Rails on App Runner - マネージドランタイムで動かしてみた編 -

  <<: *default
  host: <%= ENV['DB_HOST'] %>
  database: ruby_on_rails_on_apprunner_sample_production
  username: <%= ENV['DB_USERNAME'] %>
  password: <%= ENV['DB_PASSWORD'] %>
  port: <%= ENV['DB_PORT'] %>

# VPC Connector
resource "aws_security_group" "gotodo_rails_vpc_connector" {
  name        = "${local.project_name}-${local.service_name}-vpc-connector"
  description = "VPC Connector for ${local.service_name}"
  vpc_id      = aws_vpc.rails_apprunner.id

  tags = {
    Name = "${local.project_name}-${local.service_name}-vpc-connector"
  }
}

resource "aws_security_group_rule" "gotodo_rails_vpc_connector_egress_mysql_to_vpc_cidr" {
  description       = "From: VPC Connector for App Runner To: VPC Cidr Block"
  security_group_id = aws_security_group.gotodo_rails_vpc_connector.id
  type              = "egress"
  from_port         = 3306
  to_port           = 3306
  protocol          = "tcp"
  source_security_group_id = aws_security_group.gotodo_rails_rds.id
}

# Aurora MySQL
resource "aws_security_group" "gotodo_rails_rds" {
  name        = "${local.service_name}-rds"
  description = "RDS for ${local.service_name}"
  vpc_id      = aws_vpc.rails_apprunner.id

  tags = {
    Name = "${local.service_name}-rds"
  }
}

resource "aws_security_group_rule" "gotodo_rails_rds_ingress_mysql_from_vpc_gotodo_rails_vpc_connector" {
  description              = "From: VPC Connector for App Runner To: Aurora MySQL"
  security_group_id        = aws_security_group.gotodo_rails_rds.id
  type                     = "ingress"
  from_port                = 3306
  to_port                  = 3306
  protocol                 = "tcp"
  source_security_group_id = aws_security_group.gotodo_rails_vpc_connector.id
}

resource "aws_apprunner_service" "gotodo_rails" {
  service_name = local.service_name

  source_configuration {
    authentication_configuration {
      connection_arn = aws_apprunner_connection.gotodo_rails.arn
    }
    code_repository {
      code_configuration {
        configuration_source = "REPOSITORY"
      }
      repository_url = "https://github.com/kennygt51/gotodo_rails"
      source_code_version {
        type  = "BRANCH"
        value = "main"
      }
    }
  }

  network_configuration {
    ingress_configuration {
      is_publicly_accessible = true
    }

    egress_configuration {
      egress_type       = "VPC"
      vpc_connector_arn = aws_apprunner_vpc_connector.gotodo_rails.arn
    }
  }

  tags = {
    Name = local.service_name
  }
}

# Note: After creation, you must complete the authentication handshake using the App Runner console.
# ref: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apprunner_connection
resource "aws_apprunner_connection" "gotodo_rails" {
  connection_name = local.service_name
  provider_type   = "GITHUB"

  tags = {
    Name = local.service_name
  }
}

# Auroraに接続
mysql -h gotodo-rails-1.XXXX.ap-northeast-1.rds.amazonaws.com -u root -p
# データベース作成
CREATE DATABASE ruby_on_rails_on_apprunner_sample_production;
# ユーザー作成
CREATE USER 'rails_apprunner_sample_user'@'%';
ALTER USER 'rails_apprunner_sample_user'@'%' identified BY 'XXXXXXXX';
# 作成したデータベースに対して、作成した管理ユーザに全権限を付与
GRANT ALL ON ruby_on_rails_on_apprunner_sample_production.* To rails_apprunner_sample_user@'%';

gem 'mysql2', '~> 0.5'

11-30-2022 09:00:56 AM [Build]   mysql2
11-30-2022 09:00:56 AM [Build] In Gemfile:
11-30-2022 09:00:56 AM [Build] An error occurred while installing mysql2 (0.5.4), and Bundler cannot continue.

    build:
      - yum -y install mysql-devel
      - bundle install
      - bundle exec rails assets:precompile

CREATE TABLE `tasks` (
  `id` bigint NOT NULL AUTO_INCREMENT,
  `title` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `created_at` datetime(6) NOT NULL,
  `updated_at` datetime(6) NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=8 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci

version: 1.0
runtime: ruby31
build:
  commands:
    build:
      - yum -y install mysql-devel
      - bundle install
      - bundle exec rails assets:precompile
run:
  command: bundle exec rails server -p 8080
  network:
    port: 8080
  env:
    - name: RAILS_ENV
      value: production
    - name: DB_HOST
      value: XXXX.ap-northeast-1.rds.amazonaws.com
    - name: DB_PORT
      value: 3306
    - name: DB_USERNAME
      value: rails_apprunner_sample_user
    - name: DB_PASSWORD
      value: XXXX
    - name: RAILS_LOG_TO_STDOUT
      value: true
    - name: SECRET_KEY_BASE
      value: XXXX