Serverless App Engine：使用Terraform為SAE應用綁定SLB

使用的資源

建立應用並綁定SLB

本樣本以在華南1（深圳）地區下為應用綁定SLB為例，介紹如何通過鏡像方式自訂部署應用，並同時為應用綁定SLB。

1. 建立一個用於存放Terraform資源的專案檔夾，命名為terraform。

2. 執行以下命令，進入專案目錄。

   cd terraform

3. 建立名為main.tf的設定檔。

   內容如下：

   # 供應商配置
   provider "alicloud" {
     region = var.region_id
   }
   # 變數定義
   variable "region_id" {
     type    = string
     default = "cn-shenzhen"
   }
   variable "app_name" {
     description = "應用程式名稱"
     type        = string
     default     = "app-slb"
   }
   variable "image_url" {
     description = "鏡像地址"
     type        = string
     default     = "registry.cn-hangzhou.aliyuncs.com/google_containers/nginx-slim:0.9"
   }
   variable "namespace_id" {
     description = "命名空間ID"
     type        = string
     default     = "cn-shenzhen:demo"
   }
   variable "namespace_name" {
     description = "命名空間名稱"
     type        = string
     default     = "demo"
   }
   # 命名空間
   resource "alicloud_sae_namespace" "default" {
     namespace_description = var.namespace_description
     namespace_id          = var.namespace_id
     namespace_name        = var.namespace_name
   }
   # VPC
   resource "alicloud_vpc" "default" {
     vpc_name   = var.name
     cidr_block = "10.4.0.0/16"
   }
   # VSwitch
   resource "alicloud_vswitch" "default" {
     vswitch_name = var.name
     cidr_block   = "10.4.0.0/24"
     vpc_id       = alicloud_vpc.default.id
     zone_id      = var.zone_id
   }
   # 安全性群組
   resource "alicloud_security_group" "sg" {
     name        = var.name
     description = var.description
     vpc_id      = alicloud_vpc.default.id
   }
   resource "alicloud_security_group_rule" "sg_rule" {
     type              = "ingress"
     ip_protocol       = "tcp"
     nic_type          = "intranet"
     policy            = "accept"
     port_range        = var.port_range
     priority          = 1
     security_group_id = alicloud_security_group.sg.id
     cidr_ip           = var.cidr_ip
   }
   # 應用配置
   resource "alicloud_sae_application" "manual" {
     app_name          = var.app_name
     app_description   = var.app_description
     deploy            = true
     image_url         = var.image_url
     namespace_id      = alicloud_sae_namespace.default.id
     vswitch_id        = alicloud_vswitch.default.id
     vpc_id            = alicloud_vpc.default.id
     security_group_id = alicloud_security_group.sg.id
     package_type      = var.package_type
     timezone          = "Asia/Beijing"
     replicas          = var.replicas
     cpu               = var.cpu
     memory            = var.memory
   }
   # SLB配置
   resource "alicloud_slb_load_balancer" "slb" {
     load_balancer_name = "prod"
     address_type       = "internet"
     load_balancer_spec = "slb.s2.small"
     vswitch_id         = alicloud_vswitch.default.id
   }
   resource "alicloud_sae_load_balancer_internet" "example" {
     app_id          = alicloud_sae_application.manual.id
     internet_slb_id = alicloud_slb_load_balancer.slb.id
     internet {
       protocol    = "HTTP"
       port        = var.port
       target_port = 80
     }
   }
   # 其他變數定義
   variable "namespace_description" {
     description = "Namespace Description"
     default     = "a namespace"
   }
   variable "name" {
     default     = "tf"
     description = "The name of the security group rule"
     type        = string
   }
   variable "description" {
     default     = "The description of the security group rule"
     description = "The description of the security group rule"
     type        = string
   }
   variable "port_range" {
     default     = "1/65535"
     description = "The port range of the security group rule"
     type        = string
   }
   variable "cidr_ip" {
     description = "cidr blocks used to create a new security group rule"
     type        = string
     default     = "0.0.0.0/0"
   }
   variable "zone_id" {
     description = "Availability Zone ID"
     type        = string
     default     = "cn-shenzhen-a"
   }
   variable "app_description" {
     default     = "description created by Terraform"
     description = "The description of the application"
     type        = string
   }
   variable "package_type" {
     default     = "Image"
     description = "The package type of the application"
     type        = string
   }
   variable "cpu" {
     default     = "500"
     description = "The cpu of the application, in unit of millicore"
     type        = string
   }
   variable "memory" {
     default     = "1024"
     description = "The memory of the application, in unit of MB"
     type        = string
   }
   variable "replicas" {
     default     = "1"
     description = "The replicas of the application"
     type        = string
   }
   variable "port" {
     description = "The port of SLB"
     type        = string
     default     = "8000"
   }
   # 輸出
   output "namespace_id" {
     value       = var.namespace_id
     description = "Namespace ID"
   }
   output "app_id" {
     description = "The id of the application"
     value       = alicloud_sae_application.manual.id
   }
   output "app_name" {
     description = "The name of the application"
     value       = var.app_name
   }
   output "endpoint" {
     value = format("http://%s:%s", alicloud_slb_load_balancer.slb.address, var.port)
   }

4. 執行以下命令，初始化配置。

   terraform init

5. 預期結果：

   Terraform has been successfully initialized!
   You may now begin working with Terraform. Try running "terraform plan" to see
   any changes that are required for your infrastructure. All Terraform commands
   should now work.
   If you ever set or change modules or backend configuration for Terraform,
   rerun this command to reinitialize your working directory. If you forget, other
   commands will detect it and remind you to do so if necessary.

6. 依次執行以下命令，建立應用。

   1. 執行以下命令，部署應用。在執行過程中，根據提示輸入yes並按下Enter鍵，等待命令執行完成，若出現以下資訊，則表示授權完成。

      terraform apply

      預期結果：

      Apply complete! Resources: 4 added, 0 changed, 0 destroyed.
      Outputs:
      app_id = "8abb794f-a47b-474b-b6f5-2xxx"
      app_name = "app-s1b"
      endpoint = "http://8.xxx.xxx:8000"
      namespace_id = "cn-shenzhen:demo"

   已成功建立綁定了SLB的應用app-slb，並輸出了SLB的IP地址和連接埠。

7. 驗證結果：

   執行terraform show命令

   您可以使用以下命令查詢Terraform已建立的資來源詳細資料：

   terraform show

   # alicloud_sae_application.manual:
   resource "alicloud_sae_application" "manual" {
       app_description            = "description created by Terraform"
       app_name                   = "app-slb"
       batch_wait_time            = 10
       command_args_v2            = []
       config_map_mount_desc      = jsonencode([])
       cpu                        = 500
       custom_host_alias          = jsonencode([])
       deploy                     = true
       enable_ahas                = "false"
       enable_grey_tag_route      = false
       envs                       = jsonencode([])
       id                         = "8abb794f-a47b-474b-bxxx51"
       image_url                  = "registry.cn-hangzhou.aliyuncs.com/google_containers/nginx-slim:0.9"
       memory                     = 1024
       min_ready_instance_ratio   = -1
       min_ready_instances        = -1
       namespace_id               = "cn-shenzhen:demo"
       package_type               = "Image"
       package_version            = "1732255950"
       replicas                   = 1
       security_group_id          = "sg-xxx"
       status                     = "RUNNING"
       termination_grace_period_seconds = 30
       vpc_id                     = "vpc-xxx"
       vswitch_id                 = "vsw-xxx"
   }
   
   # alicloud_sae_load_balancer_internet.manual:
   resource "alicloud_sae_load_balancer_internet" "manual" {
       app_id          = "8abb794f-a47b-474b-bxxx51"
       id              = "8abb794f-a47b-474b-bxxx51"
       internet_ip     = "8.xxx.xxx"
       internet_slb_id = "lb-xxx"
   
       internet {
           port        = 8000
           protocol    = "TCP"
           target_port = 80
       }
   }
       termination_grace_period_seconds = 30
       timezone                   = "Asia/Beijing"
       vpc_id                     = "vpc-xxx"
       vswitch_id                 = "vsw-xxx"
   }
   # alicloud_sae_load_balancer_internet.example:
   resource "alicloud_sae_load_balancer_internet" "example" {
       app_id         = "xxx"
       id             = "xxx"
       internet_ip    = "xxx"
       internet_slb_id = "lb-wz98ts8jnxxx"
   }

   瀏覽器訪問截圖

   在瀏覽器中輸入SLB的IP地址和連接埠，例如http://121.43.XXX.XX:8000，斷行符號進入應用首頁。在瀏覽器中訪問伺服器的 8000 連接埠，頁面顯示 Nginx 預設歡迎頁面 Welcome to nginx!，表明 Nginx 已成功安裝並正常運行。

解除綁定SLB並刪除應用

本樣本以在華南1（深圳）地區下的應用app-slb為例，介紹如何解除綁定SLB並刪除應用。

1. 在目標專案目錄內執行以下命令，回合組態檔案。

   terraform destroy

2. 預期結果：

   Destroy complete! Resources: 8 destroyed.

   已成功解除綁定SLB並刪除應用app-slb。

相關文檔

• Terrafrom介紹，請參見瞭解阿里雲Terraform。