Terrain¶

generieren

Umfassende Terraform-Befehle und Workflows für Infrastruktur als Code (IaC), einschließlich Ressourcenmanagement, staatliche Operationen und Multi-Cloud-Einsätze.

Installation und Inbetriebnahme¶

Command	Description
`terraform version`	Show Terraform version
`terraform -help`	Show help information
`terraform -help plan`	Show help for specific command

Kern-Workflow¶

Grundgeschäfte¶

Command	Description
`terraform init`	Initialize working directory
`terraform plan`	Create execution plan
`terraform apply`	Apply changes
`terraform destroy`	Destroy infrastructure
`terraform validate`	Validate configuration
`terraform fmt`	Format configuration files

Zukunftsplanung¶

Command	Description
`terraform plan -out=tfplan`	Save plan to file
`terraform apply tfplan`	Apply saved plan
`terraform plan -target=resource.name`	Plan specific resource
`terraform plan -var="key=value"`	Plan with variables
`terraform plan -var-file="vars.tfvars"`	Plan with variable file

Staatliche Verwaltung¶

Staatliche Operationen¶

Command	Description
`terraform state list`	List resources in state
`terraform state show resource.name`	Show resource details
`terraform state mv old_name new_name`	Move resource in state
`terraform state rm resource.name`	Remove resource from state
`terraform state pull`	Download remote state
`terraform state push`	Upload state to remote

State Backup und Recovery¶

Command	Description
`terraform state backup`	Create state backup
`terraform force-unlock LOCK_ID`	Force unlock state
`terraform refresh`	Update state with real resources

Arbeitsräume¶

Command	Description
`terraform workspace list`	List workspaces
`terraform workspace new dev`	Create new workspace
`terraform workspace select dev`	Switch to workspace
`terraform workspace delete dev`	Delete workspace
`terraform workspace show`	Show current workspace

Import und Output¶

Einnahmen¶

Command	Description
`terraform import resource.name id`	Import existing resource
`terraform import aws_instance.example i-1234567890abcdef0`	Import AWS instance

Ausgänge¶

Command	Description
`terraform output`	Show all outputs
`terraform output instance_ip`	Show specific output
`terraform output -json`	Show outputs in JSON

Konfigurationsbeispiele¶

Grundlegende AWS EC2¶

provider "aws" \\\\{
  region = "us-west-2"
\\\\}

resource "aws_instance" "example" \\\\{
  ami           = "ami-0c55b159cbfafe1d0"
  instance_type = "t2.micro"

  tags = \\\\{
    Name = "example-instance"
  \\\\}
\\\\}

output "instance_ip" \\\\{
  value = aws_instance.example.public_ip
\\\\}
```_

### Variablen
```hcl
variable "instance_type" \\\\{
  description = "EC2 instance type"
  type        = string
  default     = "t2.micro"
\\\\}

variable "environment" \\\\{
  description = "Environment name"
  type        = string
\\\\}
```_

### Datenquellen
```hcl
data "aws_ami" "ubuntu" \\\\{
  most_recent = true
  owners      = ["099720109477"] # Canonical

  filter \\\\{
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
  \\\\}
\\\\}
```_

### Module
```hcl
module "vpc" \\\\{
  source = "terraform-aws-modules/vpc/aws"

  name = "my-vpc"
  cidr = "10.0.0.0/16"

  azs             = ["us-west-2a", "us-west-2b"]
  private_subnets = ["10.0.1.0/24", "10.0.2.0/24"]
  public_subnets  = ["10.0.101.0/24", "10.0.102.0/24"]

  enable_nat_gateway = true
  enable_vpn_gateway = true
\\\\}
```_

## Remote State Configuration

### S3 Backend
```hcl
terraform \\\\{
  backend "s3" \\\\{
    bucket = "my-terraform-state"
    key    = "state/terraform.tfstate"
    region = "us-west-2"
  \\\\}
\\\\}
```_

### Azure Backend
```hcl
terraform \\\\{
  backend "azurerm" \\\\{
    resource_group_name  = "tfstate"
    storage_account_name = "tfstate"
    container_name       = "tfstate"
    key                  = "prod.terraform.tfstate"
  \\\\}
\\\\}
```_

### Google Cloud Backend
```hcl
terraform \\\\{
  backend "gcs" \\\\{
    bucket = "tf-state-bucket"
    prefix = "terraform/state"
  \\\\}
\\\\}
```_

## Konfiguration des Anbieters

### AWS Provider
```hcl
provider "aws" \\\\{
  region  = "us-west-2"
  profile = "default"

  default_tags \\\\{
    tags = \\\\{
      Environment = "production"
      Project     = "my-project"
    \\\\}
  \\\\}
\\\\}
```_

### Azure Provider
```hcl
provider "azurerm" \\\\{
  features \\\\{\\\\}

  subscription_id = "00000000-0000-0000-0000-000000000000"
  tenant_id       = "00000000-0000-0000-0000-000000000000"
\\\\}
```_

### Google Cloud Provider
```hcl
provider "google" \\\\{
  project = "my-project-id"
  region  = "us-central1"
  zone    = "us-central1-c"
\\\\}
```_

## Erweiterte Funktionen

### Bedingte Ressourcen
```hcl
resource "aws_instance" "example" \\\\{
  count = var.create_instance ? 1 : 0

  ami           = data.aws_ami.ubuntu.id
  instance_type = var.instance_type
\\\\}
```_

### Für jeden
```hcl
resource "aws_instance" "example" \\\\{
  for_each = toset(var.instance_names)

  ami           = data.aws_ami.ubuntu.id
  instance_type = var.instance_type

  tags = \\\\{
    Name = each.key
  \\\\}
\\\\}
```_

### Dynamische Blöcke
```hcl
resource "aws_security_group" "example" \\\\{
  name = "example"

  dynamic "ingress" \\\\{
    for_each = var.ingress_rules
    content \\\\{
      from_port   = ingress.value.from_port
      to_port     = ingress.value.to_port
      protocol    = ingress.value.protocol
      cidr_blocks = ingress.value.cidr_blocks
    \\\\}
  \\\\}
\\\\}
```_

## Prüfung und Validierung

### Terraform Gültig
|Command|Description|
|---------|-------------|
|`terraform validate`|Validate syntax|
|`terraform validate -json`|Validate with JSON output|

### Terraform Plan Analyse
|Command|Description|
|---------|-------------|
|`terraform plan -detailed-exitcode`|Plan with detailed exit codes|
|`terraform show`|Show current state|
|`terraform show -json`|Show state in JSON|

### Tools von Drittanbietern
|Command|Description|
|---------|-------------|
|`tflint`|Terraform linter|
|`terraform-docs`|Generate documentation|
|`checkov -f main.tf`|Security scanning|
|`tfsec .`|Security analysis|

## Debugging und Fehlerbehebung

### Protokoll
|Command|Description|
|---------|-------------|
|`TF_LOG=DEBUG terraform plan`|Enable debug logging|
|`TF_LOG=TRACE terraform apply`|Enable trace logging|
|`TF_LOG_PATH=terraform.log terraform plan`|Log to file|

### Gemeinsame Themen
|Command|Description|
|---------|-------------|
|`terraform refresh`|Sync state with reality|
|`terraform taint resource.name`|Mark resource for recreation|
|`terraform untaint resource.name`|Remove taint from resource|

## Best Practices

### Datei-Organisation

project/ ├── main.tf # Main configuration ├── variables.tf # Variable definitions ├── outputs.tf # Output definitions ├── versions.tf # Provider versions ├── terraform.tfvars # Variable values └── modules/ └── vpc/ ├── main.tf ├── variables.tf └── outputs.tf ```_

Ausführungsbeschränkungen¶

```hcl terraform \\{ required_version = ">= 1.0"

required_providers \\{ aws = \\{ source = "hashicorp/aws" version = "~> 5.0" \\} \\} \\} ```_

Resource Naming¶

```hcl resource "aws_instance" "web_server" \\{ # Use descriptive names ami = data.aws_ami.ubuntu.id instance_type = var.instance_type

tags = \\{ Name = "\(\\\\{var.project_name\\\\}-web-\)\\{var.environment\\}" Environment = var.environment Project = var.project_name \\} \\} ```_

Sicherheit Best Practices¶

State Security: Verwenden Sie Remote-Zustand mit Verschlüsselung
**Secrets Management*: Verwenden Sie externe geheime Speicher
Access Control*: Umsetzung richtiger IAM-Politiken
Code Review: Alle Infrastrukturänderungen überprüfen
Scanning: Verwenden Sie Sicherheits-Scan-Tools

Leistungsoptimierung¶

**Parallelismus*: Verwenden -parallelism_ Flagge für große Bereitstellungen
Targeting: Verwendung -target_ für spezifische Ressourcen
State Splitting: Große Staaten in kleinere teilen
Module Design: Design wiederverwendbare Module