Colima × DockerでAWSリソースがデプロイできるTerraformコンテナを立ててみた（実践あり）

			
			brew install docker

		

			
			brew install colima

		

			
			colima start

		

			
			colima status

		

			
			INFO[0000] colima is running using macOS Virtualization.Framework 
INFO[0000] arch: aarch64                                
INFO[0000] runtime: docker                              
INFO[0000] mountType: virtiofs                          
INFO[0000] docker socket: unix:///Users/username/.colima/default/docker.sock 
INFO[0000] containerd socket: unix:///Users/username/.colima/default/containerd.sock

		

			
			FROM hashicorp/terraform:1.13

WORKDIR /terraform-runner

# 必要なパッケージのインストール
RUN apk update && \
    apk add --no-cache \
    aws-cli

		

			
			mkdir -p ~/.docker/cli-plugins
curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-darwin-aarch64 -o ~/.docker/cli-plugins/docker-compose
chmod +x ~/.docker/cli-plugins/docker-compose

		

			
			docker compose build

		

			
			docker compose up -d

		

			
			>Dev Containers: Open Folder in Container...

		

			
			aws configure --profile colima-docker-terraform

		

			
			{
    "Version": "2012-10-17",
    "Statement": [
	    {
		    "Sid": "VisualEditor0",
		    "Effect": "Allow",
		    "Action": [
			    "dynamodb:DeleteItem",
			    "dynamodb:DescribeTable",
			    "dynamodb:GetItem",
			    "dynamodb:PutItem"
		    ],
		    "Resource": [
			    "*"
		    ]
	    },
	    {
		    "Sid": "VisualEditor1",
		    "Effect": "Allow",
		    "Action": [
			    "ec2:AuthorizeSecurityGroupEgress",
			    "ec2:AuthorizeSecurityGroupIngress",
			    "ec2:CreateTags",
			    "ec2:CreateVPC",
			    "ec2:DeleteTags",
			    "ec2:DeleteVPC",
			    "ec2:DescribeAccountAttributes",
			    "ec2:DescribeNetworkAcls",
			    "ec2:DescribeSecurityGroups",
			    "ec2:DescribeVpcAttribute",
			    "ec2:DescribeVpcs",
			    "ec2:ModifyVpcAttribute",
			    "ec2:ModifyVpcTenancy",
			    "ec2:RevokeSecurityGroupEgress",
			    "ec2:RevokeSecurityGroupIngress",
			    "ec2:DescribeSecurityGroupRules"
		    ],
		    "Resource": [
			    "*"
		    ]
	    },
	    {
		    "Sid": "VisualEditor2",
		    "Effect": "Allow",
		    "Action": [
			    "s3:DeleteObject",
			    "s3:GetObject",
			    "s3:ListBucket",
			    "s3:PutObject"
		    ],
		    "Resource": [
			    "*"
		    ]
	    }
    ]
}

		

			
			# 実行するtfファイルのあるディレクトリに移動
cd /terraform-runner/environments/dev

# terraformコマンドを実行する
terraform init

# 作成されるリソースがVPCとデフォルトのセキュリティグループ(ルールが空）の2つであることを確認してください。
terraform plan

# planの内容で作成して問題なければ、yes を入力しましょう！
terraform apply

		

			
			Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with
the following symbols:
  + create

Terraform will perform the following actions:

  # aws_default_security_group.default will be created
  + resource "aws_default_security_group" "default" {
    + arn                    = (known after apply)
    + description            = (known after apply)
    + egress                 = (known after apply)
    + ingress                = (known after apply)
    + owner_id               = (known after apply)
    + region                 = "ap-northeast-1"
    + revoke_rules_on_delete = false
    + tags                   = {
        + "Name" = "colima-docker-terraform-dev-vpc-default-security-group"
      }
    + tags_all               = {
        + "Name" = "colima-docker-terraform-dev-vpc-default-security-group"
      }
    + vpc_id                 = (known after apply)
  }

  # aws_vpc.main will be created
  + resource "aws_vpc" "main" {
    + arn                                  = (known after apply)
    + cidr_block                           = "10.0.0.0/16"
    + default_network_acl_id               = (known after apply)
    + default_route_table_id               = (known after apply)
    + default_security_group_id            = (known after apply)
    + dhcp_options_id                      = (known after apply)
    + enable_dns_hostnames                 = (known after apply)
    + enable_dns_support                   = true
    + enable_network_address_usage_metrics = (known after apply)
    + id                                   = (known after apply)
    + instance_tenancy                     = "default"
    + ipv6_association_id                  = (known after apply)
    + ipv6_cidr_block                      = (known after apply)
    + ipv6_cidr_block_network_border_group = (known after apply)
    + main_route_table_id                  = (known after apply)
    + owner_id                             = (known after apply)
    + region                               = "ap-northeast-1"
    + tags                                 = {
        + "Name" = "colima-docker-terraform-dev-vpc"
      }
    + tags_all                             = {
        + "Name" = "colima-docker-terraform-dev-vpc"
      }
  }

Plan: 2 to add, 0 to change, 0 to destroy.

		

			
			# 削除されるリソースがVPCとデフォルトのセキュリティグループ(ルールが空）の2つであることを確認してください。
terraform destroy