Azure Terraform（十）利用 Azure DevOps 的條件語句選擇釋出環境

一，引言

　　之前我講過的所有的案例中，都是將整個Azure Resource 部署到同一個訂閱下，沒有做到靈活的在 Azure Pipeline 在執行前選擇需要部署的環境。在實際的專案開發中，我們也會遇到將這些基礎設施資源驗證完成後，分別部署到 DEV,UAT,PRD 等多個環境 。那麼我們就帶著個整個問題開始今天的分析。

-------------------- 我是分割線 --------------------

--------------------Azure Terraform 系列--------------------

1，Azure Terraform（一）入門簡介

2，Azure Terraform（二）語法詳解

3，Azure Terraform（三）部署 Web 應用程式

4，Azure Terraform（四）狀態檔案儲存

5，Azure Terraform（五）利用Azure DevOps 實現自動化部署基礎資源

6，Azure Terraform（六）Common Module

7，Azure Terraform（七）利用Azure DevOps 實現自動化部署基礎資源（補充）

8，Azure Terraform（八）利用Azure DevOps 實現Infra資源和.NET CORE Web 應用程式的持續整合、持續部署

9，Azure Terraform（九）利用 Azure DevOps Pipeline 的審批來控制流程釋出

10，Azure Terraform（十）利用 Azure DevOps 的條件語句選擇釋出環境

二，正文

1，Azure DevOps Pipeline 中的條件語句

首先我們需要先定義引數，以便在 Pipeline 執行的時候進行選擇哪個環境

parameters:
  - name: deployEnv
    displayName: Select a Deployment Environment???
    type: string
    default: 'dev'
    values:
    - dev
    - uat
    - prd

接下來設定條件語句的變數的值可以根據 “deployEnv” 的值變化

variables:
  - name: tf_version
    value: 'latest'
  - name: env_name
    ${{ if eq(parameters['deployEnv'],'dev') }}:
      value: 'dev'
    ${{elseif eq(parameters['DeployEnv'],'uat') }}:
      value: 'uat'
    ${{elseif eq(parameters['DeployEnv'],'prd') }}:
      value: 'prd'

以上兩段程式碼我們不難看出，veriables.env_name 的值取決於 parameters.deployEnv 的值，再經過條件語句的過濾，重新賦值

複製以上兩段程式碼到 azure-pipelines.yml 中

azure-pipeline.yml 完整程式碼

# Starter pipeline
# Start with a minimal pipeline that you can customize to build and deploy your code.
# Add steps that build, run tests, deploy, and more:
# https://aka.ms/yaml

trigger:
- remote_stats

pool:
  vmImage: ubuntu-latest

parameters:
  - name: deployEnv
    displayName: Selecting a Deployment Environment???
    type: string
    default: 'dev'
    values:
    - dev
    - uat
    - prd
  
variables:
  - name: tf_version
    value: 'latest'
  - name: env_name
    ${{ if eq(parameters['deployEnv'],'dev') }}:
      value: 'dev'
    ${{elseif eq(parameters['DeployEnv'],'uat') }}:
      value: 'uat'
    ${{elseif eq(parameters['DeployEnv'],'prd') }}:
      value: 'prd'

stages:
- stage: script
  jobs:
   - job: azure_cli_script
     steps: 
      - task: AzureCLI@2
        displayName: 'Azure CLI :Create Storage Account，Key Vault And Set KeyVault Secret'
        inputs:
          azureSubscription: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
          scriptType: 'bash'
          scriptLocation: 'inlineScript'
          inlineScript: |
              # create azure resource group
              az group create --location eastasia --name $(terraform_rg)
      
              # create azure storage account
              az storage account create --name $(storage_account) --resource-group $(terraform_rg) --location eastasia --sku Standard_LRS
      
              # create storage account container for tf state 
              az storage container create --name $(storage_account_container) --account-name $(storage_account)
      
              # query storage key and set variable
              ACCOUNT_KEY=$(az storage account keys list --resource-group $(terraform_rg) --account-name $(storage_account) --query "[?keyName == 'key1'][value]" --output tsv)
      
              # create azure keyvault
              az keyvault create --name $(keyvault) --resource-group $(terraform_rg) --location eastasia --enable-soft-delete false
      
              # set keyvault secret,secret value is ACCOUNT_KEY
              az keyvault secret set --name $(keyvault_sc) --vault-name $(keyvault)  --value $ACCOUNT_KEY
       
      - task: AzureKeyVault@2
        displayName: 'Azure Key Vault :Get Storage Access Secret'
        inputs:
          azureSubscription: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
          KeyVaultName: '$(keyvault)'
          SecretsFilter: 'terraform-stste-storage-key'
          RunAsPreJob: false

- stage: terraform_validate
  jobs:
  - job: terraform_validate
    steps:
    - task: TerraformInstaller@0
      inputs:
        terraformVersion: ${{variables.tf_version}}
    - task: TerraformTaskV2@2
      displayName: 'terraform init'
      inputs:
        provider: 'azurerm'
        command: 'init'
        # commandOptions: '-backend-config="access_key=$(terraform-stste-storage-key)"'
        backendServiceArm: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
        backendAzureRmResourceGroupName: $(terraform_rg)
        backendAzureRmStorageAccountName: $(storage_account)
        backendAzureRmContainerName: $(storage_account_container)
        backendAzureRmKey: $(container_key)
        workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
    - task: TerraformTaskV2@2
      inputs:
        provider: 'azurerm'
        command: 'validate'
        workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'

- stage: terraform_plan
  dependsOn: [terraform_validate]
  condition: succeeded('terraform_validate')
  jobs:
    - job: terraform_plan
      steps:
        - task: TerraformInstaller@0
          inputs:
            terraformVersion: ${{ variables.tf_version }}
        - task: TerraformTaskV2@2
          displayName: 'terraform init'
          inputs:
            provider: 'azurerm'
            command: 'init'
            # commandOptions: '-backend-config="access_key=$(terraform-stste-storage-key)"'
            backendServiceArm: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
            backendAzureRmResourceGroupName: $(terraform_rg)
            backendAzureRmStorageAccountName: $(storage_account)
            backendAzureRmContainerName: $(storage_account_container)
            backendAzureRmKey: $(container_key)
            workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
        - task: TerraformTaskV2@2
          inputs:
            provider: 'azurerm'
            command: 'plan'
            environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
            workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'

- stage: terraform_apply
  dependsOn: [terraform_plan]
  condition: succeeded('terraform_plan')
  jobs:
    - deployment: terraform_apply
      continueOnError: false
      environment: 'Approve_Production'
      timeoutInMinutes: 120
      strategy:
       runOnce:
        deploy:
          steps:
            - checkout: self
            - task: TerraformInstaller@0
              inputs:
                terraformVersion: ${{ variables.tf_version }}
            - task: TerraformTaskV2@2
              displayName: 'terraform init'
              inputs:
                provider: 'azurerm'
                command: 'init'
                # commandOptions: '-backend-config="access_key=$(terraform-stste-storage-key)"'
                backendServiceArm: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
                backendAzureRmResourceGroupName: $(terraform_rg)
                backendAzureRmStorageAccountName: $(storage_account)
                backendAzureRmContainerName: $(storage_account_container)
                backendAzureRmKey: $(container_key)
                workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
            - task: TerraformTaskV2@2
              inputs:
                provider: 'azurerm'
                command: 'plan'
                environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
                workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
            - task: TerraformTaskV2@2
              inputs:
                provider: 'azurerm'
                command: 'apply'
                commandOptions: '-auto-approve'
                environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
                workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'

# - stage: terraform_apply
#   dependsOn: [terraform_plan]
#   condition: succeeded('terraform_plan')
#   jobs:
#     - job: terraform_apply
#       steps:
#         - task: TerraformInstaller@0
#           inputs:
#             terraformVersion: ${{ variables.tf_version }}
#         - task: TerraformTaskV2@2
#           displayName: 'terraform init'
#           inputs:
#             provider: 'azurerm'
#             command: 'init'
#             # commandOptions: '-backend-config="access_key=$(terraform-stste-storage-key)"'
#             backendServiceArm: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
#             backendAzureRmResourceGroupName: $(terraform_rg)
#             backendAzureRmStorageAccountName: $(storage_account)
#             backendAzureRmContainerName: $(storage_account_container)
#             backendAzureRmKey: $(container_key)
#             workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
#         - task: TerraformTaskV2@2
#           inputs:
#             provider: 'azurerm'
#             command: 'plan'
#             environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
#             workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
#         - task: TerraformTaskV2@2
#           inputs:
#             provider: 'azurerm'
#             command: 'apply'
#             commandOptions: '-auto-approve'
#             environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
#             workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'

- stage: terraform_destroy
  dependsOn: [terraform_apply]
  condition: succeeded('terraform_apply')
  jobs:
    - job: terraform_destroy
      steps:
        - task: TerraformInstaller@0
          inputs:
            terraformVersion: ${{ variables.tf_version }}
        - task: TerraformTaskV2@2
          displayName: 'terraform init'
          inputs:
            provider: 'azurerm'
            command: 'init'
            # commandOptions: '-backend-config="access_key=$(terraform-stste-storage-key)"'
            backendServiceArm: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
            backendAzureRmResourceGroupName: $(terraform_rg)
            backendAzureRmStorageAccountName: $(storage_account)
            backendAzureRmContainerName: $(storage_account_container)
            backendAzureRmKey: $(container_key)
            workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
        - task: TerraformTaskV2@2
          inputs:
            provider: 'azurerm'
            command: 'plan'
            environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
            workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'
        - task: TerraformTaskV2@2
          inputs:
            provider: 'azurerm'
            command: 'destroy'
            commandOptions: '-auto-approve'
            environmentServiceNameAzureRM: 'Microsoft Azure Subscription(xxxx-xxx-xxx-xxxx)'
            workingDirectory: '$(System.DefaultWorkingDirectory)/src/model/'

2，Azure Pipeline 條件語句執行效果

儲存完 yml 檔案後，點選 ”Run“，手動觸發 Pipeline 管道

可以看到除了預設 Run pipeline 的預設分支，還需要選擇我們自定義的 Parameters-----"deployEnv"

bingo !!  我們的目的已經達到了。通過這種條件語句的判定，我們就可以做一些部署變數的替換，從而達到部署不同環境的目的了。

三，結尾

　　以上內容，大家多做做練習。下一篇，我們繼續介紹多環境部署Azure Pipeline

參考資料：Terraform 官方，Azure Pipeline 文件

Terraform_Cnbate_Traffic_Manager github Address：https://github.com/yunqian44/Terraform_Cnbate_Traffic_Manager

歡迎大家關注博主的部落格：https://allenmasters.com/

作者：Allen 

版權：轉載請在文章明顯位置註明作者及出處。如發現錯誤，歡迎批評指正。