suzuki-shunsuke

package sentry

import (
	"time"

	"github.com/getsentry/sentry-go"
)

type Event struct {
	Error    error

suzuki-shunsuke

commands:
  apply:
    description: |
      Run `terraform apply` and add a comment to the pull request or Git commit.
    parameters:
      apply_options:
        default: ""
        description: |
          The options of `terraform apply` command. The option `-auto-approve` is set automatically.
          For example, `-refresh=false -parallelism=20`.

suzuki-shunsuke

最初に 5 ~ 10 分程度お時間を頂いて本日お時間を頂いた経緯などを説明したあと、色々お話を聞かせてもらえたらと思います。

本日のトピックを簡潔に言うと

• 如何に Terraform の state を分割するか
• 如何に Terraform によるリソースの管理を SRE から developer に委譲するか

弊社の現状の簡単な説明

• AWS のリソースを Terraform で管理している

suzuki-shunsuke

send-pr() {
  local remote=`git config branch.master.remote`
  local remote_url=`git config remote.${remote}.url`
  case "$remote_url" in
    https://github.com*)
      git-pr
      ;;
    https://ghe.example.com*)
      ghe-pr
      ;;

suzuki-shunsuke

package main

import (
	"fmt"
	"os"
	"os/exec"
)

func main() {
	cmd := exec.Command("sh", "-c", "ls | fzf")

suzuki-shunsuke

dctag() {
  if [ $# -eq 0 -o "$1" = "help" -o "$1" = "--help" -o "$1" = "-help" ]; then
    cat << EOS
List Docker image tags
Usage: $ dctag <image name>
ex. $ dctag alpine
EOS
    return 0
  fi
  if [ $# -ne 1 ]; then

suzuki-shunsuke

docker run -v /var/run/docker.sock:/var/run/docker.sock -ti --rm -e USER_NAME=$USER_NAME -e PASSWORD=$PASSWORD docker:19.03.1 sh -c 'echo $PASSWORD | docker login $REGISTRY --username $USER_NAME --password-stdin > /dev/null 2> /tmp/error.txt && cat /root/.docker/config.json || (cat /tmp/error.txt >&2 && exit 1)'

suzuki-shunsuke

{
  "permissions" : {
    "outputs" : [ "create", "edit", "terminate", "read" ],
    "sources" : [ "read" ],
    "indexranges" : [ "read", "rebuild" ],
    "deflector" : [ "read", "cycle" ],
    "loggers" : [ "readsubsystem", "edit", "editsubsystem", "read" ],
    "inputs" : [ "terminate", "read", "create", "changestate", "edit" ],
    "lbstatus" : [ "change" ],
    "roles" : [ "edit", "create", "read", "delete" ],

suzuki-shunsuke

# xurls: https://github.com/mvdan/xurls
s=0
for url in `find . -name "*" -type f | xargs xurls | grep -v "ldap.*"`; do
  if ! `curl -LI $url -o /dev/null --fail -s`; then
    echo $url
    s=1  
  fi
done
if [ $s -ne 0 ]; then
  exit 1

suzuki-shunsuke

s=0
for url in `find ./test -name "*" -type f | xargs xurls | grep -v "ldap.*"`; do
  if ! `curl -LI $url -o /dev/null --fail -s`; then
    echo $url
    s=1  
  fi
done
if [ $s -ne 0 ]; then
  exit 1
fi