|
| 1 | +# Ansible |
| 2 | +``` |
| 3 | +
|
| 4 | +``` |
| 5 | + |
| 6 | +# Terraform |
| 7 | +``` |
| 8 | +Terraform Lifecycle Ignore changes |
| 9 | +1. Ignore Changes to a Specific Attribute |
| 10 | +resource "aws_instance" "example" { |
| 11 | + ami = "ami-12345678" |
| 12 | + instance_type = "t2.micro" |
| 13 | + tags = { |
| 14 | + Name = "example-instance" |
| 15 | + } |
| 16 | + lifecycle { |
| 17 | + ignore_changes = [ |
| 18 | + tags["Name"] # Bỏ qua thay đổi của thẻ Name |
| 19 | + ] |
| 20 | + } |
| 21 | +} |
| 22 | +
|
| 23 | +2. Ignore an Entire Attribute |
| 24 | +resource "aws_instance" "example" { |
| 25 | + ami = "ami-12345678" |
| 26 | + instance_type = "t2.micro" |
| 27 | + root_block_device { |
| 28 | + volume_size = 50 |
| 29 | + } |
| 30 | + lifecycle { |
| 31 | + ignore_changes = [ |
| 32 | + root_block_device # Bỏ qua mọi thay đổi trong root_block_device |
| 33 | + ] |
| 34 | + } |
| 35 | +} |
| 36 | +
|
| 37 | +3. Ignore Multiple Attributes |
| 38 | +resource "aws_instance" "example" { |
| 39 | + ami = "ami-12345678" |
| 40 | + instance_type = "t2.micro" |
| 41 | + tags = { |
| 42 | + Environment = "production" |
| 43 | + Owner = "team-a" |
| 44 | + } |
| 45 | + lifecycle { |
| 46 | + ignore_changes = [ |
| 47 | + tags["Environment"], # Bỏ qua thay đổi của Environment |
| 48 | + instance_type # Bỏ qua thay đổi của instance_type |
| 49 | + ] |
| 50 | + } |
| 51 | +} |
| 52 | +
|
| 53 | +4. Ignore Changes in a Module |
| 54 | +module "example" { |
| 55 | + source = "./module-example" |
| 56 | + instance_type = "t2.micro" |
| 57 | +} |
| 58 | +lifecycle { |
| 59 | + ignore_changes = [ |
| 60 | + instance_type # Ignore changes to instance_type in the module |
| 61 | + ] |
| 62 | +} |
| 63 | +
|
| 64 | +Import terraform with exsist resource |
| 65 | +
|
| 66 | +variable.tf |
| 67 | +output.tf |
| 68 | +main.tf |
| 69 | +
|
| 70 | +module/elasticache |
| 71 | +module/eks |
| 72 | +module/rds |
| 73 | +module/ec2 |
| 74 | +module/vpc |
| 75 | +module/subnet |
| 76 | +module/ecs |
| 77 | +
|
| 78 | +``` |
| 79 | +# Tracing, Tracking, Application Performance Management |
| 80 | +``` |
| 81 | +Sentry |
| 82 | +APM ElasticSearch |
| 83 | +OpenTeleMetry |
| 84 | +``` |
| 85 | + |
| 86 | +# SAST Tools |
| 87 | +``` |
| 88 | +Bitbucket |
| 89 | +Jenkins: every the repository have to Jenkinfiles template, this template will filter and define all service in one Jenkinfiles, The Jenkin Master installed in EKS and Slave use EC2. |
| 90 | +
|
| 91 | +Runing CI Parrarel |
| 92 | + Scan static code -> success -> done |
| 93 | + / \ |
| 94 | +CI: | failed -> send this log or this ouput to PR - u can use hook or api. |
| 95 | + \ |
| 96 | + Build docker image -> scan docker image -> success -> push docker image |
| 97 | + \ failed -> send this log or this ouput to PR - u can use hook or api. |
| 98 | +Sobelow |
| 99 | +Snyk |
| 100 | +SonarQube |
| 101 | +``` |
0 commit comments