Chicago Hashicorp User Group - Terraform Public Module Registry
Download as PPTX, PDF2 likes255 views
The document discusses an introduction to Terraform best practices. It covers using modules to organize infrastructure code, setting infrastructure variables, formatting code, and improving outputs. The document also discusses Terraform's extensible provider model and public module registry. Examples are provided on deploying infrastructure on AWS and Azure using Terraform.
Chicago Hashicorp User Group - Terraform Public Module Registry
- 3. Agenda ● Introductions ● Terraform Intro ● General Best Practices ● Examples with AWS & Azure ● Public Module Registry
- 4. Who we are Stenio Ferreira Sr. Solutions Engineer @stenio123 [email protected] Adam Cavaliere Sr. Solutions Engineer @AdamCavaliere [email protected]
- 6. Copyright © 2018 HashiCorp 6 Core TERRAFORM CONFIGURATION OPERATOR Infrastructure as code Provider file.tf resource "google_compute_instance" "server" { name = "server" machine_type = "g1-small" zone = "us-central1-a" disk { image = "ubuntu-1404-trusty-v20160114e" } } resource "dnsimple_record" "hello" { domain = "example.com" name = "server" } INFRASTRUCTURE AS CODE
- 7. Copyright © 2018 HashiCorp resource "google_compute_instance" "server" { name = "server" machine_type = "g1-small" zone = "us-central1-a" disk { image = "ubuntu-1404-trusty-v20160114e" } } resource "dnsimple_record" "hello" { domain = "example.com" name = "server" value = "${google_compute_instance.server.network_interface.0.address}" type = "A" } 7 Resources from different providers are declared Infrastructure as code
- 8. Copyright © 2018 HashiCorp resource "google_compute_instance" "server" { name = "server" machine_type = "g1-small" zone = "us-central1-a" disk { image = "ubuntu-1404-trusty-v20160114e" } } resource "dnsimple_record" "hello" { domain = "example.com" name = "server" value = "${google_compute_instance.server.network_interface.0.address}" type = "A" } 8 Compute instance creation would generate an IP address Infrastructure as code
- 9. Copyright © 2018 HashiCorp resource "google_compute_instance" "server" { name = "server" machine_type = "g1-small" zone = "us-central1-a" disk { image = "ubuntu-1404-trusty-v20160114e" } } resource "dnsimple_record" "hello" { domain = "example.com" name = "server" value = "${google_compute_instance.server.network_interface.0.address}" type = "A" } 9 The IP address value is interpolated to be used as a value input for a DNS record Infrastructure as code
- 10. Copyright © 2018 HashiCorp 10 Core Terraform Workflow Provider Plan $ terraform plan + google_compute_instance.server can_ip_forward: "false" … Use Terraform plan to preview infrastructure changes PROVISIONING WORKFLOW terminal OPERATOR TERRAFORM CONFIGURATION
- 11. Copyright © 2018 HashiCorp 11 Core Terraform Workflow Provider PROVISIONING WORKFLOW Apply $ terraform apply … terminal OPERATOR TERRAFORM CONFIGURATION Use Terraform apply to execute provisioning
- 12. Copyright © 2018 HashiCorp 12 Core OPERATOR Extensible Provider Model EXTENSIBLE PROVIDER MODEL Alibaba AWS Azure … … … … F5 Akamai Heroku GitHub Kubernetes Fastly Datadog GCP DNSimple Terraform includes over 100+ providers, 1000+ resources, always more
- 13. Best Practices 1. Modules a. Use shared modules b. Use terraform import to include as many resources as you can (brownfield) 2. Variables a. Isolate environments using variables b. Avoid hardcoding the resources 3. Format terraform codes 4. Improve Terraform output: https://github.com/coinbase/terraform-landscape 5. After Terraform 0.10, remember to make provider explicit to avoid errors 6. State file a. Save it remotely b.Track it using version control
- 14. Modules Publishing module to public registry: https://www.terraform.io/docs/registry/modules/publish.html Networking Outputs: ● VPC ID ● Subnet ID Resources: ● VPC ● Subnet ● Route Tables Vars: ● CIDR prefix ● Region Data Outputs: ● VPC ID ● Subnet ID Resources: ● RDS ● Security Group Vars: ● DB size ● Root password ● Subnet ID ● IP Whitelist ● Reusable blocks of code ● Customized using variables ● Exports outputs
- 15. Copyright © 2018 HashiCorp 15 Core Azure TERRAFORM CONFIGURATION network compute Terraform Module Registry HashiCorp provides the public and freely available UI at registry.terraform.io Module Producer OPERATOR INFRASTRUCTURE AS CODE
- 16. Copyright © 2018 HashiCorp 16 Core Azure TERRAFORM CONFIGURATION network compute Module Producer Terraform Module Registry HashiCorp provides the public and freely available UI at registry.terraform.io Module Consumer OPERATOR INFRASTRUCTURE AS CODE
- 17. Terraform Public Registry Verified vs unverified modules Module verification is currently a manual process restricted to a small group of trusted HashiCorp partners. In the coming months, we'll be expanding verification to enable the broader community to verify their modules. Source
- 18. Demo ● Example of simple deploy utilizing AWS & Azure ● Example of same type of deploy utilizing modules from public registry. ● Module review in Public Registry Code: https://github.com/AdamCavaliere/terraform-demos
- 19. Jobs! Love HashiCorp? Want to Work at HashiCorp? We are hiring! https://www.hashicorp.com/jobs
- 20. Copyright © 2017 HashiCorp Collaboration Governance Provisioning Terraform Enterprise Premium 20 Governance features to scale Terraform from a team to an organization Individuals use OSS Teams use Pro Organizations use Premium Provisioning Provisioning Collaboration OrganizationalComplexity
- 21. Copyright © 2018 HashiCorp 21 Terraform Enterprise