Terraform 0.12 + Terragrunt
2 likes976 views
This document summarizes Anton Babenko's presentation on Terraform 0.12 and Terragrunt. Some key points include: - Terraform 0.12 includes improvements like HCL2 syntax, loops and dynamic blocks that make configurations easier to write and maintain. - Terragrunt is useful for orchestrating Terraform modules and enforcing best practices and standards. - Modules.tf is a tool that can generate Terraform configurations from visual diagrams created in Cloudcraft, potentially providing ready-to-use infrastructure code.
![- [x] Terraform 0.12 - Great! Must have!
- [x] 90% of features are for developers of Terraform modules
- [x] 10% of features are for Terraform users, who should use
solutions by Terraform developers
- [x] Terragrunt - Awesome and still required!
- [x] Terraform developers vs Terraform users
- [ ] What about modules.tf?
@antonbabenko
Summary](https://image.slidesharecdn.com/terragrunt-meetup-january-2020-200217203227/85/Terraform-0-12-Terragrunt-47-320.jpg)
Ad
More Related Content
What's hot (20)
Similar to Terraform 0.12 + Terragrunt (20)
Ad
More from Anton Babenko (13)
Ad
Recently uploaded (20)
Terraform 0.12 + Terragrunt
- 1. Terraform 0.12 + Terragrunt Anton Babenko @antonbabenko January 2020
- 2. Anton Babenko AWS Community Hero / Certified Terraform fanatic since 2015 Organiser of HashiCorp UG, AWS UG, DevOps Norway, DevOpsDays Oslo I 💚 open-source: terraform-community-modules + terraform-aws-modules antonbabenko/pre-commit-terraform — clean code and documentation antonbabenko/modules.tf-lambda — generate Terraform code from visual diagrams antonbabenko/terragrunt-reference-architecture — Terragrunt reference architecture www.terraform-best-practices.com antonbabenko.com — various Terraform and AWS notes @antonbabenko — Twitter, GitHub, Linkedin
- 3. All-things Terraform + AWS + DevOps Consulting Workshops Trainings Mentorship My company: betajob.com My email: [email protected] LinkedIn: https://www.linkedin.com/in/antonbabenko What do I do?
- 4. Collection of open-source Terraform AWS modules supported by the community. More than 7 mil. downloads since September 2017. (VPC, Autoscaling, RDS, Security Groups, ELB, ALB, Redshift, SNS, SQS, IAM, EKS, ECS, TGW…) github.com/terraform-aws-modules registry.terraform.io/modules/terraform-aws-modules @antonbabenko
- 5. 7+ million provisions, 1000+ pull-requests and issues resolved… Become a sponsor — github.com/sponsors/antonbabenko @antonbabenko
- 6. Cloudcraft.co — the best way to draw AWS diagrams @antonbabenko
- 7. cloudcraft.co features • Manage components in browser (EC2 instances, autoscaling groups, RDS, etc) • Connect components • Import live AWS infrastructure • Calculate the budget • Share link to a blueprint • Export as image • Embed drawing to wiki, Confluence, etc @antonbabenko
- 8. Infrastructure as code makes DevOps possible Key benefits: • Treat infrastructure like application code • Always know what changed • Validate infrastructure before deployment https://dzone.com/articles/infrastructure-as-code-the-benefits @antonbabenko
- 9. Agenda Terraform 0.12 What’s new? How to upgrade? Terragrunt modules.tf @antonbabenko
- 10. Write, plan and manage infrastructure as code www.terraform.io @antonbabenko
- 11. Configuration Management Tools Google Cloud Deployment Manager Azure Resource Manager @antonbabenko
- 13. Why Terraform and not AWS CloudFormation, Azure ARM, Google Cloud Deployment Manager? @antonbabenko Terraform supports 250+ providers, has easier syntax (HCL), has native support for modules and remote states, has teamwork related features, is an open-source project Provides a high-level abstraction of infrastructure, unifies the view of resources Supports the modern datacenter (IaaS, PaaS, SaaS) Separates planning from execution (dry-run) Provides a workflow which is technology agnostic Manages anything with an API
- 14. Terraform — universal tool for everything with an API Google G Suite Dropbox files and access New Relic metrics Datadog users and metrics Jira issues Minecraft, or even order Domino’s pizza All Terraform providers — https://www.terraform.io/docs/providers/index.html @antonbabenko
- 16. Terraform 0.12 What does it mean for us? @antonbabenko
- 19. Terraform 0.12 HCL2 — simplified syntax Loops ("for") Dynamic blocks ("for_each") Correct conditional operators (… ? … : …) Extended types of variables Templates in values Links between resources are supported (depends_on everywhere) Read more — https://www.hashicorp.com/blog/announcing-terraform-0-1-2-beta @antonbabenko
- 20. Terraform 0.12 upgrade plan Follow upgrade guides! https://www.terraform.io/upgrade-guides/0-12.html 0.12’s state file is readable in 0.11.14, so you should upgrade gradually Control versions of everything @antonbabenko
- 21. Control Terraform version @antonbabenko https://github.com/tfutils/tfenv
- 22. Set version of Terraform and providers @antonbabenko https://www.terraform.io/docs/configuration/terraform.html
- 24. How to structure Terraform configurations? How to call them? @antonbabenko
- 25. Call Terraform modules Use Terraform modules, because amount of resources and code is increasing How to organize Terraform configurations and invoke them? How to orchestrate modules? @antonbabenko
- 26. All-in-one Good: Declare variables and outputs in fewer places Bad: Large blast radius Everything is blocked at once Impossible to specify dependencies between modules (depends_on) @antonbabenko
- 27. 1-in-1 Good: Smaller blast radius Possible to join invocation Easier and faster to work with Bad: Declare variables and outputs in more places @antonbabenko
- 28. Which way do you group your code? All-in-one or 1-in-1? @antonbabenko
- 30. Correct MFA (Most Frequent Answer): Somewhere in between @antonbabenko
- 31. All-in-one Undefined project scope Fast prototyping and initial development phase Small number of resources & developers Tightly connected resources 1-in-1 Defined project scope Different types of developers can be involved Code reuse is encouraged (across organization and environments) Use Terragrunt @antonbabenko
- 32. What kind of orchestration method do you use? -target Makefile … @antonbabenko
- 34. No really, do not try this at home! @antonbabenko
- 36. Terragrunt resources Terragrunt allows orchestration of Terraform infrastructure modules https://github.com/gruntwork-io/terragrunt https://github.com/antonbabenko/terragrunt-reference-architecture @antonbabenko
- 38. Some of Terragrunt features Assume IAM role (direnv) Before and after hooks Dependencies (apply-all) Dependency (inputs, module arguments) pre-commit, terraform-docs + read more on https://terragrunt.gruntwork.io/ @antonbabenko
- 39. Is there anything bad with Terragrunt? Yes, Terraform Cloud… @antonbabenko
- 40. What about Terraform workspaces? @antonbabenko
- 41. – What is a Terraform workspace? “Workspaces allow the use of multiple states with a single configuration directory.” @antonbabenko
- 42. Problems with Terraform workspaces Terraform Workspaces aren’t infrastructure-as-code friendly. You can’t answer straight from the code: "How many workspaces do you have?" "What infrastructure has been deployed in workspaceX?" "What is the difference between workspaceX and workspaceY?" Introducing complexity almost in all cases. @antonbabenko
- 43. Solution — use re-usable modules instead of workspaces @antonbabenko
- 44. Who are you? Terraform users vs developers @antonbabenko
- 45. Terraform developers Create and maintain Terraform modules (curated modules) Happily using Terraform 0.12 💚 💚 💚 Implement company’s standards (security, encryption, naming, integrations, tagging) Maintain "reference architectures" inside of the company @antonbabenko
- 46. Terraform users (all of us) Use Terraform modules by setting correct values Terraform 0.12 + HCL2 = 💚 Domain experts in certain areas (e.g. backend developers) May not have "Terraform" skills in profile on LinkedIn @antonbabenko
- 48. @antonbabenko
- 49. @antonbabenko
- 50. @antonbabenko
- 51. Infrastructure as code generator — from visual diagrams to Terraform Source code — https://github.com/antonbabenko/modules.tf-lambda Generated infrastructure code — https://github.com/antonbabenko/modules.tf-demo @antonbabenko
- 52. ✓ cloudcraft.co — design, plan and visualize ✓ terraform-aws-modules — building blocks of AWS infrastructure ✓ Terraform — manage infrastructure as code ✓ Terragrunt — orchestrate Terraform configurations @antonbabenko
- 53. 1. Go to cloudcraft.co 2. Sign up, sign in (free account) 3. Draw your AWS infrastructure 4. Click "Export" 5. Click "Terraform code export" Try it yourself! @antonbabenko
- 54. Demo ✓ A picture's worth a thousand words ✓ Design, draw and deploy infrastructure as code ✓ https://asciinema.org/a/32rkyxIBJ2K4taqZLSlKYNDDI @antonbabenko
- 55. modules.tf — generated code ✓ Potentially ready-to-use Terraform configurations ✓ Suits best for bootstrapping ✓ Enforces Terraform best-practices and segregation of duties between Terraform developers and users ✓ Batteries included (terraform-aws-modules, terragrunt, pre-commit- terraform) ✓ 100% free and open-source (https://github.com/antonbabenko/modules.tf- lambda) ✓ Released under MIT license @antonbabenko
- 56. modules.tf — roadmap ✓ Create and maintain more terraform-aws-modules for more AWS services ✓ Integrate modules.tf with VCS, Terraform Cloud or Atlantis ✓ "From Terraform to visual diagrams" ✓ Tell me more… @antonbabenko @antonbabenko
- 57. @antonbabenko
- 58. @antonbabenko
- 59. Thanks! Support me — github.com/sponsors/antonbabenko github.com/antonbabenko twitter.com/antonbabenko