Terraform でAzure 仮想マシンのカスタムデータを使い、Web サーバーを導入した状態の仮想マシンを作成する

<省略>
locals {
  custom_data = <<EOF
<ここに実行するコマンドを設定>
EOF
}

resource "azurerm_linux_virtual_machine" "vm" {
  <省略>

  custom_data    = base64encode(local.custom_data)

  <省略>
  }
}

terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "~> 3.0.2"
    }
  }

  required_version = ">= 1.6.0"
}

provider "azurerm" {
  features {}
}

# カスタムデータ用のローカル変数を定義
locals {
  custom_data = <<EOF
#!/bin/bash
apt update
apt install -y apache2
EOF
}

# リソースグループを作成
resource "azurerm_resource_group" "rg" {
  name     = "createvmdemo-rg"
  location = "japaneast"
}

# 仮想ネットワークを作成
resource "azurerm_virtual_network" "vnet" {
  name                = "createvmdemo-vnet"
  address_space       = ["10.0.0.0/16"]
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name
}

# 仮想ネットワーク内にサブネットを作成
resource "azurerm_subnet" "snet" {
  name                 = "createvmdemo-snet"
  resource_group_name  = azurerm_resource_group.rg.name
  virtual_network_name = azurerm_virtual_network.vnet.name
  address_prefixes     = ["10.0.1.0/24"]
}

# ネットワークセキュリティグループを作成
resource "azurerm_network_security_group" "nsg" {
  name                = "createvmdemo-nsg"
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name

  # 80番ポートを許可するセキュリティルールを作成
  security_rule {
    name                       = "allow-http-nsgsr"
    priority                   = 100
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "80"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  # 22番ポートを許可するセキュリティルールを作成
  # 今回はデモ用のため22番ポートは全てのIPアドレスを許可している
  security_rule {
    name                       = "allow-ssh-nsgsr"
    priority                   = 200
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "22"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }
}

# ネットワークセキュリティグループをサブネットに関連付け
resource "azurerm_subnet_network_security_group_association" "nsgassociate" {
  subnet_id                 = azurerm_subnet.snet.id
  network_security_group_id = azurerm_network_security_group.nsg.id
}

# パブリックIPアドレスを作成
resource "azurerm_public_ip" "pip" {
  name                    = "createvmdemo-pip"
  location                = azurerm_resource_group.rg.location
  resource_group_name     = azurerm_resource_group.rg.name
  allocation_method       = "Static"
  idle_timeout_in_minutes = 30
  sku                     = "Standard"
}

# 仮想ネットワークインターフェースを作成
resource "azurerm_network_interface" "nic" {
  name                = "createvmdemo-nic"
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name

  # 仮想ネットワークインターフェースにパブリックIPアドレスを関連付ける
  ip_configuration {
    name                          = "global"
    subnet_id                     = azurerm_subnet.snet.id
    public_ip_address_id          = azurerm_public_ip.pip.id
    private_ip_address_allocation = "Dynamic"
  }
}

# 仮想マシンを作成
# SSH用の公開鍵が存在しないとエラーとなるため事前に作成すること
resource "azurerm_linux_virtual_machine" "vm" {
  name                = "createvmdemo-vm"
  resource_group_name = azurerm_resource_group.rg.name
  location            = azurerm_resource_group.rg.location
  size                = "Standard_B1s"
  admin_username      = "createvmdemouser"
  network_interface_ids = [
    azurerm_network_interface.nic.id,
  ]

  source_image_reference {
    publisher = "Canonical"
    offer     = "0001-com-ubuntu-server-jammy"
    sku       = "22_04-lts"
    version   = "latest"
  }

  admin_ssh_key {
    username   = "createvmdemouser"
    public_key = file("~/.ssh/id_rsa.pub")
  }

  os_disk {
    name                 = "createvmdemo-osdisk" 
    disk_size_gb         = 128
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }
  
  custom_data    = base64encode(local.custom_data)
}

# Terraformファイルの構文チェックをする
# 「Success! The configuration is valid.」と表示されればOK
terraform validate

# Terraformで作成されるAzureリソースを確認する
terraform plan

# リソースを承認する
terraform apply

# Terraformで作成したAzureリソースを削除する
terraform destroy