Terraform でAzure 仮想マシンのカスタムデータを使い、Web サーバーを導入した状態の仮想マシンを作成する

<省略>
locals {
  custom_data = <<EOF
<ここに実行するコマンドを設定>
EOF
}

resource "azurerm_linux_virtual_machine" "vm" {  <省略>
  custom_data    = base64encode(local.custom_data)
  <省略>  }}

terraform {  required_providers {    azurerm = {      source  = "hashicorp/azurerm"      version = "~> 3.0.2"    }  }
  required_version = ">= 1.6.0"}
provider "azurerm" {  features {}}
カスタムデータ用のローカル変数を定義
locals {  custom_data = <<EOF#!/bin/bashapt updateapt install -y apache2EOF}
リソースグループを作成
resource "azurerm_resource_group" "rg" {  name     = "createvmdemo-rg"  location = "japaneast"}
仮想ネットワークを作成
resource "azurerm_virtual_network" "vnet" {  name                = "createvmdemo-vnet"  address_space       = ["10.0.0.0/16"]  location            = azurerm_resource_group.rg.location  resource_group_name = azurerm_resource_group.rg.name}
仮想ネットワーク内にサブネットを作成
resource "azurerm_subnet" "snet" {  name                 = "createvmdemo-snet"  resource_group_name  = azurerm_resource_group.rg.name  virtual_network_name = azurerm_virtual_network.vnet.name  address_prefixes     = ["10.0.1.0/24"]}
ネットワークセキュリティグループを作成
resource "azurerm_network_security_group" "nsg" {  name                = "createvmdemo-nsg"  location            = azurerm_resource_group.rg.location  resource_group_name = azurerm_resource_group.rg.name
80番ポートを許可するセキュリティルールを作成
  security_rule {    name                       = "allow-http-nsgsr"    priority                   = 100    direction                  = "Inbound"    access                     = "Allow"    protocol                   = "Tcp"    source_port_range          = ""    destination_port_range     = "80"    source_address_prefix      = ""    destination_address_prefix = "*"  }
22番ポートを許可するセキュリティルールを作成
今回はデモ用のため22番ポートは全てのIPアドレスを許可している
  security_rule {    name                       = "allow-ssh-nsgsr"    priority                   = 200    direction                  = "Inbound"    access                     = "Allow"    protocol                   = "Tcp"    source_port_range          = ""    destination_port_range     = "22"    source_address_prefix      = ""    destination_address_prefix = "*"  }}
ネットワークセキュリティグループをサブネットに関連付け
resource "azurerm_subnet_network_security_group_association" "nsgassociate" {  subnet_id                 = azurerm_subnet.snet.id  network_security_group_id = azurerm_network_security_group.nsg.id}
パブリックIPアドレスを作成
resource "azurerm_public_ip" "pip" {  name                    = "createvmdemo-pip"  location                = azurerm_resource_group.rg.location  resource_group_name     = azurerm_resource_group.rg.name  allocation_method       = "Static"  idle_timeout_in_minutes = 30  sku                     = "Standard"}
仮想ネットワークインターフェースを作成
resource "azurerm_network_interface" "nic" {  name                = "createvmdemo-nic"  location            = azurerm_resource_group.rg.location  resource_group_name = azurerm_resource_group.rg.name
仮想ネットワークインターフェースにパブリックIPアドレスを関連付ける
  ip_configuration {    name                          = "global"    subnet_id                     = azurerm_subnet.snet.id    public_ip_address_id          = azurerm_public_ip.pip.id    private_ip_address_allocation = "Dynamic"  }}
仮想マシンを作成
SSH用の公開鍵が存在しないとエラーとなるため事前に作成すること
resource "azurerm_linux_virtual_machine" "vm" {  name                = "createvmdemo-vm"  resource_group_name = azurerm_resource_group.rg.name  location            = azurerm_resource_group.rg.location  size                = "Standard_B1s"  admin_username      = "createvmdemouser"  network_interface_ids = [    azurerm_network_interface.nic.id,  ]
  source_image_reference {    publisher = "Canonical"    offer     = "0001-com-ubuntu-server-jammy"    sku       = "22_04-lts"    version   = "latest"  }
  admin_ssh_key {    username   = "createvmdemouser"    public_key = file("~/.ssh/id_rsa.pub")  }
  os_disk {    name                 = "createvmdemo-osdisk"    disk_size_gb         = 128    caching              = "ReadWrite"    storage_account_type = "Standard_LRS"  }
  custom_data    = base64encode(local.custom_data)}

# Terraformファイルの構文チェックをする
「Success! The configuration is valid.」と表示されればOK
terraform validate
Terraformで作成されるAzureリソースを確認する
terraform plan
リソースを承認する
terraform apply

# Terraformで作成したAzureリソースを削除するterraform destroy