Infrastructure as Code - Terraformujeme cloud Viliam Pik DevOps - - PowerPoint PPT Presentation

▶
infrastructure as code terraformujeme cloud
SMART_READER_LITE
LIVE PREVIEW

Infrastructure as Code - Terraformujeme cloud Viliam Pik DevOps - - PowerPoint PPT Presentation

Nov 25, 2022 903 likes •1.23k views

Infrastructure as Code - Terraformujeme cloud Viliam Pik DevOps Tech Lead ZOOM International On Premise vs Cloud On Premise Cloud Major Cloud Providers Amazon Google Microsoft Web Cloud Azure Services Platform Complex

slide-1
SLIDE 1

Infrastructure as Code - Terraformujeme cloud

Viliam Púčik DevOps Tech Lead ZOOM International

slide-2
SLIDE 2

On Premise vs Cloud

On Premise

Cloud

slide-3
SLIDE 3

Major Cloud Providers

Google Cloud Platform Amazon Web Services Microsoft Azure

slide-4
SLIDE 4

Complex Infrastructure

slide-5
SLIDE 5

Complex Infrastructure

Development Environment Staging Environment Production Environment

slide-6
SLIDE 6

AWS Web Console

slide-7
SLIDE 7

Infrastructure as Code

slide-8
SLIDE 8

Infrastructure as Code

GCP Cloud Deployment Manager AWS Cloud Formation Azure Resource Manager

HashiCorp Terraform (Open Source)

slide-9
SLIDE 9

Terraform

A tool for building, changing, and versioning infrastructure safely and efficiently. Building blocks:

  • Providers (AWS, GCP, Azure, MySQL, PostgreSQL,

Kubernetes, Helm, GitHub and hundred of others)

  • Resources, Data Sources (read-only)
  • Input, Local and Output variables
  • Expressions and Functions

https://www.terraform.io/

slide-10
SLIDE 10

Terraform State

Terraform

Code

Cloud

State

slide-11
SLIDE 11

Let's Demo

slide-12
SLIDE 12

Actual Demo :)

slide-13
SLIDE 13

Terraform Meta Arguments

  • depends_on - for specifying hidden dependencies
  • count - for creating multiple resource instances according

to a count

  • for_each - to create multiple instances according to a map
  • or set of strings
  • provider - for selecting a non-default provider configuration
  • lifecycle - for lifecycle customizations
  • provisioner and connection - for taking extra actions after

resource creation

slide-14
SLIDE 14

depends_on

resource "aws_instance" "bastion" { vpc_security_group_ids = [ aws_security_group.bastion.id, ] depends_on = [ aws_instance.web, ] }

slide-15
SLIDE 15

count

resource "aws_instance" "bastion" { count = 10 }

slide-16
SLIDE 16

count

variable "web_enabled" { type = bool default = false } resource "aws_instance" "web" { count = var.web_enabled == true ? 1 : 0 }

slide-17
SLIDE 17

for_each

variable "users" { type = list(string) default = ["admin", "developer", "manager"] } resource "aws_iam_user" "user" { for_each = toset(var.users) name = each.key }

slide-18
SLIDE 18

provider

provider "aws" {} provider "aws" { alias = "staging" } resource "aws_instance" "web" { provider = aws.staging }

slide-19
SLIDE 19

lifecycle

resource "aws_instance" "web" { lifecycle { create_before_destroy = true ignore_changes = [tags] } }

slide-20
SLIDE 20

lifecycle

resource "aws_instance" "web" { lifecycle { prevent_destroy = true } }

slide-21
SLIDE 21

provisioner

resource "null_resource" "id_rsa" { provisioner "local-exec" { working_dir = path.module command = "ssh-keygen -N '' -f id_rsa" } }

slide-22
SLIDE 22

provisioner

resource "aws_instance" "web" { provisioner "remote-exec" { inline = [ "sudo systemctl disable httpd", ] } }

slide-23
SLIDE 23

provisioner

resource "aws_instance" "web" { provisioner "file" { source = "${path.module}conf/httpd.conf" destination = "/etc/httpd/conf/httpd.conf" } }

slide-24
SLIDE 24

provisioner

resource "aws_instance" "web" { provisioner "file" { ... connection { type = "ssh" user = "developer" port = 2022 } } }

slide-25
SLIDE 25

Terraform Modules

module "rds" { source = "terraform-aws-modules/rds/aws" version = "2.5.0" # insert the 11 required variables here } https://registry.terraform.io/

slide-26
SLIDE 26

Terragrunt

A thin wrapper for Terraform that provides extra tools for working with multiple Terraform modules. For example:

  • Creates remote state and locking resources automatically
  • Passes extra CLI arguments every time you run certain

terraform commands https://github.com/gruntwork-io/terragrunt

slide-27
SLIDE 27

Questions?

slide-28
SLIDE 28

Thank you!

https://a.openalt.cz/53

slide-29
SLIDE 29

aws-vault

A tool to securely store and access AWS credentials in (development) environments.

  • Encrypts AWS keys
  • Provides temporary, one time credentials

https://github.com/99designs/aws-vault

slide-30
SLIDE 30

Terraform Pre-Commit Framework

Automatically, before each commit:

  • Formats Terraform code
  • Updates README.md with the description of:

– terraform input variables – terraform output variables

https://github.com/antonbabenko/pre-commit-terraform