![✓ Use a VCS
✓ Use remote state and access policy
❑ e. g. use a single build server
✓ Avoid user credentials in Terraform code
✓ Naming convention
❑ e. g. "${var.shortname}-{var.env}"
✓ Use VSCode with following extensions:
❑ Terraform [mauve.terraform] by Mikael Olenfalk
❑ Terraform doc snippet [run-at-scale.terraform-doc-
snippets] by Brandon O'Connor
Terraform tips and tricks](https://image.slidesharecdn.com/slideazuredayreloaded20191129terraform-191206095105/85/Provisioning-with-Terraform-AzureDay-Reloaded-25-320.jpg)
Provisioning with Terraform - AzureDay Reloaded
- 1. Effettuare il provisioning su Azure utilizzando Terraform e Azure DevOps GIORGIO LASALA
- 2. Thanks to
- 3. www.linkedin.com/in/giorgiolasala github.com/salem84 Solution Architect @ Engineering Ingegneria Informatica [email protected]
- 4. AGENDA • Infrastructure as Code • Terraform Architecture and Workflow • IaaS provisioning • PaaS provisioning • Terraform with Azure DevOps using YAML • Terraform with Azure DevOps using Plugins • Provisioning SharePoint Farm with Terraform • Provisioning Azure ETL with Terraform
- 5. Once upon a time… (Windows) Azure
- 7. Azure and Command Line
- 8. Infrastructure as Code (IaC) “Infrastructure as Code is the process of managing and provisioning computing infrastructure and its configuration through machine-processable definition files. It treats the infrastructure as a software system, applying software engineering practices to manage changes to the system in a structured, safe way”
- 9. Infrastructure as Code characteristics • Consistency • Treat infrastructure like application code • Single source of truth • Increase repeatability and testability • Idempotent provisioning and configuration • Speed • Decrease provisioning time
- 10. Infrastructure as Code characteristics • Accountability • Rely less on availability of persons to perform tasks • Always know what is changed • Validate infrastructure before deployment • Increased Efficiency • Use proven software development practices for deploying infrastructure • Lowering the costs of infrastructure management
- 12. Core ideas in Terraform • IaC Tool • Open Source • Multiplatform (Windows, Linux, Mac, …) • Multiprovider (+200) cloud and on-premise, but … • Plan validation • HashiCorp Configuration Language (HCL) ~ JSON • Simple model of resource entities with attributes • Stateful lifecycle with CRUD operations • Declarative configuration • Dependencies by inference • Parallel execution
- 14. Terraform flow terraform init Init ApplyPlan Terraform Scripts Terraform State terraform plan –out plan.dat terraform apply plan.dat
- 15. Terminology in Terraform Providers Offer technology integrations and functionality, largely by wrapping third- party APIs (e.g. azurerm) Resources and Data Sources Made available via a Provider, are the building blocks used to codify and manage infrastructure; have a set of configurable attributes and a lifecycle such as create, read, update, delete (e.g. Azure App Service) Made reusable with Modules Provisioner Initiliaze a resource from a local or remote script
- 18. Terraform flow with Azure Init ApplyPlan State file contiene informazioni sensibiliState condiviso Locking dello stato
- 19. Deployment con Azure Pipelines
- 23. Demo
- 24. Joy and pain of Terraform • Declarative language • Not imperative • It’s not ARM • Slower • Not integrated in Azure Management Portal • Provider coverage largely depends on community • State file is critical • Creation, storing and maintenance • Integration with existing infrastructure • Import command is for single resource • Not aware of API rate and resources limits (plan / apply)
- 25. ✓ Use a VCS ✓ Use remote state and access policy ❑ e. g. use a single build server ✓ Avoid user credentials in Terraform code ✓ Naming convention ❑ e. g. "${var.shortname}-{var.env}" ✓ Use VSCode with following extensions: ❑ Terraform [mauve.terraform] by Mikael Olenfalk ❑ Terraform doc snippet [run-at-scale.terraform-doc- snippets] by Brandon O'Connor Terraform tips and tricks
- 26. ✓ https://github.com/shuaibiyy/awesome-terraform ✓ https://28mm.github.io/notes/d3-terraform-graphs Hashicorp Docs and modules ✓ https://www.terraform.io/docs/ ✓ https://registry.terraform.io/ Framework testing ✓ https://github.com/gruntwork-io/terratest Terraform tips and links
- 28. Thank You!!!
- 29. Thanks to