a\u65e0\u6cd5\u4eceWeb\u4e0a\u67e5\u770b\uff0c\u8fd9\u662f\u5f88\u6709\u7528\u7684\u3002<br \/>\n\u7136\u800c\uff0c\u5728\u6784\u5efa\u548c\u90e8\u7f72\u8fc7\u7a0b\u4e2d\u53ef\u80fd\u4f1a\u51fa\u73b0\u610f\u5916\u9519\u8bef\uff0c\u5e76\u4ee5\u9519\u8bef\u6d88\u606f\u7684\u5f62\u5f0f\u8f93\u51fa\uff0c\u56e0\u6b64\u9700\u8981\u91c7\u53d6\u9884\u9632\u63aa\u65bd\uff0c\u4f8b\u5982\u4e0d\u5c06Wercker\u5e94\u7528\u7a0b\u5e8f\u516c\u5f00\u7b49\u3002<\/p>\n<p>\u7136\u540e\uff0c\u5982\u679c\u5728GitHub\u4e0a\u7684\u8fdc\u7a0b\u4ed3\u5e93\u6709\u66f4\u65b0\uff0c\u5c31\u901a\u8fc7Wercker\u8fd0\u884c\u6784\u5efa\uff08terraform plan\uff09\u3002\u5f53\u5408\u5e76\u5230\u4e3b\u5206\u652f\u65f6\uff0c\u4f1a\u8fd0\u884c\u6784\u5efa\u548c\u90e8\u7f72\uff08terraform apply\uff09\u3002<\/p>\n<h1>\u6700\u540e<\/h1>\n<p>\u6211\u867d\u7136\u4e0d\u662f\u4f7f\u7528Terraform\uff0c\u4f46\u5728\u5de5\u4f5c\u4e2d\u89c1\u5230\u4e86\u7c7b\u4f3c\u7684\u914d\u7f6e\uff0c\u8d1f\u8d23\u7ba1\u7406DNS\u8bb0\u5f55\uff0c\u7ed9\u6211\u5e26\u6765\u4e86\u7075\u611f\u3002<\/p>\n<p>\u5982\u679c\u6709\u8bbe\u7f6e\u4e0a\u4e0d\u660e\u767d\u7684\u5730\u65b9\uff0c\u53ef\u4ee5\u53c2\u8003\u5b9e\u9645\u8fd0\u4f5c\u7684\u5185\u5bb9\u3002<\/p>\n<p>\u8fd9\u662fgithub\u4e0a\u7684\u4e00\u4e2a\u9879\u76ee\uff0c\u4f60\u53ef\u4ee5\u5728https:\/\/github.com\/ww24\/dns\u627e\u5230\u5b83\u3002\u8bf7\u6ce8\u610f\uff0c\u76ee\u5f55\u7ed3\u6784\u53ef\u80fd\u4f1a\u7a0d\u6709\u4e0d\u540c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u9996\u5148 \u6211\u6700\u8fd1\u4f7f\u7528Terraform\u5728GitHub\u4e0a\u69cb\u5efa\u4e86\u4e00\u500b\u80fd\u5920\u7ba1\u7406Google Cloud DNS\u4e26\u5f9eWer [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-49169","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55. - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u7528-terraform-\u548c-wercker-\u7ba1\u7406-dns-\u8bb0\u5f55\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55.\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u6211\u6700\u8fd1\u4f7f\u7528Terraform\u5728GitHub\u4e0a\u69cb\u5efa\u4e86\u4e00\u500b\u80fd\u5920\u7ba1\u7406Google Cloud DNS\u4e26\u5f9eWer [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u7528-terraform-\u548c-wercker-\u7ba1\u7406-dns-\u8bb0\u5f55\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-02T01:52:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-04T02:50:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/31-0.png\" \/>\n<meta name=\"author\" content=\"\u79d1, \u96c5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u96c5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/\",\"name\":\"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55. - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2024-02-02T01:52:26+00:00\",\"dateModified\":\"2024-05-04T02:50:51+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\",\"name\":\"\u79d1, \u96c5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u96c5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55. - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u7528-terraform-\u548c-wercker-\u7ba1\u7406-dns-\u8bb0\u5f55\/","og_locale":"zh_CN","og_type":"article","og_title":"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55.","og_description":"\u9996\u5148 \u6211\u6700\u8fd1\u4f7f\u7528Terraform\u5728GitHub\u4e0a\u69cb\u5efa\u4e86\u4e00\u500b\u80fd\u5920\u7ba1\u7406Google Cloud DNS\u4e26\u5f9eWer [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u7528-terraform-\u548c-wercker-\u7ba1\u7406-dns-\u8bb0\u5f55\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2024-02-02T01:52:26+00:00","article_modified_time":"2024-05-04T02:50:51+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d89b7913a08637a6c7808\/31-0.png"}],"author":"\u79d1, \u96c5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u96c5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/","name":"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55. - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2024-02-02T01:52:26+00:00","dateModified":"2024-05-04T02:50:51+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u7528 Terraform \u548c Wercker \u7ba1\u7406 DNS \u8bb0\u5f55."}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a","name":"\u79d1, \u96c5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","caption":"\u79d1, \u96c5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%94%a8-terraform-%e5%92%8c-wercker-%e7%ae%a1%e7%90%86-dns-%e8%ae%b0%e5%bd%95\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/49169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=49169"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/49169\/revisions"}],"predecessor-version":[{"id":97882,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/49169\/revisions\/97882"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=49169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=49169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=49169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}